last executing test programs: 1m9.148959563s ago: executing program 3 (id=513): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m8.906851919s ago: executing program 3 (id=516): syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,active_logs=6,background_gc=on,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000003444,smackfsdef=fault_injection,audit,fsuuid=f362c\x0047-7ce8-eaab-0ae6-21\x0015a33,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d5e617461647630002c6f626a5f747970653d6e6f643be1d2491fb1d1f0696e6c696e655f64656e7472792c7063723d3030303030307f003030303030303030303032392c00"], 0x1, 0x5505, &(0x7f0000008040)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") openat(0xffffffffffffff9c, &(0x7f000000d5c0)='./file1\x00', 0xc042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', 0x109142, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xb49, 0x8ffff) fallocate(r0, 0x8, 0x4000, 0x4000) 1m7.453927462s ago: executing program 3 (id=534): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0xc}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m6.400997483s ago: executing program 3 (id=545): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x6, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0xfd, 0x5524, &(0x7f000000af80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000340)) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000001640), 0x4008, &(0x7f00000043c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file1\x00', 0x40, 0x83) readahead(r0, 0x6, 0x1) 1m4.931418106s ago: executing program 3 (id=566): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000300)={0x0, 0xa9f2, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x8, @empty}, 0x1c) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x0, 0x0, 0x1}) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2804c044}], 0x1, 0x40001) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m1.878705826s ago: executing program 3 (id=585): syz_io_uring_setup(0x2a13, &(0x7f0000000100)={0x0, 0xfec9, 0x800, 0x3, 0xf}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1e9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 1m1.38821631s ago: executing program 32 (id=585): syz_io_uring_setup(0x2a13, &(0x7f0000000100)={0x0, 0xfec9, 0x800, 0x3, 0xf}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1e9, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 3.579123591s ago: executing program 0 (id=1115): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000000010505e435ec56865c67240a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000000c000180060003400003"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.940437457s ago: executing program 0 (id=1129): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.646936044s ago: executing program 2 (id=1125): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013af49488ef5372943291891ea3573b90bd550069d334b21a9ff73160e635d438ed31387d37f4ae9538b960d6e6a702db32e123e82a102885356a7fb139ef81a", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)='lx1', 0x3}], 0x1}}], 0x2, 0xc8040) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.645370084s ago: executing program 1 (id=1136): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000600), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.557645706s ago: executing program 4 (id=1126): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) close(r0) 2.497611147s ago: executing program 5 (id=1127): timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000006c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000700)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(&(0x7f0000000740)=[{}], 0x2c, 0xffffffffffbffff8) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) 2.359985571s ago: executing program 4 (id=1128): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1.812062515s ago: executing program 0 (id=1130): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x2200000, &(0x7f0000000440)={[{@discard}, {}, {@quota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@lazytime}]}, 0xb, 0x572, &(0x7f00000008c0)="$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") r0 = open(&(0x7f0000000e40)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) 1.811794785s ago: executing program 5 (id=1131): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000080)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x4e21, 0x800, 0x4e22, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x8000}, {0x1, 0x2000000000000006, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x8004821}, 0x0) 1.811647835s ago: executing program 4 (id=1132): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000000010505e435ec56865c67240a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000000c000180060003400003"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.795794845s ago: executing program 2 (id=1141): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.794941965s ago: executing program 1 (id=1143): timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000006c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000700)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(&(0x7f0000000740)=[{}], 0x2c, 0xffffffffffbffff8) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) 1.304788897s ago: executing program 4 (id=1133): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xaf) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 1.301042977s ago: executing program 0 (id=1134): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pimreg\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000200)='E', 0x1, 0x0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.299878548s ago: executing program 1 (id=1135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1.252066379s ago: executing program 2 (id=1137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0x5, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.165092131s ago: executing program 5 (id=1138): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket(0x2, 0x3, 0xef) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010100, @loopback}}}], 0x20}}], 0x1, 0x4) 1.015041075s ago: executing program 1 (id=1139): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.010416455s ago: executing program 0 (id=1151): syz_mount_image$jfs(&(0x7f00000048c0), &(0x7f0000004900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000004980)=ANY=[], 0x3, 0x5f74, &(0x7f00000049c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000004c100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f000004c140)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f000004c180)='./file1\x00', 0x101042, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f000004e200)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffe82) 924.727377ms ago: executing program 5 (id=1140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000080)='espintcp', 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 625.667445ms ago: executing program 4 (id=1142): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013af49488ef5372943291891ea3573b90bd550069d334b21a9ff73160e635d438ed31387d37f4ae9538b960d6e6a702db32e123e82a102885356a7fb139ef81a", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)='lx1', 0x3}], 0x1}}], 0x2, 0xc8040) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 624.089354ms ago: executing program 2 (id=1154): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 622.835265ms ago: executing program 5 (id=1144): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000600), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 605.889795ms ago: executing program 1 (id=1155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000080)='espintcp', 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 454.682749ms ago: executing program 2 (id=1145): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x6}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 104.747047ms ago: executing program 4 (id=1146): timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000006c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000700)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(&(0x7f0000000740)=[{}], 0x2c, 0xffffffffffbffff8) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) 103.229727ms ago: executing program 1 (id=1159): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013af49488ef5372943291891ea3573b90bd550069d334b21a9ff73160e635d438ed31387d37f4ae9538b960d6e6a702db32e123e82a102885356a7fb139ef81a", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)='lx1', 0x3}], 0x1}}], 0x2, 0xc8040) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 102.020377ms ago: executing program 5 (id=1147): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000000010505e435ec56865c67240a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000000c000180060003400003"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 100.167487ms ago: executing program 2 (id=1160): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'nicvf0\x00', 0x1000}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 0s ago: executing program 0 (id=1148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000b59d0085000000860000001801"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): 56 [ 114.537699][ T4935] syz.1.168 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 114.548721][ T4935] CPU: 0 PID: 4935 Comm: syz.1.168 Not tainted syzkaller #0 [ 114.556148][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.566266][ T4935] Call Trace: [ 114.569600][ T4935] [ 114.572573][ T4935] dump_stack_lvl+0x188/0x24e [ 114.577396][ T4935] ? show_regs_print_info+0x12/0x12 [ 114.582665][ T4935] ? load_image+0x410/0x410 [ 114.587242][ T4935] dump_header+0xd8/0x820 [ 114.591623][ T4935] out_of_memory+0xe9a/0x1220 [ 114.596340][ T4935] ? print_unlock_imbalance_bug+0x160/0x160 [ 114.602359][ T4935] ? mutex_lock_nested+0x10/0x10 [ 114.607345][ T4935] ? unregister_oom_notifier+0x20/0x20 [ 114.612872][ T4935] mem_cgroup_out_of_memory+0x2c0/0x390 [ 114.618504][ T4935] ? mem_cgroup_oom_trylock+0x210/0x210 [ 114.624117][ T4935] ? do_raw_spin_unlock+0x11d/0x230 [ 114.629367][ T4935] try_charge_memcg+0xc9d/0x17c0 [ 114.634353][ T4935] ? _raw_spin_unlock+0x40/0x40 [ 114.639351][ T4935] ? percpu_ref_put+0x180/0x180 [ 114.644252][ T4935] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 114.650030][ T4935] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 114.656103][ T4935] ? percpu_ref_tryget+0x15/0x180 [ 114.661186][ T4935] ? percpu_ref_tryget+0x15/0x180 [ 114.666300][ T4935] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 114.672091][ T4935] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 114.677867][ T4935] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 114.683725][ T4935] obj_cgroup_charge+0x36a/0x620 [ 114.688711][ T4935] ? obj_cgroup_charge+0xe9/0x620 [ 114.693778][ T4935] ? mod_objcg_mlstate+0x320/0x320 [ 114.698935][ T4935] ? percpu_ref_tryget+0x15/0x180 [ 114.704006][ T4935] ? get_obj_cgroup_from_current+0xd0/0x280 [ 114.709945][ T4935] ? __bitmap_weight+0xa8/0xf0 [ 114.714767][ T4935] pcpu_alloc+0x21c/0x16b0 [ 114.719251][ T4935] mem_cgroup_css_alloc+0x255/0x13b0 [ 114.724582][ T4935] cgroup_apply_control_enable+0x3cc/0xb00 [ 114.730447][ T4935] cgroup_mkdir+0xc7f/0xe70 [ 114.735010][ T4935] ? css_task_iter_end+0x280/0x280 [ 114.740179][ T4935] ? kernfs_iop_permission+0x26d/0x350 [ 114.745682][ T4935] ? css_task_iter_end+0x280/0x280 [ 114.750836][ T4935] kernfs_iop_mkdir+0x23d/0x3d0 [ 114.755738][ T4935] vfs_mkdir+0x386/0x570 [ 114.760031][ T4935] do_mkdirat+0x1d8/0x440 [ 114.764436][ T4935] ? vfs_mkdir+0x570/0x570 [ 114.768904][ T4935] __x64_sys_mkdirat+0x85/0x90 [ 114.773715][ T4935] do_syscall_64+0x4c/0xa0 [ 114.778172][ T4935] ? clear_bhb_loop+0x60/0xb0 [ 114.782905][ T4935] ? clear_bhb_loop+0x60/0xb0 [ 114.787633][ T4935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.793586][ T4935] RIP: 0033:0x7f82eb19f559 [ 114.798055][ T4935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.817708][ T4935] RSP: 002b:00007f82ebfd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 114.826209][ T4935] RAX: ffffffffffffffda RBX: 00007f82eb425fa0 RCX: 00007f82eb19f559 [ 114.834219][ T4935] RDX: 0000000000000020 RSI: 0000200000000bc0 RDI: ffffffffffffff9c [ 114.842228][ T4935] RBP: 00007f82eb236b20 R08: 0000000000000000 R09: 0000000000000000 [ 114.850235][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.858247][ T4935] R13: 00007f82eb426038 R14: 00007f82eb425fa0 R15: 00007ffe70a3a288 [ 114.866278][ T4935] [ 114.930770][ T4935] memory: usage 0kB, limit 0kB, failcnt 19 [ 114.936815][ T4935] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 114.964008][ T4935] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 114.993270][ T4935] Memory cgroup stats for /syz1/test: [ 114.993519][ T4935] anon 0 [ 114.993519][ T4935] file 0 [ 114.993519][ T4935] kernel 0 [ 114.993519][ T4935] kernel_stack 0 [ 114.993519][ T4935] pagetables 0 [ 114.993519][ T4935] sec_pagetables 0 [ 114.993519][ T4935] percpu 0 [ 114.993519][ T4935] sock 0 [ 114.993519][ T4935] vmalloc 0 [ 114.993519][ T4935] shmem 0 [ 114.993519][ T4935] zswap 0 [ 114.993519][ T4935] zswapped 0 [ 114.993519][ T4935] file_mapped 0 [ 114.993519][ T4935] file_dirty 0 [ 114.993519][ T4935] file_writeback 0 [ 114.993519][ T4935] swapcached 0 [ 114.993519][ T4935] anon_thp 0 [ 114.993519][ T4935] file_thp 0 [ 114.993519][ T4935] shmem_thp 0 [ 114.993519][ T4935] inactive_anon 0 [ 114.993519][ T4935] active_anon 0 [ 114.993519][ T4935] inactive_file 0 [ 114.993519][ T4935] active_file 0 [ 114.993519][ T4935] unevictable 0 [ 114.993519][ T4935] slab_reclaimable 0 [ 114.993519][ T4935] slab_unreclaimable 0 [ 114.993519][ T4935] slab 0 [ 114.993519][ T4935] workingset_refault_anon 0 [ 115.090034][ T956] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.115450][ T4935] Out of memory and no killable processes... [ 115.268491][ T956] usb 4-1: Using ep0 maxpacket: 32 [ 115.278042][ T956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 115.310316][ T956] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.328257][ T956] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.337810][ T956] usb 4-1: Product: syz [ 115.342663][ T956] usb 4-1: Manufacturer: syz [ 115.347460][ T956] usb 4-1: SerialNumber: syz [ 115.382350][ T956] usb 4-1: config 0 descriptor?? [ 115.392083][ T4930] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.412007][ T956] hub 4-1:0.0: bad descriptor, ignoring hub [ 115.420363][ T956] hub: probe of 4-1:0.0 failed with error -5 [ 115.823979][ T4957] netlink: 27 bytes leftover after parsing attributes in process `syz.0.184'. [ 116.108352][ T4930] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 116.215397][ T4968] device-mapper: ioctl: The device has no table. [ 116.216044][ T4962] device-mapper: thin: Data device (ram9) discard unsupported: Disabling discard passdown. [ 116.257945][ T4962] device-mapper: ioctl: device has been removed from the dev hash table. [ 116.330331][ T4930] usb 4-1: device firmware changed [ 116.339134][ T4342] usb 4-1: USB disconnect, device number 3 [ 116.518320][ T4342] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.720569][ T4342] usb 4-1: Using ep0 maxpacket: 32 [ 116.730800][ T4342] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.778954][ T4342] usb 4-1: string descriptor 0 read error: -22 [ 116.798410][ T4342] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.823940][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.859028][ T4342] usb 4-1: config 0 descriptor?? [ 116.864812][ T4953] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.885945][ T4342] hub 4-1:0.0: bad descriptor, ignoring hub [ 116.905273][ T4342] hub: probe of 4-1:0.0 failed with error -5 [ 117.228499][ T4795] usb 4-1: USB disconnect, device number 4 [ 117.338301][ T4342] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.538335][ T4342] usb 2-1: Using ep0 maxpacket: 32 [ 117.549212][ T4342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.559056][ T4342] usb 2-1: config 46 has an invalid interface number: 149 but max is 0 [ 117.567372][ T4342] usb 2-1: config 46 has no interface number 0 [ 117.595077][ T4342] usb 2-1: config 46 interface 149 altsetting 1 bulk endpoint 0xE has invalid maxpacket 1023 [ 117.618278][ T4342] usb 2-1: config 46 interface 149 altsetting 1 bulk endpoint 0xA has invalid maxpacket 32 [ 117.663670][ T4342] usb 2-1: config 46 interface 149 altsetting 1 endpoint 0x3 has invalid maxpacket 8940, setting to 64 [ 117.707381][ T4342] usb 2-1: config 46 interface 149 has no altsetting 0 [ 117.727247][ T4342] usb 2-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=25.bb [ 117.741729][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.750632][ T4342] usb 2-1: Product: syz [ 117.755157][ T4342] usb 2-1: Manufacturer: syz [ 117.760430][ T4342] usb 2-1: SerialNumber: syz [ 117.779073][ T4989] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.786435][ T4989] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.929951][ T5014] device-mapper: ioctl: The device has no table. [ 117.988914][ T5007] device-mapper: thin: Data device (ram7) discard unsupported: Disabling discard passdown. [ 118.018437][ T5007] device-mapper: ioctl: device has been removed from the dev hash table. [ 118.057910][ T4342] usb 2-1: bad CDC descriptors [ 118.070783][ T4342] usb 2-1: bad CDC descriptors [ 118.094817][ T4342] usb 2-1: USB disconnect, device number 3 [ 118.358658][ T5021] kvm: MONITOR instruction emulated as NOP! [ 119.015823][ T5040] loop5: detected capacity change from 0 to 7 [ 119.032561][ T4755] Dev loop5: unable to read RDB block 7 [ 119.044163][ T4755] loop5: AHDI p1 p2 p4 [ 119.050791][ T4755] loop5: partition table partially beyond EOD, truncated [ 119.076650][ T4755] loop5: p1 start 5439488 is beyond EOD, truncated [ 119.105231][ T4755] loop5: p4 start 3288604672 is beyond EOD, truncated [ 119.130511][ T5040] Dev loop5: unable to read RDB block 7 [ 119.146550][ T5040] loop5: AHDI p1 p2 p4 [ 119.166880][ T5040] loop5: partition table partially beyond EOD, truncated [ 119.197962][ T5040] loop5: p1 start 5439488 is beyond EOD, truncated [ 119.217552][ T5040] loop5: p4 start 3288604672 is beyond EOD, truncated [ 120.527393][ T5064] device-mapper: ioctl: The device has no table. [ 120.539663][ T4352] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.640026][ T5061] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 120.738405][ T4352] usb 2-1: Using ep0 maxpacket: 32 [ 120.748972][ T5061] device-mapper: ioctl: device has been removed from the dev hash table. [ 120.749101][ T4352] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 120.835374][ T4352] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 120.844715][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 120.859243][ T4352] usb 2-1: Product: syz [ 120.863796][ T4352] usb 2-1: Manufacturer: syz [ 120.874555][ T4352] usb 2-1: SerialNumber: syz [ 120.901021][ T4352] usb 2-1: config 0 descriptor?? [ 120.906821][ T5053] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.918156][ T4352] hub 2-1:0.0: bad descriptor, ignoring hub [ 120.926901][ T4352] hub: probe of 2-1:0.0 failed with error -5 [ 121.387210][ T5084] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 121.608739][ T5053] usb 2-1: reset high-speed USB device number 4 using dummy_hcd syzkaller syzkaller login: [ 121.822004][ T5053] usb 2-1: device firmware changed [ 121.842946][ T4352] usb 2-1: USB disconnect, device number 4 [ 121.891632][ T5096] FAULT_INJECTION: forcing a failure. [ 121.891632][ T5096] name failslab, interval 1, probability 0, space 0, times 0 [ 121.908365][ T5096] CPU: 0 PID: 5096 Comm: syz.0.232 Not tainted syzkaller #0 [ 121.915730][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 121.925884][ T5096] Call Trace: [ 121.929208][ T5096] [ 121.932184][ T5096] dump_stack_lvl+0x188/0x24e [ 121.936926][ T5096] ? show_regs_print_info+0x12/0x12 [ 121.942162][ T5096] ? load_image+0x410/0x410 [ 121.946724][ T5096] ? __might_sleep+0xd0/0xd0 [ 121.946728][ T26] audit: type=1326 audit(1792679880.170:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.0.232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 121.947900][ T26] audit: type=1326 audit(1792679880.170:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.0.232" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 121.951345][ T5096] ? __lock_acquire+0x7ea0/0x7ea0 [ 121.951387][ T5096] should_fail_ex+0x390/0x4c0 [ 121.951433][ T5096] should_failslab+0x5/0x20 [ 122.013065][ T5096] slab_pre_alloc_hook+0x59/0x300 [ 122.018113][ T5096] ? __kasan_slab_alloc+0x6b/0x80 [ 122.023162][ T5096] kmem_cache_alloc_node+0x5a/0x310 [ 122.028404][ T5096] ? __alloc_skb+0xf9/0x7d0 [ 122.032965][ T5096] __alloc_skb+0xf9/0x7d0 [ 122.037341][ T5096] audit_log_start+0x15a/0x890 [ 122.042170][ T5096] ? audit_serial+0x30/0x30 [ 122.046726][ T5096] ? __cant_sleep+0x220/0x220 [ 122.051455][ T5096] ? do_seccomp+0xbe6/0xe00 [ 122.055973][ T5096] audit_seccomp+0x5f/0x180 [ 122.060488][ T5096] __seccomp_filter+0xacf/0x1bf0 [ 122.065468][ T5096] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.071491][ T5096] ? __secure_computing+0x2f0/0x2f0 [ 122.076742][ T5096] ? lock_chain_count+0x20/0x20 [ 122.081749][ T5096] ? seccomp_attach_filter+0xafd/0xc10 [ 122.087266][ T5096] ? _raw_spin_unlock_irq+0x1f/0x40 [ 122.092504][ T5096] ? lockdep_hardirqs_on+0x94/0x140 [ 122.097745][ T5096] ? do_seccomp+0xcc3/0xe00 [ 122.102277][ T5096] ? lock_chain_count+0x20/0x20 [ 122.107150][ T5096] ? __secure_computing+0x10d/0x2f0 [ 122.112375][ T5096] syscall_trace_enter+0xab/0x150 [ 122.117427][ T5096] do_syscall_64+0x24/0xa0 [ 122.121861][ T5096] ? clear_bhb_loop+0x60/0xb0 [ 122.126660][ T5096] ? clear_bhb_loop+0x60/0xb0 [ 122.131387][ T5096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.137338][ T5096] RIP: 0033:0x7fe1bc99f559 [ 122.141797][ T5096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.161435][ T5096] RSP: 002b:00007fe1bd8550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.169865][ T5096] RAX: ffffffffffffffda RBX: 00007fe1bcc25fa8 RCX: 00007fe1bc99f559 [ 122.177854][ T5096] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe1bcc25fac [ 122.185856][ T5096] RBP: 00007fe1bcc25fa0 R08: 00318d6b8a011b40 R09: 0000000000000000 [ 122.193896][ T5096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.201921][ T5096] R13: 00007fe1bcc26038 R14: 00007fff1b8e74e0 R15: 00007fff1b8e75c8 [ 122.209943][ T5096] [ 122.219048][ T5096] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 122.226739][ T5096] audit: out of memory in audit_log_start [ 122.278479][ T4352] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.474033][ T4352] usb 2-1: Using ep0 maxpacket: 32 [ 122.490812][ T4352] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 122.523366][ T4352] usb 2-1: string descriptor 0 read error: -22 [ 122.534130][ T4352] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 122.546630][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 122.564678][ T4352] usb 2-1: config 0 descriptor?? [ 122.572215][ T5082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.587232][ T4352] hub 2-1:0.0: bad descriptor, ignoring hub [ 122.595030][ T4352] hub: probe of 2-1:0.0 failed with error -5 [ 122.604629][ T4351] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.776297][ T5114] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 122.798357][ T4351] usb 5-1: Using ep0 maxpacket: 16 [ 122.829530][ T4351] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 122.837796][ T4351] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.849010][ T4351] usb 5-1: config 0 has no interface number 0 [ 122.858853][ T4351] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 122.867965][ T4351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.876463][ T4351] usb 5-1: Product: syz [ 122.880821][ T4351] usb 5-1: Manufacturer: syz [ 122.885471][ T4351] usb 5-1: SerialNumber: syz [ 122.915183][ T4351] usb 5-1: config 0 descriptor?? [ 122.931937][ T4351] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 122.941322][ T4351] usb 5-1: No valid video chain found. [ 123.024470][ T4795] usb 2-1: USB disconnect, device number 5 [ 123.134103][ T4351] usb 5-1: USB disconnect, device number 5 [ 123.810081][ T5134] team0: Port device team_slave_1 removed [ 123.826213][ T4342] libceph: connect (1)[c::]:6789 error -101 [ 123.865963][ T4342] libceph: mon0 (1)[c::]:6789 connect error [ 123.898995][ T4342] libceph: connect (1)[c::]:6789 error -101 [ 123.905112][ T4342] libceph: mon0 (1)[c::]:6789 connect error [ 123.922149][ T4342] libceph: connect (1)[c::]:6789 error -101 [ 123.929392][ T4342] libceph: mon0 (1)[c::]:6789 connect error [ 124.190260][ T4342] libceph: connect (1)[c::]:6789 error -101 [ 124.196381][ T4342] libceph: mon0 (1)[c::]:6789 connect error [ 124.203277][ T5157] device-mapper: ioctl: The device has no table. [ 124.220573][ T4342] libceph: connect (1)[c::]:6789 error -101 [ 124.226683][ T4342] libceph: mon0 (1)[c::]:6789 connect error [ 124.274344][ T5150] device-mapper: thin: Data device (ram1) discard unsupported: Disabling discard passdown. [ 124.305693][ T5150] device-mapper: ioctl: device has been removed from the dev hash table. [ 124.579702][ T5168] loop2: detected capacity change from 0 to 2048 [ 124.604055][ T5136] ceph: No mds server is up or the cluster is laggy [ 124.623206][ T5143] ceph: No mds server is up or the cluster is laggy [ 124.748843][ T4342] libceph: connect (1)[c::]:6789 error -101 [ 124.754940][ T4342] libceph: mon0 (1)[c::]:6789 connect error [ 124.765355][ T5168] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.815924][ T4342] libceph: connect (1)[c::]:6789 error -101 [ 124.839395][ T5175] FAULT_INJECTION: forcing a failure. [ 124.839395][ T5175] name fail_futex, interval 1, probability 0, space 0, times 1 [ 124.871358][ T4342] libceph: mon0 (1)[c::]:6789 connect error [ 124.939088][ T5175] CPU: 0 PID: 5175 Comm: syz.0.257 Not tainted syzkaller #0 [ 124.946779][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.956884][ T5175] Call Trace: [ 124.960221][ T5175] [ 124.963254][ T5175] dump_stack_lvl+0x188/0x24e [ 124.967997][ T5175] ? show_regs_print_info+0x12/0x12 [ 124.973269][ T5175] ? load_image+0x410/0x410 [ 124.977838][ T5175] ? copy_user_enhanced_fast_string+0x27/0x40 [ 124.984015][ T5175] should_fail_ex+0x390/0x4c0 [ 124.988765][ T5175] get_futex_key+0x1b1/0x1000 [ 124.993507][ T5175] ? futex_setup_timer+0xc0/0xc0 [ 124.998501][ T5175] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.004548][ T5175] futex_wake+0x123/0x4f0 [ 125.008938][ T5175] ? lockdep_hardirqs_on+0x94/0x140 [ 125.014193][ T5175] ? futex_wake_mark+0x150/0x150 [ 125.019195][ T5175] do_futex+0x2e2/0x320 [ 125.023401][ T5175] ? _copy_to_user+0xea/0x130 [ 125.028412][ T5175] ? __ia32_sys_get_robust_list+0x100/0x100 [ 125.034367][ T5175] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 125.040326][ T5175] ? _raw_spin_unlock+0x40/0x40 [ 125.045252][ T5175] __se_sys_futex+0x381/0x410 [ 125.049995][ T5175] ? __x64_sys_futex+0xf0/0xf0 [ 125.054824][ T5175] ? __x64_sys_futex+0x1d/0xf0 [ 125.059662][ T5175] do_syscall_64+0x4c/0xa0 [ 125.064137][ T5175] ? clear_bhb_loop+0x60/0xb0 [ 125.068878][ T5175] ? clear_bhb_loop+0x60/0xb0 [ 125.073652][ T5175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.079613][ T5175] RIP: 0033:0x7fe1bc99f559 [ 125.084083][ T5175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.103754][ T5175] RSP: 002b:00007fe1bd8550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.112240][ T5175] RAX: ffffffffffffffda RBX: 00007fe1bcc25fa8 RCX: 00007fe1bc99f559 [ 125.120409][ T5175] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe1bcc25fac [ 125.128436][ T5175] RBP: 00007fe1bcc25fa0 R08: 002e927b409d146a R09: 0000000000000000 [ 125.136462][ T5175] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 125.144757][ T5175] R13: 00007fe1bcc26038 R14: 00007fff1b8e74e0 R15: 00007fff1b8e75c8 [ 125.152809][ T5175] [ 125.161851][ T5176] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 125.199288][ T5176] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.278554][ T5176] EXT4-fs (loop2): This should not happen!! Data will be lost [ 125.278554][ T5176] [ 125.308539][ T5176] EXT4-fs (loop2): Total free blocks count 0 [ 125.345444][ T5176] EXT4-fs (loop2): Free/Dirty block details [ 125.365412][ T5176] EXT4-fs (loop2): free_blocks=66060288 [ 125.385650][ T5176] EXT4-fs (loop2): dirty_blocks=32 [ 125.405842][ T5176] EXT4-fs (loop2): Block reservation details [ 125.418934][ T5176] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 125.504654][ T4366] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 125.574930][ T5185] loop0: detected capacity change from 0 to 2048 [ 125.619365][ T5185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.644510][ T5185] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.701432][ T5185] fs-verity: sha512 using implementation "sha512-avx2" [ 125.951128][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 126.656140][ T5196] loop3: detected capacity change from 0 to 32768 [ 126.754865][ T5196] XFS (loop3): Mounting V5 Filesystem [ 126.829615][ T5196] XFS (loop3): Ending clean mount [ 126.844832][ T5196] XFS (loop3): Quotacheck needed: Please wait. [ 126.933463][ T5196] XFS (loop3): Quotacheck: Done. [ 127.025800][ T4280] XFS (loop3): Unmounting Filesystem [ 127.637730][ T5220] loop1: detected capacity change from 0 to 32768 [ 127.734035][ T5248] loop2: detected capacity change from 0 to 512 [ 127.778131][ T5220] XFS (loop1): Mounting V5 Filesystem [ 127.842462][ T5255] loop3: detected capacity change from 0 to 1024 [ 127.871132][ T5248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.952412][ T5255] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.961368][ T5255] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.973980][ T5220] XFS (loop1): Ending clean mount [ 128.175093][ T5265] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.274: Freeing blocks not in datazone - block = 0, count = 16 [ 128.329082][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 128.485405][ T9] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set [ 128.509268][ T4278] XFS (loop1): Unmounting Filesystem [ 128.589468][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 128.641450][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.641450][ T9] [ 128.688803][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 128.694880][ T9] EXT4-fs (loop3): Free/Dirty block details [ 128.746614][ T9] EXT4-fs (loop3): free_blocks=16 [ 128.757703][ T9] EXT4-fs (loop3): dirty_blocks=16 [ 128.777818][ T9] EXT4-fs (loop3): Block reservation details [ 128.798161][ T9] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 128.840818][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 130.249813][ T5331] Illegal XDP return value 4294967277 on prog (id 34) dev syz_tun, expect packet loss! [ 130.478056][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'. [ 130.908343][ T4352] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.098459][ T4352] usb 3-1: Using ep0 maxpacket: 8 [ 131.105788][ T4352] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.162801][ T4352] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 131.210570][ T4352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.256839][ T4352] usb 3-1: config 0 descriptor?? [ 131.289699][ T4352] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 131.532803][ T5337] loop1: detected capacity change from 0 to 40427 [ 131.580192][ T5337] F2FS-fs (loop1): invalid crc value [ 131.612703][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 131.642534][ T5337] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.796242][ T5337] F2FS-fs (loop1): Start checkpoint disabled! [ 131.807082][ T5369] Invalid ELF header magic: != ELF [ 131.857666][ T5337] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 132.008123][ T5372] loop0: detected capacity change from 0 to 1024 [ 132.045926][ T5372] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.147983][ T5372] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.196772][ T26] audit: type=1800 audit(1792679890.450:9): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.310" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 132.233113][ T5372] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 132.257634][ T5372] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.329446][ T5376] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 704 with error 28 [ 132.344731][ T5376] EXT4-fs (loop0): This should not happen!! Data will be lost [ 132.344731][ T5376] [ 132.354960][ T5376] EXT4-fs (loop0): Total free blocks count 0 [ 132.361159][ T5376] EXT4-fs (loop0): Free/Dirty block details [ 132.368861][ T5376] EXT4-fs (loop0): free_blocks=20480 [ 132.374342][ T5376] EXT4-fs (loop0): dirty_blocks=704 [ 132.379981][ T5376] EXT4-fs (loop0): Block reservation details [ 132.386106][ T5376] EXT4-fs (loop0): i_reserved_data_blocks=44 [ 132.415305][ T5378] loop3: detected capacity change from 0 to 164 [ 132.466659][ T5378] rock: directory entry would overflow storage [ 132.498898][ T4352] gspca_vc032x: reg_w err -71 [ 132.503750][ T4352] vc032x: probe of 3-1:0.0 failed with error -71 [ 132.521868][ T5378] rock: sig=0x66, size=4, remaining=3 [ 132.534485][ T4352] usb 3-1: USB disconnect, device number 6 [ 132.566058][ T5378] rock: directory entry would overflow storage [ 132.594851][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 132.608485][ T5378] rock: sig=0x66, size=4, remaining=3 [ 132.812410][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.819330][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.208770][ T5394] device pim6reg1 entered promiscuous mode [ 135.145304][ T5430] loop1: detected capacity change from 0 to 131072 [ 135.151916][ C0] sched: RT throttling activated [ 135.179199][ T5430] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 135.187147][ T5430] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 135.197500][ T5430] F2FS-fs (loop1): Test dummy encryption mode enabled [ 135.206882][ T5430] F2FS-fs (loop1): invalid crc value [ 135.232043][ T5430] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.272643][ T5430] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 135.296878][ T5430] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 135.307259][ T5430] F2FS-fs (loop1): Start checkpoint disabled! [ 135.348983][ T5430] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 135.356186][ T5430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 135.664036][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 135.686305][ T5457] FAULT_INJECTION: forcing a failure. [ 135.686305][ T5457] name failslab, interval 1, probability 0, space 0, times 0 [ 135.747488][ T5457] CPU: 1 PID: 5457 Comm: syz.2.343 Not tainted syzkaller #0 [ 135.754914][ T5457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.765024][ T5457] Call Trace: [ 135.768470][ T5457] [ 135.771446][ T5457] dump_stack_lvl+0x188/0x24e [ 135.776191][ T5457] ? show_regs_print_info+0x12/0x12 [ 135.781445][ T5457] ? load_image+0x410/0x410 [ 135.786012][ T5457] ? __might_sleep+0xd0/0xd0 [ 135.790657][ T5457] ? __lock_acquire+0x7ea0/0x7ea0 [ 135.795744][ T5457] should_fail_ex+0x390/0x4c0 [ 135.800489][ T5457] should_failslab+0x5/0x20 [ 135.805041][ T5457] slab_pre_alloc_hook+0x59/0x300 [ 135.810123][ T5457] ? prog_array_map_alloc+0x4d/0x1f0 [ 135.815568][ T5457] __kmem_cache_alloc_node+0x4f/0x270 [ 135.821176][ T5457] ? prog_array_map_alloc+0x4d/0x1f0 [ 135.826518][ T5457] kmalloc_trace+0x26/0xe0 [ 135.831013][ T5457] prog_array_map_alloc+0x4d/0x1f0 [ 135.836186][ T5457] map_create+0x524/0xff0 [ 135.840573][ T5457] ? security_bpf+0x7a/0xa0 [ 135.845111][ T5457] __sys_bpf+0x38b/0x780 [ 135.849402][ T5457] ? bpf_link_show_fdinfo+0x380/0x380 [ 135.854839][ T5457] ? lock_chain_count+0x20/0x20 [ 135.859755][ T5457] __x64_sys_bpf+0x78/0x90 [ 135.864212][ T5457] do_syscall_64+0x4c/0xa0 [ 135.868663][ T5457] ? clear_bhb_loop+0x60/0xb0 [ 135.873400][ T5457] ? clear_bhb_loop+0x60/0xb0 [ 135.878107][ T5457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.884050][ T5457] RIP: 0033:0x7fb6e5d9f559 [ 135.888611][ T5457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.908265][ T5457] RSP: 002b:00007fb6e6d0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.916737][ T5457] RAX: ffffffffffffffda RBX: 00007fb6e6025fa0 RCX: 00007fb6e5d9f559 [ 135.924737][ T5457] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000000 [ 135.932765][ T5457] RBP: 00007fb6e5e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.940766][ T5457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.948801][ T5457] R13: 00007fb6e6026038 R14: 00007fb6e6025fa0 R15: 00007ffd5bae3b28 [ 135.956813][ T5457] [ 136.942062][ T5489] "syz.0.357" (5489) uses obsolete ecb(arc4) skcipher [ 137.211705][ T5494] x86/PAT: syz.0.360:5494 freeing invalid memtype [mem 0xfe000000-0xfe00efff] [ 137.475714][ T5502] loop2: detected capacity change from 0 to 2048 [ 137.536201][ T5502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.743295][ T5518] loop3: detected capacity change from 0 to 8 [ 137.795976][ T5520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.370'. [ 137.854683][ T5518] SQUASHFS error: lzo decompression failed, data probably corrupt [ 137.897345][ T5518] SQUASHFS error: Failed to read block 0x91: -5 [ 137.941311][ T5518] SQUASHFS error: Unable to read metadata cache entry [8f] [ 137.954980][ T26] audit: type=1326 audit(1792679896.210:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 137.992132][ T5518] SQUASHFS error: Unable to read inode 0x11f [ 138.016600][ T26] audit: type=1326 audit(1792679896.240:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 138.048825][ T5524] loop2: detected capacity change from 0 to 128 [ 138.060086][ T26] audit: type=1326 audit(1792679896.240:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 138.125734][ T26] audit: type=1326 audit(1792679896.240:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 138.145866][ T5524] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 138.150312][ T26] audit: type=1326 audit(1792679896.240:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 138.182646][ T26] audit: type=1326 audit(1792679896.240:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 138.207031][ T26] audit: type=1326 audit(1792679896.240:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 138.240807][ T26] audit: type=1326 audit(1792679896.240:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 138.279845][ T5524] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.328826][ T26] audit: type=1326 audit(1792679896.240:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 138.382384][ T26] audit: type=1326 audit(1792679896.240:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.0.371" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe1bc99f559 code=0x7ffc0000 [ 138.448439][ T5524] syz.2.372 (pid 5524) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 138.462644][ T5535] FAULT_INJECTION: forcing a failure. [ 138.462644][ T5535] name failslab, interval 1, probability 0, space 0, times 0 [ 138.496379][ T5535] CPU: 0 PID: 5535 Comm: syz.3.375 Not tainted syzkaller #0 [ 138.503761][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.513874][ T5535] Call Trace: [ 138.517229][ T5535] [ 138.520247][ T5535] dump_stack_lvl+0x188/0x24e [ 138.525003][ T5535] ? show_regs_print_info+0x12/0x12 [ 138.530260][ T5535] ? load_image+0x410/0x410 [ 138.534829][ T5535] ? __might_sleep+0xd0/0xd0 [ 138.539477][ T5535] ? __lock_acquire+0x7ea0/0x7ea0 [ 138.544597][ T5535] should_fail_ex+0x390/0x4c0 [ 138.549353][ T5535] should_failslab+0x5/0x20 [ 138.553908][ T5535] slab_pre_alloc_hook+0x59/0x300 [ 138.558991][ T5535] ? __kernfs_new_node+0xa6/0x7f0 [ 138.564100][ T5535] ? rcu_is_watching+0x11/0xa0 [ 138.569022][ T5535] kmem_cache_alloc+0x56/0x2f0 [ 138.573851][ T5535] ? __kernfs_new_node+0xe1/0x7f0 [ 138.578981][ T5535] __kernfs_new_node+0xe1/0x7f0 [ 138.583894][ T5535] ? vsnprintf+0x1b22/0x1c20 [ 138.588559][ T5535] ? kernfs_new_node+0x250/0x250 [ 138.593563][ T5535] ? snprintf+0xe5/0x140 [ 138.597887][ T5535] ? vscnprintf+0x80/0x80 [ 138.602283][ T5535] kernfs_new_node+0x148/0x250 [ 138.607370][ T5535] __kernfs_create_file+0x47/0x2e0 [ 138.612553][ T5535] cgroup_addrm_files+0x80c/0xd50 [ 138.617671][ T5535] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 138.623894][ T5535] ? mark_lock+0x94/0x320 [ 138.628307][ T5535] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.634367][ T5535] ? __local_bh_enable_ip+0x136/0x1c0 [ 138.639802][ T5535] ? lockdep_hardirqs_on+0x94/0x140 [ 138.645084][ T5535] css_populate_dir+0x157/0x3b0 [ 138.649147][ T4286] Bluetooth: hci5: command 0x1003 tx timeout [ 138.649973][ T5535] cgroup_apply_control_enable+0x641/0xb00 [ 138.661986][ T4274] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 138.668292][ T5535] cgroup_mkdir+0xc7f/0xe70 [ 138.668340][ T5535] ? css_task_iter_end+0x280/0x280 [ 138.678179][ T5535] ? kernfs_iop_permission+0x26d/0x350 [ 138.683697][ T5535] ? css_task_iter_end+0x280/0x280 [ 138.688865][ T5535] kernfs_iop_mkdir+0x23d/0x3d0 [ 138.693786][ T5535] vfs_mkdir+0x386/0x570 [ 138.698176][ T5535] do_mkdirat+0x1d8/0x440 [ 138.702561][ T5535] ? vfs_mkdir+0x570/0x570 [ 138.707045][ T5535] __x64_sys_mkdirat+0x85/0x90 [ 138.711895][ T5535] do_syscall_64+0x4c/0xa0 [ 138.716370][ T5535] ? clear_bhb_loop+0x60/0xb0 [ 138.721108][ T5535] ? clear_bhb_loop+0x60/0xb0 [ 138.725941][ T5535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.731892][ T5535] RIP: 0033:0x7f31c979f559 [ 138.736382][ T5535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.756140][ T5535] RSP: 002b:00007f31ca598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 138.764622][ T5535] RAX: ffffffffffffffda RBX: 00007f31c9a25fa0 RCX: 00007f31c979f559 [ 138.772646][ T5535] RDX: 00000000000001ff RSI: 0000200000000fc0 RDI: ffffffffffffff9c [ 138.780666][ T5535] RBP: 00007f31c9836b20 R08: 0000000000000000 R09: 0000000000000000 [ 138.788682][ T5535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.796877][ T5535] R13: 00007f31c9a26038 R14: 00007f31c9a25fa0 R15: 00007ffcdbf3a258 [ 138.805094][ T5535] [ 138.833121][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 138.975145][ T5535] cgroup: cgroup_addrm_files: failed to add bfq.idle_time, err=-12 [ 139.161385][ T5548] input: syz0 as /devices/virtual/input/input7 [ 139.333192][ T5555] gadgetfs: bound to dummy_udc driver [ 139.438514][ T5559] netlink: 14 bytes leftover after parsing attributes in process `syz.3.384'. [ 139.818330][ T4385] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.026857][ T4385] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.057021][ T4385] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 140.094680][ T4385] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 140.127084][ T4385] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 140.155574][ T5580] loop2: detected capacity change from 0 to 128 [ 140.167428][ T4385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.261006][ T5579] rxe_eth0 speed is unknown, defaulting to 1000 [ 140.340794][ T5580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.398351][ T5580] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.787016][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 140.792128][ T4385] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 140.827379][ T4385] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 140.864408][ T4385] cxacru: probe of 2-1:1.0 failed with error -71 [ 140.908039][ T4385] usb 2-1: USB disconnect, device number 6 [ 141.860182][ T5610] syz.3.405 uses obsolete (PF_INET,SOCK_PACKET) [ 142.340295][ T5603] loop0: detected capacity change from 0 to 32768 [ 142.496079][ T5603] XFS (loop0): Mounting V5 Filesystem [ 142.515981][ T5606] loop1: detected capacity change from 0 to 40427 [ 142.597021][ T5603] XFS (loop0): Ending clean mount [ 142.618266][ T5606] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 142.625008][ T5606] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.703455][ T5606] F2FS-fs (loop1): invalid crc value [ 142.717951][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 142.772954][ T5606] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.983604][ T5606] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.008320][ T5606] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.113582][ T4273] XFS (loop0): Unmounting Filesystem [ 143.135332][ T26] kauditd_printk_skb: 192 callbacks suppressed [ 143.135348][ T26] audit: type=1804 audit(1792679901.390:211): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.403" name="/newroot/66/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 143.553314][ T4278] syz-executor: attempt to access beyond end of device [ 143.553314][ T4278] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.852975][ T5648] loop2: detected capacity change from 0 to 16 [ 143.882915][ T5649] Zero length message leads to an empty skb [ 143.950337][ T5648] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.423898][ T5661] loop1: detected capacity change from 0 to 512 [ 144.577766][ T5661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.587182][ T5661] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.819621][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 145.655815][ T5701] loop3: detected capacity change from 0 to 512 [ 145.708731][ T5701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.719019][ T5701] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.737288][ T5701] EXT4-fs (loop3): shut down requested (0) [ 145.817102][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 146.242627][ T5720] bond0: invalid NS target :: specified for addition [ 146.288316][ T5720] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 146.676569][ T5695] loop2: detected capacity change from 0 to 32768 [ 146.735047][ T5695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.435 (5695) [ 146.858391][ T5695] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.953983][ T5695] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 147.011969][ T5695] BTRFS info (device loop2): setting nodatasum [ 147.057601][ T5695] BTRFS info (device loop2): force zlib compression, level 3 [ 147.108656][ T5695] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 147.198306][ T5695] BTRFS info (device loop2): use lzo compression, level 0 [ 147.205526][ T5695] BTRFS info (device loop2): turning on flush-on-commit [ 147.294455][ T5695] BTRFS info (device loop2): enabling auto defrag [ 147.308255][ T5695] BTRFS info (device loop2): max_inline at 4096 [ 147.316602][ T4342] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.389004][ T5695] BTRFS info (device loop2): using free space tree [ 147.536140][ T4342] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 147.546710][ T4342] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 147.555716][ T4342] usb 1-1: Product: syz [ 147.560110][ T4342] usb 1-1: Manufacturer: syz [ 147.564896][ T4342] usb 1-1: SerialNumber: syz [ 147.586509][ T4342] usb 1-1: config 0 descriptor?? [ 147.600033][ T4342] ch341 1-1:0.0: ch341-uart converter detected [ 147.627153][ T5695] BTRFS info (device loop2): enabling ssd optimizations [ 148.066586][ T4276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.250129][ T5792] netlink: 'syz.3.469': attribute type 30 has an invalid length. [ 148.309515][ T5792] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.318962][ T5792] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.327726][ T5792] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.336632][ T5792] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.460417][ T5803] overlayfs: failed to clone upperpath [ 148.486564][ T5792] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.496152][ T5792] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.505180][ T5792] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.514209][ T5792] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.606328][ T4342] ch341-uart ttyUSB0: break control not supported, using simulated break [ 148.641910][ T4342] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 148.667359][ T4342] usb 1-1: USB disconnect, device number 5 [ 148.711472][ T4342] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 148.730822][ T4342] ch341 1-1:0.0: device disconnected [ 149.255131][ T5818] loop1: detected capacity change from 0 to 512 [ 149.354756][ T5820] FAULT_INJECTION: forcing a failure. [ 149.354756][ T5820] name failslab, interval 1, probability 0, space 0, times 0 [ 149.378279][ T5820] CPU: 1 PID: 5820 Comm: syz.0.476 Not tainted syzkaller #0 [ 149.385661][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 149.395767][ T5820] Call Trace: [ 149.399097][ T5820] [ 149.402075][ T5820] dump_stack_lvl+0x188/0x24e [ 149.406819][ T5820] ? show_regs_print_info+0x12/0x12 [ 149.412080][ T5820] ? load_image+0x410/0x410 [ 149.416659][ T5820] ? __might_sleep+0xd0/0xd0 [ 149.421305][ T5820] ? __lock_acquire+0x7ea0/0x7ea0 [ 149.426407][ T5820] should_fail_ex+0x390/0x4c0 [ 149.431173][ T5820] should_failslab+0x5/0x20 [ 149.435730][ T5820] slab_pre_alloc_hook+0x59/0x300 [ 149.440898][ T5820] ? iovec_from_user+0x83/0x360 [ 149.445821][ T5820] __kmem_cache_alloc_node+0x4f/0x270 [ 149.451252][ T5820] ? iovec_from_user+0x83/0x360 [ 149.456175][ T5820] __kmalloc+0xa3/0x240 [ 149.460384][ T5820] iovec_from_user+0x83/0x360 [ 149.465134][ T5820] __import_iovec+0x6c/0x510 [ 149.469805][ T5820] import_iovec+0x6f/0xa0 [ 149.474286][ T5820] do_pwritev+0x1fb/0x3a0 [ 149.478676][ T5820] ? do_preadv+0x390/0x390 [ 149.483213][ T5820] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.489269][ T5820] ? lock_chain_count+0x20/0x20 [ 149.494190][ T5820] ? lockdep_hardirqs_on+0x94/0x140 [ 149.499453][ T5820] ? __x64_sys_pwritev2+0xba/0x100 [ 149.504614][ T5820] do_syscall_64+0x4c/0xa0 [ 149.509085][ T5820] ? clear_bhb_loop+0x60/0xb0 [ 149.513828][ T5820] ? clear_bhb_loop+0x60/0xb0 [ 149.518567][ T5820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.524521][ T5820] RIP: 0033:0x7fe1bc99f559 [ 149.528982][ T5820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.548683][ T5820] RSP: 002b:00007fe1bd855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 149.557173][ T5820] RAX: ffffffffffffffda RBX: 00007fe1bcc25fa0 RCX: 00007fe1bc99f559 [ 149.565198][ T5820] RDX: 000000000000001c RSI: 0000200000000ac0 RDI: 0000000000000003 [ 149.573226][ T5820] RBP: 00007fe1bca36b20 R08: 0000000000000000 R09: 0000000000000022 [ 149.581250][ T5820] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 149.589280][ T5820] R13: 00007fe1bcc26038 R14: 00007fe1bcc25fa0 R15: 00007fff1b8e75c8 [ 149.597327][ T5820] [ 149.628875][ T5818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 149.659227][ T5818] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.779090][ T5818] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.474: corrupted inode contents [ 149.824623][ T5818] EXT4-fs (loop1): Remounting filesystem read-only [ 149.839212][ T5818] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz.1.474: mark_inode_dirty error [ 149.889528][ T5818] EXT4-fs (loop1): Remounting filesystem read-only [ 149.896288][ T5818] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.474: corrupted inode contents [ 149.913229][ T5832] loop0: detected capacity change from 0 to 2048 [ 149.957987][ T5818] EXT4-fs (loop1): Remounting filesystem read-only [ 149.969036][ T5827] rxe_eth0 speed is unknown, defaulting to 1000 [ 150.000210][ T5818] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.474: mark_inode_dirty error [ 150.014260][ T5832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.028403][ T5832] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.081241][ T5838] jffs2: notice: (5838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 150.104022][ T5818] EXT4-fs (loop1): Remounting filesystem read-only [ 150.189730][ T5830] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.474: corrupted inode contents [ 150.275303][ T5830] EXT4-fs (loop1): Remounting filesystem read-only [ 150.308946][ T5830] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz.1.474: mark_inode_dirty error [ 150.338891][ T5830] EXT4-fs (loop1): Remounting filesystem read-only [ 150.345698][ T5830] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.474: corrupted inode contents [ 150.390883][ T5830] EXT4-fs (loop1): Remounting filesystem read-only [ 150.398660][ T5833] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.474: corrupted inode contents [ 150.475320][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 150.501651][ T5833] EXT4-fs (loop1): Remounting filesystem read-only [ 150.515735][ T5833] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.474: mark_inode_dirty error [ 150.537464][ T5833] EXT4-fs (loop1): Remounting filesystem read-only [ 150.565949][ T5833] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 151.122983][ T5872] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 151.465871][ T5878] loop0: detected capacity change from 0 to 512 [ 151.585413][ T5878] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 151.625661][ T5878] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.664748][ T5869] loop3: detected capacity change from 0 to 32768 [ 151.708479][ T5869] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.489 (5869) [ 151.724145][ T5864] loop1: detected capacity change from 0 to 32768 [ 151.730999][ T5878] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.798341][ T5869] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 151.828323][ T5869] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 151.887069][ T5869] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 151.913793][ T5864] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 151.922902][ T5869] BTRFS info (device loop3): turning on async discard [ 151.930910][ T5869] BTRFS info (device loop3): using free space tree [ 152.006086][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 152.028682][ T5864] JBD2: Ignoring recovery information on journal [ 152.139912][ T5864] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 152.367681][ T5869] BTRFS info (device loop3): enabling ssd optimizations [ 152.502803][ T4280] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 152.524893][ T5910] (syz.1.488,5910,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 152.766781][ T5884] loop2: detected capacity change from 0 to 32768 [ 152.855665][ T26] audit: type=1800 audit(1792679911.110:212): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 152.922495][ T4278] ocfs2: Unmounting device (7,1) on (node local) [ 153.042197][ T5920] syz.3.498[5920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.042405][ T5920] syz.3.498[5920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.443918][ T5916] team0: Port device team_slave_0 removed [ 153.953601][ T5941] netlink: 'syz.3.509': attribute type 4 has an invalid length. [ 153.993632][ T5941] netlink: 'syz.3.509': attribute type 4 has an invalid length. [ 154.175598][ T5945] device bridge1 entered promiscuous mode [ 155.198268][ T4795] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.207956][ T5960] loop3: detected capacity change from 0 to 40427 [ 155.241293][ T5960] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 155.279773][ T5960] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 155.307661][ T5960] F2FS-fs (loop3): invalid crc value [ 155.346758][ T5960] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.354536][ T5986] overlayfs: failed to clone upperpath [ 155.400467][ T4795] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 155.431249][ T4795] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 155.461859][ T4795] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.489326][ T5960] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 155.508316][ T4795] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 155.535705][ T4795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.565377][ T5971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.573078][ T5960] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.581726][ T5971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.630940][ T4795] pl2303 1-1:1.0: pl2303 converter detected [ 155.656612][ T4795] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 155.684015][ T5960] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 155.733344][ T5960] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_get_new_data_page+0xcb/0x600 [ 155.785518][ T5996] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.531'. [ 155.887578][ T4280] syz-executor: attempt to access beyond end of device [ 155.887578][ T4280] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.959127][ T5971] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 155.978684][ T5971] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 155.987065][ T5971] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 155.995384][ T5971] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 156.012745][ T5971] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 156.290558][ T5971] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 156.332947][ T5971] pl2303 ttyUSB0: error sending break = -32 [ 156.366557][ T5802] usb 1-1: USB disconnect, device number 6 [ 156.397577][ T5802] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 156.415806][ T5802] pl2303 1-1:1.0: device disconnected [ 156.614163][ T6018] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 156.682323][ T6018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.766804][ T6024] bond1: (slave geneve2): making interface the new active one [ 156.787294][ T6024] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 156.830827][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 156.844278][ T6024] syz.3.534 (6024) used greatest stack depth: 20720 bytes left [ 157.488142][ T6053] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 157.773511][ T6037] loop3: detected capacity change from 0 to 40427 [ 157.823970][ T6037] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 157.839319][ T6037] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 157.857128][ T6037] F2FS-fs (loop3): invalid crc value [ 157.893204][ T6037] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 157.968522][ T4795] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 158.040323][ T6037] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 158.047458][ T6037] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 158.170566][ T4795] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 158.198228][ T4795] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 158.218239][ T4795] usb 3-1: config 4 has no interface number 0 [ 158.229142][ T4795] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.263591][ T4795] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 158.328404][ T4795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.346727][ T4795] usb 3-1: Product: syz [ 158.357268][ T4795] usb 3-1: Manufacturer: syz [ 158.367077][ T4795] usb 3-1: SerialNumber: syz [ 158.416890][ T4280] syz-executor: attempt to access beyond end of device [ 158.416890][ T4280] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 158.463583][ T4280] syz-executor: attempt to access beyond end of device [ 158.463583][ T4280] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 158.566537][ T4366] kworker/u4:7: attempt to access beyond end of device [ 158.566537][ T4366] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 158.814268][ T4795] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 158.850638][ T4795] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 158.877509][ T4795] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 158.895564][ T4795] usb 3-1: media controller created [ 158.913345][ T4795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.162498][ T4795] DVB: Unable to find symbol dib7000p_attach() [ 159.180321][ T4795] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 159.442803][ T4795] rc_core: IR keymap rc-dib0700-rc5 not found [ 159.463032][ T4795] Registered IR keymap rc-empty [ 159.469752][ T4795] dvb-usb: could not initialize remote control. [ 159.476155][ T4795] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 159.588273][ T4351] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.599151][ T4795] usb 3-1: USB disconnect, device number 7 [ 159.662929][ T4795] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 159.758336][ T4791] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.802019][ T4351] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.888635][ T4351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.958324][ T4791] usb 1-1: Using ep0 maxpacket: 16 [ 159.969407][ T6113] 9pnet: p9_errstr2errno: server reported unknown error @ [ 160.001589][ T4791] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.033102][ T4351] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.039021][ T4791] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 160.098223][ T4791] usb 1-1: can't read configurations, error -71 [ 160.267477][ T4351] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 160.421646][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.569946][ T4351] usb 2-1: Product: syz [ 160.574240][ T4351] usb 2-1: Manufacturer: syz [ 160.638298][ T4351] usb 2-1: SerialNumber: syz [ 160.697650][ T4351] usb 2-1: selecting invalid altsetting 1 [ 160.796472][ T4351] usb 2-1: unit 6 not found! [ 161.031160][ T6174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.183518][ T6191] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 161.198962][ T6174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.334439][ T6174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.461565][ T6174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.578361][ T4791] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 161.705152][ T4351] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 161.781218][ T4791] usb 1-1: Using ep0 maxpacket: 8 [ 161.788887][ T4791] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 161.818695][ T4791] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.835704][ T4791] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 161.848709][ T4791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.894613][ T4791] usb 1-1: config 0 descriptor?? [ 161.922840][ T4351] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 161.970621][ T4351] usb 2-1: USB disconnect, device number 7 [ 162.108759][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'. [ 162.270883][ T4755] udevd[4755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.344187][ T4791] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v10.01 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 162.540746][ T6193] loop0: detected capacity change from 0 to 128 [ 162.597218][ T6193] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 162.664884][ T5801] usb 1-1: USB disconnect, device number 9 [ 162.706041][ T6214] fido_id[6214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 162.907778][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.922120][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.931024][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.940446][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.948455][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.955862][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.144572][ T6224] rxe_eth0 speed is unknown, defaulting to 1000 [ 163.340137][ T6234] raw_sendmsg: syz.4.596 forgot to set AF_INET. Fix it! [ 163.819116][ T6247] loop2: detected capacity change from 0 to 8192 [ 163.920031][ T6247] loop2: p1[EZD] p4 [ 163.924513][ T6248] rxe_eth0 speed is unknown, defaulting to 1000 [ 163.970415][ T6247] loop2: p1 size 32768 extends beyond EOD, truncated [ 163.978405][ T4349] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 164.051432][ T6247] loop2: p4 size 262144 extends beyond EOD, truncated [ 164.191260][ T4349] usb 2-1: config 0 has no interfaces? [ 164.202661][ T4349] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 164.248546][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.278270][ T4349] usb 2-1: Product: syz [ 164.282539][ T4349] usb 2-1: Manufacturer: syz [ 164.287193][ T4349] usb 2-1: SerialNumber: syz [ 164.341534][ T6263] "syz.4.606" (6263) uses obsolete ecb(arc4) skcipher [ 164.347625][ T4349] usb 2-1: config 0 descriptor?? [ 164.369478][ T6263] syz.4.606 sent an empty control message without MSG_MORE. [ 164.609909][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 164.635214][ T4755] udevd[4755]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 164.773997][ T5802] usb 2-1: USB disconnect, device number 8 [ 164.962606][ T6174] device hsr_slave_0 left promiscuous mode [ 164.984926][ T6174] device hsr_slave_1 left promiscuous mode [ 165.001091][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.038377][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.048456][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 165.070240][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.078568][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.103955][ T6174] device bridge_slave_1 left promiscuous mode [ 165.113453][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.182309][ T6174] device bridge_slave_0 left promiscuous mode [ 165.218455][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.351226][ T6174] device veth1_macvtap left promiscuous mode [ 165.370144][ T6174] device veth0_macvtap left promiscuous mode [ 165.386586][ T6174] device veth1_vlan left promiscuous mode [ 165.395198][ T6174] device veth0_vlan left promiscuous mode [ 165.415835][ T6292] FAULT_INJECTION: forcing a failure. [ 165.415835][ T6292] name failslab, interval 1, probability 0, space 0, times 0 [ 165.438501][ T6292] CPU: 0 PID: 6292 Comm: syz.2.616 Not tainted syzkaller #0 [ 165.445883][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.455993][ T6292] Call Trace: [ 165.459335][ T6292] [ 165.462324][ T6292] dump_stack_lvl+0x188/0x24e [ 165.467088][ T6292] ? show_regs_print_info+0x12/0x12 [ 165.472358][ T6292] ? load_image+0x410/0x410 [ 165.476919][ T6292] ? __might_sleep+0xd0/0xd0 [ 165.481572][ T6292] ? __lock_acquire+0x7ea0/0x7ea0 [ 165.486662][ T6292] should_fail_ex+0x390/0x4c0 [ 165.491414][ T6292] should_failslab+0x5/0x20 [ 165.495975][ T6292] slab_pre_alloc_hook+0x59/0x300 [ 165.501074][ T6292] kmem_cache_alloc+0x56/0x2f0 [ 165.505896][ T6292] ? mas_alloc_nodes+0x2ec/0x880 [ 165.510886][ T6292] mas_alloc_nodes+0x2ec/0x880 [ 165.515695][ T6292] mas_preallocate+0x162/0x3b0 [ 165.520584][ T6292] __vma_adjust+0x2ff/0x1d00 [ 165.525234][ T6292] ? __lock_acquire+0x7ea0/0x7ea0 [ 165.530306][ T6292] ? validate_mm+0x2e0/0x2e0 [ 165.534946][ T6292] ? anon_vma_name+0x100/0x170 [ 165.539750][ T6292] ? vm_area_dup+0x11f/0x1a0 [ 165.544377][ T6292] __split_vma+0x3a2/0x4f0 [ 165.548966][ T6292] mlock_fixup+0x508/0x580 [ 165.553441][ T6292] apply_vma_lock_flags+0x257/0x3b0 [ 165.558678][ T6292] ? do_mlock+0x640/0x640 [ 165.563035][ T6292] ? rwsem_write_trylock+0x135/0x1c0 [ 165.568361][ T6292] ? do_mlock+0x194/0x640 [ 165.572724][ T6292] do_mlock+0x4d6/0x640 [ 165.576983][ T6292] ? lru_gen_add_folio+0xe20/0xe20 [ 165.582123][ T6292] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 165.588148][ T6292] ? lock_chain_count+0x20/0x20 [ 165.593048][ T6292] ? syscall_enter_from_user_mode+0x21/0x80 [ 165.598987][ T6292] __x64_sys_mlock+0x5c/0x70 [ 165.603616][ T6292] do_syscall_64+0x4c/0xa0 [ 165.608066][ T6292] ? clear_bhb_loop+0x60/0xb0 [ 165.612797][ T6292] ? clear_bhb_loop+0x60/0xb0 [ 165.617541][ T6292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.623501][ T6292] RIP: 0033:0x7fb6e5d9f559 [ 165.628040][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.647857][ T6292] RSP: 002b:00007fb6e6d0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 165.656312][ T6292] RAX: ffffffffffffffda RBX: 00007fb6e6025fa0 RCX: 00007fb6e5d9f559 [ 165.664489][ T6292] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffb000 [ 165.672491][ T6292] RBP: 00007fb6e5e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 165.680491][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.688506][ T6292] R13: 00007fb6e6026038 R14: 00007fb6e6025fa0 R15: 00007ffd5bae3b28 [ 165.696562][ T6292] [ 165.713051][ T6297] loop1: detected capacity change from 0 to 512 [ 165.781647][ T6297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.799067][ T6297] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.876325][ T26] audit: type=1800 audit(1792679924.130:213): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.617" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 166.087055][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 166.258656][ T6309] FAULT_INJECTION: forcing a failure. [ 166.258656][ T6309] name failslab, interval 1, probability 0, space 0, times 0 [ 166.293508][ T6309] CPU: 1 PID: 6309 Comm: syz.0.620 Not tainted syzkaller #0 [ 166.300901][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 166.311053][ T6309] Call Trace: [ 166.314381][ T6309] [ 166.317356][ T6309] dump_stack_lvl+0x188/0x24e [ 166.322092][ T6309] ? show_regs_print_info+0x12/0x12 [ 166.327345][ T6309] ? load_image+0x410/0x410 [ 166.331911][ T6309] ? __might_sleep+0xd0/0xd0 [ 166.336565][ T6309] ? __lock_acquire+0x7ea0/0x7ea0 [ 166.341660][ T6309] should_fail_ex+0x390/0x4c0 [ 166.346404][ T6309] should_failslab+0x5/0x20 [ 166.350985][ T6309] slab_pre_alloc_hook+0x59/0x300 [ 166.356103][ T6309] ? do_signalfd4+0x131/0x320 [ 166.360860][ T6309] __kmem_cache_alloc_node+0x4f/0x270 [ 166.366299][ T6309] ? __ia32_sys_get_robust_list+0x100/0x100 [ 166.372250][ T6309] ? do_signalfd4+0x131/0x320 [ 166.376985][ T6309] kmalloc_trace+0x26/0xe0 [ 166.381466][ T6309] do_signalfd4+0x131/0x320 [ 166.386066][ T6309] __x64_sys_signalfd4+0x157/0x1a0 [ 166.391292][ T6309] ? lock_chain_count+0x20/0x20 [ 166.396228][ T6309] ? signalfd_cleanup+0x60/0x60 [ 166.401179][ T6309] ? lockdep_hardirqs_on+0x94/0x140 [ 166.406448][ T6309] do_syscall_64+0x4c/0xa0 [ 166.410947][ T6309] ? clear_bhb_loop+0x60/0xb0 [ 166.415863][ T6309] ? clear_bhb_loop+0x60/0xb0 [ 166.420603][ T6309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.426553][ T6309] RIP: 0033:0x7fe1bc99f559 [ 166.431129][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.451057][ T6309] RSP: 002b:00007fe1bd855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 166.459543][ T6309] RAX: ffffffffffffffda RBX: 00007fe1bcc25fa0 RCX: 00007fe1bc99f559 [ 166.467578][ T6309] RDX: 0000000000000008 RSI: 0000200000000180 RDI: ffffffffffffffff [ 166.475597][ T6309] RBP: 00007fe1bca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 166.483609][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.491612][ T6309] R13: 00007fe1bcc26038 R14: 00007fe1bcc25fa0 R15: 00007fff1b8e75c8 [ 166.499629][ T6309] [ 166.755020][ T6174] bond1 (unregistering): (slave geneve2): Releasing active interface [ 167.129236][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 167.137627][ T6174] bond1 (unregistering): Released all slaves [ 167.442932][ T6346] loop1: detected capacity change from 0 to 128 [ 167.566092][ T6346] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.585381][ T6346] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.850445][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 168.328410][ T6174] team0 (unregistering): Port device team_slave_1 removed [ 168.386731][ T6174] team0 (unregistering): Port device team_slave_0 removed [ 168.435453][ T6174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.483880][ T6174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.834898][ T6174] bond0 (unregistering): Released all slaves [ 168.908358][ T6224] chnl_net:caif_netlink_parms(): no params data found [ 169.208334][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 169.229541][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.278503][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.297583][ T6224] device bridge_slave_0 entered promiscuous mode [ 169.345964][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.377845][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.417060][ T6224] device bridge_slave_1 entered promiscuous mode [ 169.538338][ T6224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.605620][ T6224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.689362][ T6224] team0: Port device team_slave_0 added [ 169.724107][ T6224] team0: Port device team_slave_1 added [ 169.809015][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.833922][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.892100][ T6224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.916871][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 169.948447][ T5801] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.982848][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.996691][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.060138][ T6224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.160920][ T5801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.181490][ T5801] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.200177][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 170.211330][ T5801] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.247803][ T5801] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.305100][ T5801] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 170.321578][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.401011][ T6224] device hsr_slave_0 entered promiscuous mode [ 170.415727][ T6224] device hsr_slave_1 entered promiscuous mode [ 170.452395][ T6224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.473893][ T6224] Cannot create hsr debugfs directory [ 170.765607][ T6425] jffs2: notice: (6425) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 171.196689][ T6224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.249159][ T6224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.288868][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 171.344664][ T6224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.406052][ T5801] gud 3-1:1.0: USB-1: Failed to add properties (ret=-5) [ 171.430171][ T6224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.434451][ T5801] gud 3-1:1.0: Failed to get connectors (error=-5) [ 171.456334][ T5801] gud: probe of 3-1:1.0 failed with error -5 [ 171.616982][ T5802] usb 3-1: USB disconnect, device number 8 [ 171.775304][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.824281][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.844002][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.906652][ T6224] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.941982][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.960476][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.989896][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.997088][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.085691][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.116037][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.140921][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.173900][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.181162][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.217334][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.262073][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.294259][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.322671][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.352272][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.366841][ T6459] FAULT_INJECTION: forcing a failure. [ 172.366841][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 172.388905][ T6459] CPU: 1 PID: 6459 Comm: syz.2.664 Not tainted syzkaller #0 [ 172.396282][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 172.406414][ T6459] Call Trace: [ 172.409746][ T6459] [ 172.412732][ T6459] dump_stack_lvl+0x188/0x24e [ 172.417472][ T6459] ? show_regs_print_info+0x12/0x12 [ 172.422740][ T6459] ? load_image+0x410/0x410 [ 172.427307][ T6459] ? __lock_acquire+0x7ea0/0x7ea0 [ 172.432404][ T6459] should_fail_ex+0x390/0x4c0 [ 172.437161][ T6459] should_failslab+0x5/0x20 [ 172.441717][ T6459] slab_pre_alloc_hook+0x59/0x300 [ 172.446797][ T6459] ? alloc_pipe_info+0xe4/0x4a0 [ 172.451716][ T6459] __kmem_cache_alloc_node+0x4f/0x270 [ 172.457170][ T6459] ? alloc_pipe_info+0xe4/0x4a0 [ 172.462079][ T6459] kmalloc_trace+0x26/0xe0 [ 172.466557][ T6459] alloc_pipe_info+0xe4/0x4a0 [ 172.471308][ T6459] create_pipe_files+0x87/0x6b0 [ 172.476231][ T6459] __do_pipe_flags+0x46/0x1f0 [ 172.480981][ T6459] do_pipe2+0xa7/0x190 [ 172.485107][ T6459] ? _compound_head+0x120/0x120 [ 172.490008][ T6459] ? lock_chain_count+0x20/0x20 [ 172.494930][ T6459] ? syscall_enter_from_user_mode+0x21/0x80 [ 172.500932][ T6459] __x64_sys_pipe2+0x56/0x60 [ 172.505589][ T6459] do_syscall_64+0x4c/0xa0 [ 172.510061][ T6459] ? clear_bhb_loop+0x60/0xb0 [ 172.514799][ T6459] ? clear_bhb_loop+0x60/0xb0 [ 172.519579][ T6459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.525532][ T6459] RIP: 0033:0x7fb6e5d9f559 [ 172.530092][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.532767][ T6224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.549754][ T6459] RSP: 002b:00007fb6e6d0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 172.549785][ T6459] RAX: ffffffffffffffda RBX: 00007fb6e6025fa0 RCX: 00007fb6e5d9f559 [ 172.549803][ T6459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.549816][ T6459] RBP: 00007fb6e5e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 172.549831][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.549844][ T6459] R13: 00007fb6e6026038 R14: 00007fb6e6025fa0 R15: 00007ffd5bae3b28 [ 172.549874][ T6459] [ 172.651013][ T6224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.666798][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.676675][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.695175][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.704802][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.715353][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.725462][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.735589][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.358408][ T4795] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 173.413443][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.425816][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.465553][ T6224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.478575][ T4791] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 173.580440][ T4795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.599323][ T4795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.614512][ T4795] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 173.625632][ T4795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.644389][ T4795] usb 1-1: config 0 descriptor?? [ 173.709504][ T4791] usb 2-1: not running at top speed; connect to a high speed hub [ 173.725432][ T4791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.751194][ T4791] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 173.774584][ T4791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.807786][ T4791] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 173.839148][ T4791] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 174.024174][ T4791] usb 2-1: USB disconnect, device number 9 [ 174.055505][ T4791] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 174.089392][ T4791] cyberjack 2-1:1.0: device disconnected [ 174.273004][ T4795] usb 1-1: language id specifier not provided by device, defaulting to English [ 174.288952][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.304316][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.335249][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.353800][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.367080][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.377699][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.410832][ T6224] device veth0_vlan entered promiscuous mode [ 174.444518][ T6224] device veth1_vlan entered promiscuous mode [ 174.509736][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.528879][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.548301][ T6224] device veth0_macvtap entered promiscuous mode [ 174.571371][ T6224] device veth1_macvtap entered promiscuous mode [ 174.649071][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.679795][ T4795] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input10 [ 174.701413][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.745446][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.776600][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.794362][ T4795] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input11 [ 174.819277][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.854606][ T26] audit: type=1326 audit(1792679933.110:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz.4.677" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe85059f559 code=0x0 [ 174.855215][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.904517][ T4795] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input12 [ 174.923009][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.945765][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.959778][ T4795] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input13 [ 174.993376][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.017924][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.042783][ T4795] uclogic 0003:256C:006D.0004: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 175.059114][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.077185][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.096572][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.114221][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.127763][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.149630][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.171607][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.195908][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.208121][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.255871][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.295080][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.311528][ T6526] 9pnet_fd: p9_fd_create_unix (6526): problem connecting socket: ./file0: -5 [ 175.351797][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.408964][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.432885][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.486356][ T6224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.523897][ T6224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.567411][ T6224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.612314][ T6224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.220873][ T6522] loop2: detected capacity change from 0 to 131072 [ 176.233488][ T6522] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 176.241644][ T6522] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 176.249995][ T6522] F2FS-fs (loop2): Test dummy encryption mode enabled [ 176.258050][ T6522] F2FS-fs (loop2): invalid crc value [ 176.356184][ T6522] F2FS-fs (loop2): Found nat_bits in checkpoint [ 176.395691][ T6522] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 176.461958][ T6522] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 176.474597][ T6522] F2FS-fs (loop2): Start checkpoint disabled! [ 176.511221][ T6522] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 176.518522][ T6522] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 176.536622][ T26] audit: type=1326 audit(1792679934.790:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.1.680" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82eb19f559 code=0x0 [ 176.776151][ T6153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.831958][ T6153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.903118][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.000780][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.021114][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.064541][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.090531][ T4795] usb 1-1: USB disconnect, device number 10 [ 178.088743][ T4795] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.128433][ T6593] netlink: 'syz.2.696': attribute type 10 has an invalid length. [ 178.147171][ T6593] netlink: 55 bytes leftover after parsing attributes in process `syz.2.696'. [ 178.298404][ T4795] usb 2-1: Using ep0 maxpacket: 16 [ 178.305949][ T4795] usb 2-1: config 0 has no interfaces? [ 178.335837][ T4795] usb 2-1: New USB device found, idVendor=146d, idProduct=0721, bcdDevice=9c.25 [ 178.371798][ T4795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.390195][ T4795] usb 2-1: Product: syz [ 178.400258][ T4795] usb 2-1: Manufacturer: syz [ 178.420801][ T4795] usb 2-1: SerialNumber: syz [ 178.458883][ T4795] usb 2-1: config 0 descriptor?? [ 178.601792][ T6605] bridge0: port 3(erspan0) entered blocking state [ 178.643672][ T6605] bridge0: port 3(erspan0) entered disabled state [ 178.694040][ T6605] device erspan0 entered promiscuous mode [ 178.722277][ T6605] bridge0: port 3(erspan0) entered blocking state [ 178.729616][ T6605] bridge0: port 3(erspan0) entered forwarding state [ 178.818502][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.703'. [ 178.827972][ T4374] usb 2-1: USB disconnect, device number 10 [ 178.864714][ T6611] device erspan0 left promiscuous mode [ 178.882553][ T6611] bridge0: port 3(erspan0) entered disabled state [ 179.046165][ T6622] FAULT_INJECTION: forcing a failure. [ 179.046165][ T6622] name failslab, interval 1, probability 0, space 0, times 0 [ 179.059603][ T6622] CPU: 0 PID: 6622 Comm: syz.5.706 Not tainted syzkaller #0 [ 179.066950][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 179.077078][ T6622] Call Trace: [ 179.080400][ T6622] [ 179.083370][ T6622] dump_stack_lvl+0x188/0x24e [ 179.088113][ T6622] ? show_regs_print_info+0x12/0x12 [ 179.093372][ T6622] ? load_image+0x410/0x410 [ 179.097929][ T6622] ? print_unlock_imbalance_bug+0x160/0x160 [ 179.103904][ T6622] should_fail_ex+0x390/0x4c0 [ 179.108649][ T6622] should_failslab+0x5/0x20 [ 179.113201][ T6622] slab_pre_alloc_hook+0x59/0x300 [ 179.118285][ T6622] ? ip_mc_add_src+0x850/0xee0 [ 179.123117][ T6622] __kmem_cache_alloc_node+0x4f/0x270 [ 179.128552][ T6622] ? __rwlock_init+0x140/0x140 [ 179.133381][ T6622] ? ip_mc_add_src+0x850/0xee0 [ 179.138213][ T6622] kmalloc_trace+0x26/0xe0 [ 179.142710][ T6622] ip_mc_add_src+0x850/0xee0 [ 179.147379][ T6622] ip_mc_source+0xb4a/0xf70 [ 179.151977][ T6622] do_mcast_group_source+0x4bd/0x550 [ 179.157335][ T6622] ? ip_mcast_join_leave+0x260/0x260 [ 179.162736][ T6622] ? verify_lock_unused+0x140/0x140 [ 179.168035][ T6622] ? verify_lock_unused+0x140/0x140 [ 179.173318][ T6622] ? __mutex_trylock_common+0x15c/0x260 [ 179.178949][ T6622] ? __local_bh_enable_ip+0x136/0x1c0 [ 179.184383][ T6622] ? lockdep_hardirqs_on+0x94/0x140 [ 179.189658][ T6622] ? __local_bh_enable_ip+0x136/0x1c0 [ 179.195130][ T6622] ? _local_bh_enable+0xa0/0xa0 [ 179.200050][ T6622] do_ip_setsockopt+0x1513/0x2f00 [ 179.205150][ T6622] ? ip_sock_set_pktinfo+0x60/0x60 [ 179.210324][ T6622] ? aa_sk_perm+0x81f/0x950 [ 179.214922][ T6622] ? aa_af_perm+0x340/0x340 [ 179.219481][ T6622] ? __fget_files+0x3fc/0x460 [ 179.224244][ T6622] ? aa_sock_opt_perm+0x74/0x100 [ 179.229252][ T6622] ip_setsockopt+0x5d/0x100 [ 179.233834][ T6622] ? sock_common_recvmsg+0x190/0x190 [ 179.239293][ T6622] __sys_setsockopt+0x2bf/0x3d0 [ 179.244229][ T6622] __x64_sys_setsockopt+0xb1/0xc0 [ 179.249314][ T6622] do_syscall_64+0x4c/0xa0 [ 179.253786][ T6622] ? clear_bhb_loop+0x60/0xb0 [ 179.258546][ T6622] ? clear_bhb_loop+0x60/0xb0 [ 179.263278][ T6622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.269229][ T6622] RIP: 0033:0x7fa2fd19f559 [ 179.273696][ T6622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.293359][ T6622] RSP: 002b:00007fa2fe07b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 179.301842][ T6622] RAX: ffffffffffffffda RBX: 00007fa2fd425fa0 RCX: 00007fa2fd19f559 [ 179.309870][ T6622] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000003 [ 179.318036][ T6622] RBP: 00007fa2fd236b20 R08: 0000000000000108 R09: 0000000000000000 [ 179.326065][ T6622] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 179.334089][ T6622] R13: 00007fa2fd426038 R14: 00007fa2fd425fa0 R15: 00007ffe40f767a8 [ 179.342133][ T6622] [ 179.833244][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 179.913858][ T6648] xt_hashlimit: overflow, rate too high: 0 [ 180.098315][ T4374] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.273200][ T6662] loop5: detected capacity change from 0 to 128 [ 180.290950][ T4374] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.311408][ T6664] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 180.329436][ T4374] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.343860][ T6662] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 180.369579][ T4374] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 180.428818][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.473525][ T6662] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 180.528462][ T6662] FAT-fs (loop5): Filesystem has been set read-only [ 180.692393][ T6672] loop0: detected capacity change from 0 to 1 [ 180.725262][ T6224] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 180.769558][ T6672] ldm_validate_privheads(): Disk read failed. [ 180.775809][ T6672] loop0: [ 180.828292][ T6672] loop0: partition table partially beyond EOD, truncated [ 180.921408][ T4374] wacom 0003:056A:033B.0005: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 180.967077][ T4374] wacom 0003:056A:033B.0005: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 181.014297][ T4374] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0005/input/input14 [ 181.142463][ T4374] usb 1-1: USB disconnect, device number 11 [ 181.467179][ T6689] fido_id[6689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 181.596901][ T6666] loop1: detected capacity change from 0 to 32768 [ 181.686763][ T6666] XFS (loop1): Mounting V5 Filesystem [ 181.813425][ T6666] XFS (loop1): Ending clean mount [ 182.034779][ T4278] XFS (loop1): Unmounting Filesystem [ 182.715819][ T6736] loop0: detected capacity change from 0 to 512 [ 182.771921][ T6726] loop2: detected capacity change from 0 to 8192 [ 182.858839][ T6736] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 182.939590][ T6736] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.012532][ T6736] EXT4-fs (loop0): 1 truncate cleaned up [ 183.025804][ T6736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.447146][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 183.759352][ T26] audit: type=1400 audit(1792679942.010:216): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=6775 comm="syz.2.753" name="/" offset=53 [ 183.892448][ T6780] loop5: detected capacity change from 0 to 128 [ 184.002953][ T26] audit: type=1804 audit(1792679942.260:217): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.754" name="/newroot/13/file1/file1" dev="loop5" ino=1048649 res=1 errno=0 [ 184.047195][ T6780] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 184.068918][ T6780] FAT-fs (loop5): Filesystem has been set read-only [ 184.087318][ T6780] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 184.135571][ T6792] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 184.518281][ T4351] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 184.708697][ T4351] usb 1-1: Using ep0 maxpacket: 8 [ 184.715965][ T4351] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 184.737883][ T6812] ip_tables: iptables: counters copy to user failed while replacing table [ 184.757376][ T4351] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.794123][ T4351] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.819862][ T4351] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.841170][ T4351] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.875198][ T4351] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.893183][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.117070][ T4351] usb 1-1: GET_CAPABILITIES returned 0 [ 185.122850][ T4351] usbtmc 1-1:16.0: can't read capabilities [ 185.331428][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.343197][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.352432][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.361519][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.370669][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.400405][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.403233][ T4351] usb 1-1: USB disconnect, device number 12 [ 185.409555][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.409602][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.409644][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.550510][ T6839] input: syz1 as /devices/virtual/input/input17 [ 185.825646][ T6851] netlink: 'syz.5.777': attribute type 4 has an invalid length. [ 186.284777][ T6867] FAULT_INJECTION: forcing a failure. [ 186.284777][ T6867] name failslab, interval 1, probability 0, space 0, times 0 [ 186.316112][ T6867] CPU: 1 PID: 6867 Comm: syz.2.782 Not tainted syzkaller #0 [ 186.323513][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.333651][ T6867] Call Trace: [ 186.337000][ T6867] [ 186.340069][ T6867] dump_stack_lvl+0x188/0x24e [ 186.344812][ T6867] ? show_regs_print_info+0x12/0x12 [ 186.350093][ T6867] ? load_image+0x410/0x410 [ 186.354631][ T6867] ? __might_sleep+0xd0/0xd0 [ 186.359275][ T6867] ? __lock_acquire+0x7ea0/0x7ea0 [ 186.364364][ T6867] should_fail_ex+0x390/0x4c0 [ 186.369099][ T6867] should_failslab+0x5/0x20 [ 186.373656][ T6867] slab_pre_alloc_hook+0x59/0x300 [ 186.378722][ T6867] kmem_cache_alloc_lru+0x49/0x2e0 [ 186.383861][ T6867] ? __d_alloc+0x2e/0x6e0 [ 186.388254][ T6867] __d_alloc+0x2e/0x6e0 [ 186.392448][ T6867] d_alloc_parallel+0xdc/0x1590 [ 186.397331][ T6867] ? __d_lookup+0x8b/0x7c0 [ 186.401781][ T6867] ? __lock_acquire+0x7ea0/0x7ea0 [ 186.406855][ T6867] ? __d_lookup+0x8b/0x7c0 [ 186.411307][ T6867] ? d_hash_and_lookup+0x1b0/0x1b0 [ 186.416548][ T6867] path_openat+0x949/0x2f10 [ 186.421094][ T6867] ? kasan_set_track+0x60/0x70 [ 186.425898][ T6867] ? verify_lock_unused+0x140/0x140 [ 186.431137][ T6867] ? do_filp_open+0x420/0x420 [ 186.435922][ T6867] do_filp_open+0x1ee/0x420 [ 186.440468][ T6867] ? vfs_tmpfile+0x470/0x470 [ 186.445100][ T6867] ? noop_direct_IO+0x10/0x10 [ 186.449844][ T6867] ? _raw_spin_unlock+0x24/0x40 [ 186.454726][ T6867] ? alloc_fd+0x590/0x640 [ 186.459098][ T6867] do_sys_openat2+0x14b/0x4f0 [ 186.463813][ T6867] ? do_sys_open+0xe0/0xe0 [ 186.468356][ T6867] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.474386][ T6867] ? lock_chain_count+0x20/0x20 [ 186.479273][ T6867] __x64_sys_openat+0x135/0x160 [ 186.484193][ T6867] do_syscall_64+0x4c/0xa0 [ 186.488641][ T6867] ? clear_bhb_loop+0x60/0xb0 [ 186.493354][ T6867] ? clear_bhb_loop+0x60/0xb0 [ 186.498118][ T6867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.504053][ T6867] RIP: 0033:0x7fb6e5d5fd8e [ 186.508523][ T6867] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.528162][ T6867] RSP: 002b:00007fb6e6d0aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.536616][ T6867] RAX: ffffffffffffffda RBX: 00007fb6e6d0b6c0 RCX: 00007fb6e5d5fd8e [ 186.544616][ T6867] RDX: 0000000000000002 RSI: 00007fb6e6d0af90 RDI: ffffffffffffff9c [ 186.552636][ T6867] RBP: 00007fb6e5e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.560636][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.568656][ T6867] R13: 00007fb6e6026038 R14: 00007fb6e6025fa0 R15: 00007ffd5bae3b28 [ 186.576675][ T6867] [ 186.962082][ T6889] netlink: 80 bytes leftover after parsing attributes in process `syz.0.786'. [ 187.081057][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.790'. [ 187.112972][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.790'. [ 187.137022][ T6895] loop2: detected capacity change from 0 to 16 [ 187.183355][ T6895] erofs: Unknown parameter '0xffffffffffffffffQreHK^"0}9«˫_~N["޶g*S յ_X"?guIjxa8/ [ 191.703021][ T7021] dump_stack_lvl+0x188/0x24e [ 191.707790][ T7021] ? show_regs_print_info+0x12/0x12 [ 191.713056][ T7021] ? load_image+0x410/0x410 [ 191.717618][ T7021] ? __might_sleep+0xd0/0xd0 [ 191.722262][ T7021] ? __lock_acquire+0x7ea0/0x7ea0 [ 191.727356][ T7021] should_fail_ex+0x390/0x4c0 [ 191.732102][ T7021] should_failslab+0x5/0x20 [ 191.736654][ T7021] slab_pre_alloc_hook+0x59/0x300 [ 191.741746][ T7021] ? __register_sysctl_table+0x9b0/0xed0 [ 191.747493][ T7021] __kmem_cache_alloc_node+0x4f/0x270 [ 191.752924][ T7021] ? __rwlock_init+0x140/0x140 [ 191.757744][ T7021] ? __register_sysctl_table+0x9b0/0xed0 [ 191.763474][ T7021] __kmalloc+0xa3/0x240 [ 191.767692][ T7021] __register_sysctl_table+0x9b0/0xed0 [ 191.773268][ T7021] ip_vs_control_net_init+0xc89/0x1190 [ 191.778803][ T7021] __ip_vs_init+0x2ce/0x450 [ 191.783370][ T7021] ops_init+0x360/0x5e0 [ 191.787596][ T7021] setup_net+0x4f2/0xbd0 [ 191.791908][ T7021] ? copy_net_ns+0x5b0/0x5b0 [ 191.796573][ T7021] ? copy_net_ns+0x324/0x5b0 [ 191.801271][ T7021] ? down_read_killable+0x1cc/0x340 [ 191.806541][ T7021] copy_net_ns+0x33e/0x5b0 [ 191.811032][ T7021] create_new_namespaces+0x3ce/0x700 [ 191.816419][ T7021] unshare_nsproxy_namespaces+0x116/0x160 [ 191.822202][ T7021] ksys_unshare+0x4f6/0x8e0 [ 191.826783][ T7021] ? sighand_ctor+0x40/0x40 [ 191.831346][ T7021] ? lock_chain_count+0x20/0x20 [ 191.836270][ T7021] ? syscall_enter_from_user_mode+0x21/0x80 [ 191.842230][ T7021] __x64_sys_unshare+0x34/0x40 [ 191.847052][ T7021] do_syscall_64+0x4c/0xa0 [ 191.851529][ T7021] ? clear_bhb_loop+0x60/0xb0 [ 191.856267][ T7021] ? clear_bhb_loop+0x60/0xb0 [ 191.861016][ T7021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.866999][ T7021] RIP: 0033:0x7fe1bc99f559 [ 191.871479][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.891235][ T7021] RSP: 002b:00007fe1bd855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 191.899714][ T7021] RAX: ffffffffffffffda RBX: 00007fe1bcc25fa0 RCX: 00007fe1bc99f559 [ 191.907797][ T7021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 191.915829][ T7021] RBP: 00007fe1bca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 191.923896][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.931922][ T7021] R13: 00007fe1bcc26038 R14: 00007fe1bcc25fa0 R15: 00007fff1b8e75c8 [ 191.939973][ T7021] [ 192.038478][ T7021] sysctl could not get directory: /net/ipv4/vs -12 [ 192.047826][ T7021] CPU: 0 PID: 7021 Comm: syz.0.837 Not tainted syzkaller #0 [ 192.055199][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.065317][ T7021] Call Trace: [ 192.068647][ T7021] [ 192.071625][ T7021] dump_stack_lvl+0x188/0x24e [ 192.076456][ T7021] ? lockdep_hardirqs_on+0x94/0x140 [ 192.081751][ T7021] ? show_regs_print_info+0x12/0x12 [ 192.087050][ T7021] ? slab_free_freelist_hook+0x133/0x1b0 [ 192.092753][ T7021] ? __register_sysctl_table+0xe35/0xed0 [ 192.098455][ T7021] ? __kmem_cache_free+0xb6/0x200 [ 192.103549][ T7021] __register_sysctl_table+0xe3a/0xed0 [ 192.109091][ T7021] ip_vs_control_net_init+0xc89/0x1190 [ 192.114630][ T7021] __ip_vs_init+0x2ce/0x450 [ 192.119199][ T7021] ops_init+0x360/0x5e0 [ 192.123470][ T7021] setup_net+0x4f2/0xbd0 [ 192.127787][ T7021] ? copy_net_ns+0x5b0/0x5b0 [ 192.132487][ T7021] ? copy_net_ns+0x324/0x5b0 [ 192.137155][ T7021] ? down_read_killable+0x1cc/0x340 [ 192.142434][ T7021] copy_net_ns+0x33e/0x5b0 [ 192.146927][ T7021] create_new_namespaces+0x3ce/0x700 [ 192.152292][ T7021] unshare_nsproxy_namespaces+0x116/0x160 [ 192.158074][ T7021] ksys_unshare+0x4f6/0x8e0 [ 192.162647][ T7021] ? sighand_ctor+0x40/0x40 [ 192.167209][ T7021] ? lock_chain_count+0x20/0x20 [ 192.172141][ T7021] ? syscall_enter_from_user_mode+0x21/0x80 [ 192.178120][ T7021] __x64_sys_unshare+0x34/0x40 [ 192.182948][ T7021] do_syscall_64+0x4c/0xa0 [ 192.187471][ T7021] ? clear_bhb_loop+0x60/0xb0 [ 192.192206][ T7021] ? clear_bhb_loop+0x60/0xb0 [ 192.196960][ T7021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.202948][ T7021] RIP: 0033:0x7fe1bc99f559 [ 192.207415][ T7021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.227078][ T7021] RSP: 002b:00007fe1bd855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 192.235690][ T7021] RAX: ffffffffffffffda RBX: 00007fe1bcc25fa0 RCX: 00007fe1bc99f559 [ 192.243726][ T7021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 192.251769][ T7021] RBP: 00007fe1bca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 192.259848][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.267882][ T7021] R13: 00007fe1bcc26038 R14: 00007fe1bcc25fa0 R15: 00007fff1b8e75c8 [ 192.275950][ T7021] [ 192.319669][ T7031] loop5: detected capacity change from 0 to 2048 [ 192.382241][ T7031] loop5: p1 < > p3 < p5 > p4 [ 192.387031][ T7031] loop5: partition table partially beyond EOD, truncated [ 192.417548][ T7031] loop5: p1 start 3405780737 is beyond EOD, truncated [ 193.239259][ T7045] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 193.710333][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.852'. [ 193.761984][ T7066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.852'. [ 193.865486][ T7064] rxe_eth0 speed is unknown, defaulting to 1000 [ 193.901766][ T7070] loop2: detected capacity change from 0 to 1024 [ 193.934408][ T7070] EXT4-fs: Ignoring removed oldalloc option [ 194.049217][ T7070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 194.057848][ T7070] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.250879][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257325][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.278434][ T7070] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.854: bg 0: block 112: padding at end of block bitmap is not set [ 194.496756][ T6161] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm kworker/u4:20: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.605314][ T6161] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 194.673554][ T6161] EXT4-fs (loop2): This should not happen!! Data will be lost [ 194.673554][ T6161] [ 194.707071][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 195.058234][ T4795] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 195.280092][ T4795] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 195.318504][ T4795] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 195.369922][ T4795] usb 1-1: config 220 has no interface number 2 [ 195.376658][ T4795] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 195.450314][ T4795] usb 1-1: config 220 interface 0 has no altsetting 0 [ 195.483306][ T4795] usb 1-1: config 220 interface 76 has no altsetting 0 [ 195.513691][ T4795] usb 1-1: config 220 interface 1 has no altsetting 0 [ 195.556219][ T4795] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 195.636685][ T4795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.665151][ T4795] usb 1-1: Product: syz [ 195.684619][ T4795] usb 1-1: Manufacturer: syz [ 195.710129][ T4795] usb 1-1: SerialNumber: syz [ 196.386538][ T7133] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.871'. [ 196.948362][ T4351] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 197.003069][ T7156] FAULT_INJECTION: forcing a failure. [ 197.003069][ T7156] name failslab, interval 1, probability 0, space 0, times 0 [ 197.036948][ T7156] CPU: 0 PID: 7156 Comm: syz.2.876 Not tainted syzkaller #0 [ 197.044372][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 197.054489][ T7156] Call Trace: [ 197.057823][ T7156] [ 197.060798][ T7156] dump_stack_lvl+0x188/0x24e [ 197.065548][ T7156] ? show_regs_print_info+0x12/0x12 [ 197.070815][ T7156] ? load_image+0x410/0x410 [ 197.075407][ T7156] ? __lock_acquire+0x7ea0/0x7ea0 [ 197.080535][ T7156] should_fail_ex+0x390/0x4c0 [ 197.085291][ T7156] should_failslab+0x5/0x20 [ 197.089848][ T7156] slab_pre_alloc_hook+0x59/0x300 [ 197.095027][ T7156] ? __lock_acquire+0x7ea0/0x7ea0 [ 197.100119][ T7156] ? anon_vma_name_alloc+0x37/0xb0 [ 197.105291][ T7156] __kmem_cache_alloc_node+0x4f/0x270 [ 197.110834][ T7156] ? anon_vma_name_alloc+0x37/0xb0 [ 197.116000][ T7156] __kmalloc+0xa3/0x240 [ 197.120210][ T7156] ? _copy_from_user+0x10b/0x170 [ 197.125311][ T7156] anon_vma_name_alloc+0x37/0xb0 [ 197.130304][ T7156] prctl_set_vma+0x185/0x2e0 [ 197.134963][ T7156] __se_sys_prctl+0x162/0x1100 [ 197.139838][ T7156] ? __x64_sys_prctl+0xc0/0xc0 [ 197.144661][ T7156] ? lockdep_hardirqs_on+0x94/0x140 [ 197.149926][ T7156] ? __x64_sys_prctl+0x1c/0xc0 [ 197.154754][ T7156] do_syscall_64+0x4c/0xa0 [ 197.159227][ T7156] ? clear_bhb_loop+0x60/0xb0 [ 197.163956][ T7156] ? clear_bhb_loop+0x60/0xb0 [ 197.168692][ T7156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.174689][ T7156] RIP: 0033:0x7fb6e5d9f559 [ 197.179160][ T7156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.198829][ T7156] RSP: 002b:00007fb6e6d0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 197.207314][ T7156] RAX: ffffffffffffffda RBX: 00007fb6e6025fa0 RCX: 00007fb6e5d9f559 [ 197.215348][ T7156] RDX: 0000200000ff9000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 197.223381][ T7156] RBP: 00007fb6e5e36b20 R08: 0000200000000200 R09: 0000000000000000 [ 197.231409][ T7156] R10: 0000000000005000 R11: 0000000000000246 R12: 0000000000000000 [ 197.239437][ T7156] R13: 00007fb6e6026038 R14: 00007fb6e6025fa0 R15: 00007ffd5bae3b28 [ 197.247481][ T7156] [ 197.302259][ T4795] usb 1-1: selecting invalid altsetting 0 [ 197.321158][ T4795] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 197.334331][ T4795] usb 1-1: No valid video chain found. [ 197.358325][ T4351] usb 6-1: Using ep0 maxpacket: 16 [ 197.365741][ T4351] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.405399][ T4351] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.413281][ T4795] usb 1-1: selecting invalid altsetting 0 [ 197.434454][ T4795] usbtest: probe of 1-1:220.1 failed with error -22 [ 197.448121][ T4351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.465998][ T4351] usb 6-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 197.482088][ T4795] usb 1-1: USB disconnect, device number 13 [ 197.507179][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.556872][ T4351] usb 6-1: config 0 descriptor?? [ 197.704355][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 197.730438][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.991739][ T4351] input: HID 172f:0502 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:172F:0502.0007/input/input19 [ 198.051465][ T7170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.115738][ T4351] waltop 0003:172F:0502.0007: input,hiddev0,hidraw0: USB HID v80.01 Device [HID 172f:0502] on usb-dummy_hcd.5-1/input0 [ 198.768312][ T4349] usb 6-1: USB disconnect, device number 3 [ 199.758971][ T7245] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 199.766827][ T7245] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 199.803998][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 199.830100][ T7245] device hsr_slave_0 left promiscuous mode [ 199.852617][ T7245] device hsr_slave_1 left promiscuous mode [ 200.105379][ T7255] loop5: detected capacity change from 0 to 128 [ 200.144871][ T7255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 200.166316][ T7255] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 200.415527][ T6224] EXT4-fs (loop5): unmounting filesystem. [ 200.997053][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 201.040669][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.079014][ T7281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.448314][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 201.454479][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 201.461497][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 201.519937][ T7302] binder: 7301:7302 ioctl c00c620f 200000000080 returned -22 [ 202.303157][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 202.352545][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.428287][ T4351] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 202.476780][ T7337] device bridge_slave_1 left promiscuous mode [ 202.497411][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.618304][ T4351] usb 1-1: Using ep0 maxpacket: 8 [ 202.625474][ T4351] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.672919][ T4351] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.707492][ T4351] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.768576][ T4351] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 202.798699][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.844169][ T4351] hub 1-1:1.0: bad descriptor, ignoring hub [ 202.869960][ T4351] hub: probe of 1-1:1.0 failed with error -5 [ 202.907122][ T4351] cdc_wdm 1-1:1.0: skipping garbage [ 202.937079][ T4351] cdc_wdm 1-1:1.0: skipping garbage [ 202.958386][ T4351] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 202.964402][ T4351] cdc_wdm 1-1:1.0: Unknown control protocol [ 203.368941][ T4351] usb 1-1: USB disconnect, device number 14 [ 203.563210][ T7376] IPv6: sit1: Disabled Multicast RS [ 206.155479][ T7459] loop2: detected capacity change from 0 to 256 [ 206.205442][ T7462] loop5: detected capacity change from 0 to 128 [ 206.231084][ T7462] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 206.304644][ T7465] netlink: 15 bytes leftover after parsing attributes in process `syz.4.985'. [ 206.568226][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 207.595062][ T7500] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 207.827687][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.998'. [ 207.847704][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.998'. [ 207.925560][ C1] Unknown status report in ack skb [ 208.124106][ T7519] loop0: detected capacity change from 0 to 64 [ 208.536623][ T26] audit: type=1326 audit(1792680222.792:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.1011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1bc99f559 code=0x0 [ 208.711316][ T7548] rxe_eth0 speed is unknown, defaulting to 1000 [ 208.918314][ T4798] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 209.111354][ T4798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.143963][ T4798] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 209.183907][ T4798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.440231][ T4798] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 209.806178][ T7538] loop5: detected capacity change from 0 to 40427 [ 210.350234][ T7576] overlayfs: failed to clone upperpath [ 210.503428][ T7538] F2FS-fs (loop5): Invalid log sectors per block(60931) log sectorsize(9) [ 210.529298][ T7562] loop0: detected capacity change from 0 to 131072 [ 210.597773][ T4798] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 56:0d:4d:fc:5d:3b [ 210.608346][ T7538] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 210.618253][ T7562] F2FS-fs (loop0): invalid crc value [ 210.645899][ T7538] F2FS-fs (loop5): invalid crc value [ 210.662894][ T7562] F2FS-fs (loop0): Found nat_bits in checkpoint [ 210.705513][ T7562] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 210.729764][ T4798] usb 3-1: USB disconnect, device number 10 [ 210.748017][ T7562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 210.770571][ T7538] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 210.807073][ T4798] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 211.273713][ T7538] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 211.298573][ T7538] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 211.343358][ T7538] syz.5.1012: attempt to access beyond end of device [ 211.343358][ T7538] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 211.577699][ T7603] loop2: detected capacity change from 0 to 2048 [ 211.700900][ T7603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.480884][ T7623] loop0: detected capacity change from 0 to 512 [ 212.518438][ T26] audit: type=1800 audit(1792680226.782:220): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1039" name="c_sync" dev="configfs" ino=45302 res=0 errno=0 [ 212.991271][ T7638] loop5: detected capacity change from 0 to 128 [ 213.045848][ T7638] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 213.072091][ T7638] hpfs: filesystem error: improperly stopped [ 213.110942][ T7638] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 213.145072][ T7638] hpfs: You really don't want any checks? You are crazy... [ 213.194454][ T7638] hpfs: Code page index out of array [ 213.231263][ T7638] hpfs: code page support is disabled [ 213.275987][ T7638] hpfs: hpfs_map_4sectors(): unaligned read [ 213.325964][ T7638] hpfs: hpfs_map_4sectors(): unaligned read [ 213.359892][ T7638] hpfs: filesystem error: unable to find root dir [ 213.674784][ T7654] loop2: detected capacity change from 0 to 1024 [ 213.790338][ T7654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 213.850511][ T7659] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.975133][ T7663] overlayfs: failed to clone upperpath [ 214.230267][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 214.618640][ T7683] TCP: TCP_TX_DELAY enabled [ 215.034049][ T7702] loop5: detected capacity change from 0 to 1024 [ 215.183403][ T7702] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 215.568009][ T6224] EXT4-fs (loop5): unmounting filesystem. [ 215.908697][ T7734] loop2: detected capacity change from 0 to 256 [ 215.964058][ T7734] exfat: Deprecated parameter 'utf8' [ 216.018684][ T7734] exfat: Deprecated parameter 'namecase' [ 216.062213][ T7734] exfat: Deprecated parameter 'namecase' [ 216.101767][ T7734] exfat: Deprecated parameter 'namecase' [ 216.183557][ T7734] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 216.281192][ T7734] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1071'. [ 216.625834][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'. [ 216.650408][ T7756] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 217.845878][ T7788] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 217.917732][ T7790] loop0: detected capacity change from 0 to 256 [ 217.931750][ T7790] exfat: Deprecated parameter 'utf8' [ 217.937322][ T7790] exfat: Deprecated parameter 'namecase' [ 217.947104][ T7790] exfat: Deprecated parameter 'namecase' [ 217.954466][ T7790] exfat: Deprecated parameter 'namecase' [ 218.030213][ T7790] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 218.110689][ T7790] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1096'. [ 218.813219][ T7822] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 219.833145][ T7841] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1114'. [ 219.843356][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 221.569083][ T7873] loop0: detected capacity change from 0 to 1024 [ 221.661577][ T7881] loop5: detected capacity change from 0 to 256 [ 221.674307][ T7873] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.686820][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'. [ 221.735573][ T7881] exfat: Deprecated parameter 'utf8' [ 221.809633][ T7881] exfat: Deprecated parameter 'namecase' [ 221.820964][ T7881] exfat: Deprecated parameter 'namecase' [ 221.831000][ T7881] exfat: Deprecated parameter 'namecase' [ 221.876921][ T7881] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 221.920794][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 221.971183][ T7881] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1131'. [ 222.183171][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1137'. [ 223.001110][ T7903] loop0: detected capacity change from 0 to 32768 [ 223.129477][ T7903] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 223.129477][ T7903] [ 223.155338][ T7903] ERROR: (device loop0): remounting filesystem as read-only [ 223.193165][ T7903] syz.0.1151: attempt to access beyond end of device [ 223.193165][ T7903] loop0: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 223.318103][ T4273] ------------[ cut here ]------------ [ 223.324820][ T4273] kernel BUG at fs/jfs/inode.c:175! [ 223.334165][ T4273] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 223.340310][ T4273] CPU: 0 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 223.345584][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1147'. [ 223.347880][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 223.366849][ T4273] RIP: 0010:jfs_evict_inode+0x420/0x430 [ 223.372463][ T4273] Code: e6 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 ba 59 e6 fe e9 16 fe ff ff e8 d0 fd 94 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 54 [ 223.392123][ T4273] RSP: 0018:ffffc90004287b08 EFLAGS: 00010293 [ 223.398228][ T4273] RAX: ffffffff82ed48b0 RBX: ffff888056110d70 RCX: ffff88801fe7bc00 [ 223.406224][ T4273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888056110d70 [ 223.414220][ T4273] RBP: 0000000000000001 R08: ffffffff9193437f R09: 1ffffffff232686f [ 223.422388][ T4273] R10: dffffc0000000000 R11: fffffbfff2326870 R12: dffffc0000000000 [ 223.430379][ T4273] R13: dffffc0000000000 R14: ffff8880561109f8 R15: ffff888056110d98 [ 223.438386][ T4273] FS: 0000555590ec1500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 223.447425][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.454049][ T4273] CR2: 00007f82ebfd8ff8 CR3: 000000005d48c000 CR4: 00000000003506f0 [ 223.462050][ T4273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.470041][ T4273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.478049][ T4273] Call Trace: [ 223.481346][ T4273] [ 223.484301][ T4273] ? jfs_write_inode+0x220/0x220 [ 223.489274][ T4273] evict+0x4b6/0x8b0 [ 223.493199][ T4273] ? evict_inodes+0x577/0x6e0 [ 223.497909][ T4273] ? proc_nr_inodes+0x2f0/0x2f0 [ 223.502790][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 223.508014][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 223.513239][ T4273] evict_inodes+0x650/0x6e0 [ 223.517862][ T4273] ? clear_inode+0x150/0x150 [ 223.522480][ T4273] ? dput+0x37/0x1d0 [ 223.526400][ T4273] generic_shutdown_super+0x93/0x340 [ 223.531732][ T4273] kill_block_super+0x7c/0xe0 [ 223.536438][ T4273] deactivate_locked_super+0x93/0xf0 [ 223.541747][ T4273] cleanup_mnt+0x471/0x4f0 [ 223.546208][ T4273] task_work_run+0x1d0/0x260 [ 223.550875][ T4273] ? task_work_cancel+0x220/0x220 [ 223.556181][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 223.561671][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 223.566981][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 223.572559][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 223.578045][ T4273] do_syscall_64+0x58/0xa0 [ 223.582481][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 223.587178][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 223.591895][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.597924][ T4273] RIP: 0033:0x7fe1bc9a0797 [ 223.602370][ T4273] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 223.622004][ T4273] RSP: 002b:00007fff1b8e6838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 223.630438][ T4273] RAX: 0000000000000000 RBX: 00007fe1bca35f63 RCX: 00007fe1bc9a0797 [ 223.638425][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1b8e68f0 [ 223.646414][ T4273] RBP: 00007fff1b8e68f0 R08: 00007fff1b8e78f0 R09: 00000000ffffffff [ 223.654405][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1b8e7980 [ 223.662399][ T4273] R13: 00007fe1bca35f63 R14: 00000000000367dc R15: 00007fff1b8e79c0 [ 223.670514][ T4273] [ 223.673561][ T4273] Modules linked in: [ 223.728659][ T4273] ---[ end trace 0000000000000000 ]--- [ 223.734300][ T4273] RIP: 0010:jfs_evict_inode+0x420/0x430 [ 223.742062][ T4273] Code: e6 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 ba 59 e6 fe e9 16 fe ff ff e8 d0 fd 94 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 54 [ 223.766112][ T4273] RSP: 0018:ffffc90004287b08 EFLAGS: 00010293 [ 223.772850][ T4273] RAX: ffffffff82ed48b0 RBX: ffff888056110d70 RCX: ffff88801fe7bc00 [ 223.782541][ T4273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888056110d70 [ 223.790802][ T4273] RBP: 0000000000000001 R08: ffffffff9193437f R09: 1ffffffff232686f [ 223.799245][ T4273] R10: dffffc0000000000 R11: fffffbfff2326870 R12: dffffc0000000000 [ 223.807343][ T4273] R13: dffffc0000000000 R14: ffff8880561109f8 R15: ffff888056110d98 [ 223.819277][ T4273] FS: 0000555590ec1500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 223.828668][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.835382][ T4273] CR2: 0000001b3021eff8 CR3: 000000005d48c000 CR4: 00000000003506f0 [ 223.843749][ T4273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.854845][ T4273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.863160][ T4273] Kernel panic - not syncing: Fatal exception [ 223.869846][ T4273] Kernel Offset: disabled [ 223.874183][ T4273] Rebooting in 86400 seconds..