last executing test programs: 15.914517525s ago: executing program 1 (id=796): r0 = gettid() kcmp(r0, r0, 0xb737c17673224bbb, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8ca, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030383030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e37518700de273c193812eb0bc448e68edb3c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e3284dac39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afc9d79497c1d9ef1cedf1f0bbb239569"], 0x11, 0x4441, &(0x7f00000088c0)="$eJzs3c9vE1ceAPA3k+ySsMAmLAd2tdJaWqRd7VZRwqltkBpCICQkpaIFVb0YJzEQ6sQocaoekJrekHqq1EPVA2ql3nKiOfRK/4ReeqRnpPbQSyUk1FS2x0lmYisujZOCPh+JjOf9tr+e5zeH4cWJyq355dz8cq6wmCvP3lg+nXuvXFpZKIZ4nxx0/7SnE3ES+4Nz+dyFN6+dDuGbue8eb2xsbISq7tDU0LbXP/90d3b7sSHO1Km227y1vfJOCOHEjnFVdYUQ3v46hCiEcDZJG02OvSGEY6Ged+3uR9dzezSaB4+KZ/JPp++tD5+aXLu/3vq9RyF8Vvr7SzcXfvh31/D3/9uj7gEAAAAAAAAAAAAAAAAAeM6NX7l89Y3BofAwCt1r0c7ndceTY6vnYzf2zL/aGu+TpPTvfd8AAAAAAAAAAAAAAAAAAADwR7L1/H8uOt7k+f+x5DjSov7Ga50fI50z8frlsfNfTSX7v0c78l9Okn482xX6m+z7nt3//WymfvP933f286wa42v02xeieCB1HscDAyF8kWz8fjI6HJfKy5X/3yivLM7t2TCeW7X4Dw4l8a/v3p+KTrKhf7vxH8203/n9//+249tUPb++d1+xF1o6/l0ty335YdRW/M9l6u1H/Fvq6WzPL4J0/Ltrab3bC4zUJ4Bq/D/u3j3+Y5n2OxX/YyGEXFQday41A1TXMNX0VusV0tLx/1MtLTV1Jh9kq+v/SSb+5zPtH9T8v5r9IaKpdPz/XEtLT5tb139/vPv1fyHT/kHEvzr+Vb//bUnH/1A9sTtVpPZJtjv/j2fa71T8r8bJOI9FqW/AWlRPb/X/1ZGWjv/OBdPW/V/c1vrvYqb+ft3/Nfpt3P81pv//RvX7P5pLx7+3Zbl2r/+JTL1Oz/8jtfUfzyod/8O1tPTaua/2t0X8b/8j095k5nwr/h/s6bhrq5KeRvy35pNfDtXTP7f+a0s6/n+pJ8bbS6zW/tbWf9Hu6/9LmfYPYv1XHf9q3NleXxTp+B9pWa4a/2/b+P2fytTrfPxDGLTWf2bp+B9tWa52/ffsHv/pTL1Ox/8/nWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dkwmhz7QhQPpM7jeGAghHPJ+clwOJopzOVnSuXZd5dDGEvSc+F4dLNUnimU8vOL5blivlAqlWdDOJ/knwg90XKpXMkvFO5c2GyrN7pVLCxVZoqFSghhPEn/ZzjaaGtmvrJQuBNCuLiZ99e4vHTnVmExPze/9Org4OBgmNgcQ39UfL9SXKzUe6/nhjC5Wbcv2ja4WvalzbEciW6XV5YWC6Va+tS2OqXybKG0rc50kvdJ6I8qSyuLs4VKMV8q32z0d5BGkuPYxJW3rkwN7ci/HtWPo/s7LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+o4fDr3waQuiun8UhhFyUvIiSfykPHhXP5J9O31sfPjW5dn/9cbMyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbpGCViKAgD8LxnoaXHsApJZxtRRAsjgifQY3gYPYqX8A4WFrYplmV3X2BJNpBmt/q+Zpj8JDOQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWO7+pXt9rpuIFBer84jv95/f/fyx1M+bw++fnWBHjufhqbu9q5vy39Mkvy6P/tq8Tfv/j7dN30eppR98je5kfE870zljc/c2t98w9zJSriKiLflVyrmqln0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDU7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvwIAAP//RGUlNQ==") syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c03, r1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) socket(0x8, 0x80000, 0x6) (async) r2 = socket(0x8, 0x80000, 0x6) sendmsg$inet6(r2, 0x0, 0x0) (async) sendmsg$inet6(r2, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x90}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x20, 0x7800, 0x1, 0x7, {{0xc, 0x4, 0x2, 0x3, 0x30, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x1c, 0x24, 0x0, 0x6, [0x6, 0xfffffff9, 0x6, 0x0, 0x1, 0xe06]}]}}}}}) socket$inet6(0xa, 0x3, 0x3c) (async) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0x5dc}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpgrp(0x0) (async) r4 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7fff) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7fff) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x110, 0xffffffffffffffff, 0x448dc000) syz_clone(0xd0009200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0xd0009200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_create_resource$binfmt(0x0) (async) syz_create_resource$binfmt(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='\x00\x00\x00', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9X\xdd\x9e\xba\xc3Q\x81L\xd2h\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0fa\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae5\xe6\xf1B\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\xd05\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v,l\xd6,\x1e\xbf\xfdkm\b?\x839\x85N#\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x06\x00\x00R-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\x04\x00\x00\x00\x00\x00\x00\x00\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\x9f\xd0,\xef\xab\x83g\nh\xe4\xa0\x9c\x1fI\xa4,\xa93\x8dMS\xe8,N\xe5\xf5\xd0\xee\x99\x05\xc1\xb6\xb0\xcb\xccj%l\x9a\xf3*p=\xaf\xda\x03Q\x95\\\x04\x9b \x8b|\xb4qc\xed\xb7\xcdH+\xf8\xb9\x1d\xe8\x9e\x96\x82\x1c\x80{\t\xf7,\xe0\x87&\x9b\xb00m\xd9\x8f\xff\xd9I\xd0', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0xffffffffffffffff, 0x4}, 0x38) 14.37164657s ago: executing program 2 (id=799): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200f40004000000080000000103000080000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="ff2e710635c2e1f7e90d47947737e54be26ee19f2787b629e543ed3f8366f4bcb03d172cd1e38a4a293bee1502fe8b92bf103e16d8", @ANYBLOB="2eefc265fcabdf3fe2fb31431edc9efcf43ce518a51055f7ffe3117d3f1f59ea2e9ea7b2", @ANYRES8=r1], 0x50) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x24004015) shutdown(r3, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$MSR(&(0x7f0000000280), 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r6, &(0x7f0000000000)=':', 0x1) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040)=0x99000000, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="2b2000e1da3e96bd000000000044001bbb44abd0d980617b48e8ef69dce433389bc9e6465537c5ca78e079dccb7d0e99060ad74eb02fe787619dd040d686610d4199c9f10013e630365613"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, &(0x7f0000004000)) splice(r6, &(0x7f0000000040), r5, 0x0, 0x6, 0x0) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000004400)="eb", 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r10, 0x0, 0x0}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800fcff000000000000000000002e000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007b2f9e9a2ecc974130200000800000018230000f9de7db586c9ab227499bba033441c21c951b0bc04b419c92fa0bfa13a9b522f6b41faea68efecaad9d010e7d3f866c48873dcb6bd43f70688ab95b5572713c1f74948e327b722d6be2375c0a79356ac7801b3811fcd", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r12, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x9, 0x5, 0x355, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}, 0x10) 14.218674588s ago: executing program 0 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, &(0x7f0000000040)=0x8001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x114, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r6], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 14.121010393s ago: executing program 1 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000080), 0x1003, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0xffffffffffffffff, 0x6, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x100, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x7, 0xb}, {0x10, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x401, 0x1, 0x2, 0x7, 0x6, 0x1}}, {0x6, 0x2, [0xff]}}, {{0x1c, 0x1, {0xff, 0x3, 0x5, 0x0, 0x2, 0x7, 0x8, 0xa}}, {0x18, 0x2, [0x3, 0xfeae, 0xf876, 0x2, 0xc, 0x8, 0x6, 0x6, 0x7, 0xd213]}}, {{0x1c, 0x1, {0x9, 0xb, 0xfff7, 0x4, 0x2, 0x6, 0x800, 0x4}}, {0xc, 0x2, [0x2c8, 0x7, 0x4, 0xaf3c]}}, {{0x1c, 0x1, {0x6, 0x22, 0x97c, 0xb, 0x1, 0x3, 0x7f, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x1, 0xd6, 0xb0e, 0x80000, 0x0, 0x6, 0x6, 0x5}}, {0xe, 0x2, [0x0, 0x9, 0xee28, 0x600, 0x2]}}]}]}, 0x100}}, 0x40440c0) (async) iopl(0x3) (async) bpf$BPF_GET_MAP_INFO(0x1d, 0x0, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) (async) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340000000920500024000000002080004400000008308000140000000110800034000000002080002400000008408000140"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) iopl(0x1) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) (async) accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0x80000) 13.647506416s ago: executing program 2 (id=802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000400)={0x3, &(0x7f0000000300)=[{0x7, 0x81, 0x3, 0x9}, {0x4fef, 0x8, 0xec, 0x6}, {0x3, 0xff, 0x7, 0xffff}]}) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab400000000008000", 0xc}, {&(0x7f0000000280)="cc86", 0x2}], 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000200)=0x6, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000500)={0x9, [[0x3, 0x101, 0x8, 0x5, 0x4c, 0x3, 0x4, 0x4], [0xa, 0x81, 0xffffffff, 0x2, 0x6, 0xffffff80, 0x5, 0x1], [0x1, 0x5, 0x8517, 0x7, 0x7, 0x10001, 0xb, 0xb]], '\x00', [{0x3, 0xc, 0x1, 0x1, 0x1}, {0x5776d45a, 0x40, 0x1, 0x1, 0x1}, {0x10001, 0x0, 0x1, 0x1}, {0xfffffff7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xc, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x80000001}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x16) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x6}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x6}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010140, 0x0, 0x3}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d7, 0x2, 0x6], [0x9d8, 0x7, 0x1, 0x9, 0xc, 0x4, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x4000000005, 0x1, 0x2a9, 0x9, 0xc39, 0x3, 0x8, 0xffffffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x2, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x5, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x7, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x807, 0x1, 0x7ffffffffffffffc, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x2, 0x8, 0x20406, 0x3, 0x6, 0x102, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000140)=0x81e8) add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000000000000200000006000000000000001400000000000000100100000a"], 0x30}, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0)) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x398}) 13.182636118s ago: executing program 0 (id=803): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) r4 = syz_open_dev$video(&(0x7f00000002c0), 0x5, 0x10001) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@mmap={0x6d3a1385, 0xb, 0x4, 0x400, 0x2, {}, {0x2, 0x1, 0x1, 0x2, 0xfd, 0xe, "a465003d"}, 0x0, 0x1, {}, 0x5}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4080) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={0x60, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @random="3a5cb15252a0", {}, @value=@ver_80211n={0x0, 0x2d04, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @vht_group_id={0x15, 0x1, {0x6, "a347971bee4cf97704969538f5ebf216"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x36, 0x3]}]}, 0x60}}, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff01000000350000005600000225001f0019000a0010", 0x25}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8000033fe3, 0x0) 13.121160162s ago: executing program 1 (id=804): syz_open_dev$video(&(0x7f0000000000), 0x8, 0x8000) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @remote, 0x3}, 0x1c) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f00000004c0)="24ee0b511c47275cd96b5ec651a80f0dce0141ffcbe8d084082b8a65a1d396bd23edc2388f9aec034caa72c095d58e603e19d9dec432f4ade8a6d1d5570ed280d56df31dbe2fffa68c0cbaa02854c798dc407ba2ce50027550dade4fb8bb256c27d84cbfff6399f5e9a20285aa729f6630bccc", 0x73}], 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000480)={@multicast2, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e1c, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3fff8000}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 11.429870743s ago: executing program 1 (id=805): pselect6(0x40, &(0x7f0000000040)={0x1, 0x72ca2b6f, 0x5, 0x401, 0x6, 0x3, 0x2, 0x8}, &(0x7f0000000100)={0x9, 0x2, 0x5, 0x9, 0x3, 0xb, 0x60d, 0x1}, &(0x7f0000000140)={0x5, 0x4, 0x7, 0x4, 0x10001, 0x29, 0x8000000000000000, 0xfb2b}, &(0x7f0000000180), &(0x7f0000000240)={&(0x7f0000000200)={[0x1000]}, 0x8}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0xa00004, &(0x7f0000000280)=ANY=[@ANYBLOB="6163656c616e642c757466382c7569643d774086b53e9893de77dccb1922f7fb2f1c9bca6d0aac37c42e7644bb92589115932b2eb3180e7b7e8d8ce13e4fbcd5e7d4f80dbf1fe720bd46610585ea00"/92, @ANYRESDEC=0x0, @ANYBLOB=',novrs,iocharset=cp866,mode=00000000000000000000010,novrs,adinicb,gid=forget,uid=forget,umask=00000000000000000000000,anchor=00000000000000002311,\x00'], 0x1, 0xc4d, &(0x7f0000000f40)="$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") r0 = memfd_create(&(0x7f0000001000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000005900)="10a75fb6d75d61b715b87947bdfdbe87b0cb6025e5e9d809b873116f39dc466d1e7fd8d038cf807de4f54994fa44fc67739f06cf165378b371b2e432438f0d") socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffffff, 0x0, 0x101042, 0x100) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1f, &(0x7f0000005b80)=ANY=[@ANYBLOB='noinline_dentry,memory=normal,mode=adaptive,quota,checkpoint=enable,mode=fragment:segment,norecovery,disable_ext_identify,compress_chksum,jqfmt=vfsold,fsync_mode=strict,background_gc=on,resgid=', @ANYRESHEX=r3, @ANYBLOB=',checkpoint=enable,seclabel,measure,smackfshat=./cgroup.net/syz0\x00,fowner<', @ANYRESDEC, @ANYBLOB="aa854072487e00e3735801c83b1cde69aa47bccca7977f7c898811ffbb438b4b707d2e51840f16a0647340397d4c6e8ff75d04d7b0ad26054dc71e36d37bcbe8e1c005c71ecba0142d7d2840bf93565594ba81ff02c1fb1bdc9a27909960b7ee9db0c8e21c884402ee88e0acf8c1a272249aa7b85d409be4c44c63cc3e0f49177f2c053dbb4997394e3a0e04be8770ba51d742190edc0518fe966d6cbec56c15045bb34b8cc0afaf3b4b6cf40124bec4b9c6b0aa071d227908b0d50ebb4fc7"], 0x0, 0x554d, &(0x7f0000000380)="$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") r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0x10, &(0x7f0000000140), 0x4) preadv2(r4, 0x0, 0x0, 0x6, 0x9010, 0x11) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x1a04447, &(0x7f0000000240)=ANY=[], 0x4, 0x1e9, &(0x7f0000000440)="$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") rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x4, @private2, 0x7fd}, 0xa, &(0x7f0000000280)=[{&(0x7f0000000040)='!', 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}], 0x18, 0x4001}, 0x280400d5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x18, 0x70, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x40000050}, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 11.378789676s ago: executing program 3 (id=806): syz_open_dev$video(0x0, 0x8, 0x8000) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @remote, 0x3}, 0x1c) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e1c, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3fff8000}, 0x1c) 11.378380906s ago: executing program 0 (id=807): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='sysfs\x00', 0x8e6082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, 0x0, 0x0, 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000200000000000800a0009409000008002600940900000800270000000000"], 0x48}}, 0x0) 10.140768447s ago: executing program 3 (id=808): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='setgroups\x00') r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) writev(r0, &(0x7f0000000700)=[{&(0x7f00000001c0)="444a5e5a56486a0e", 0x8}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000000c00)="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", 0x2000, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x130, 0x0, 0x8, {0x3, 0x7, 0x0, '\x00', {0x1, 0xf, 0xf, 0x3, r7, r8, 0x2000, '\x00', 0x4a, 0xea3c, 0x4, 0xc08d, {0x8000, 0x5}, {0x541, 0x6}, {0xc0, 0xdaa}, {0x1ff}, 0x9, 0x1, 0xd, 0x20f}}}}) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x22000100, 0x0, 0xfffb, 0x7}}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='/\x00\x00\x00$'], 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x2ac68be09e15a90e}, 0x24000844) 9.528929827s ago: executing program 2 (id=809): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='sysfs\x00', 0x8e6082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, 0x0, 0x0, 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000200000000000800a0009409000008002600940900000800270000000000"], 0x48}}, 0x0) 9.010278841s ago: executing program 0 (id=810): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x2080200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$binfmt_misc(r5, &(0x7f0000000200)="9dadbbb1796dcee45d34aed79ee97a6ebe1250aa10d3c65c3fca2df27b79ea61b0c4fa76f9369b624d8d38925b239e59c3514f4d86898ef816bf140ed9df5a6f466f918f9bd75eb2ba3c32753004aaa2d3f6a7c0a57a5614fb23e7b9a71be3d2189b81f7de5d591fe3fdf61303af212bfec97ec7af510c9be9c6138e7c5eeacd7ae0e60aed13f1336ce90586642d679e7f7503b492dac2afebc9fa470fa9c0c4dde8a463dbe38f11efd52d7ef368de82", 0xb0) (fail_nth: 2) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, 0x0) 7.684242916s ago: executing program 0 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, &(0x7f0000000040)=0x8001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x114, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r6], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 7.683102846s ago: executing program 2 (id=812): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x20000050) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x4, 0x1, 0xc, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x6, '\x00', @string=0x0}}) r3 = syz_clone(0x2080200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$binfmt_misc(r6, &(0x7f0000000200)="9dadbbb1796dcee45d34aed79ee97a6ebe1250aa10d3c65c3fca2df27b79ea61b0c4fa76f9369b624d8d38925b239e59c3514f4d86898ef816bf140ed9df5a6f466f918f9bd75eb2ba3c32753004aaa2d3f6a7c0a57a5614fb23e7b9a71be3d2189b81f7de5d591fe3fdf61303af212bfec97ec7af510c9be9c6138e7c5eeacd7ae0e60aed13f1336ce90586642d679e7f7503b492dac2afebc9fa470fa9c0c4dde8a463dbe38f11efd52d7ef368de82", 0xb0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000080)="d80000001a0081044e81f782db8cdd041c1d0800f6007c05e8fe55a108000100ff0016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e665725cfa693c53fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d4ee6ccd40dd6e4edef3d93452a92954b43370ed7778b10136e8eb585", 0xd8}], 0x1}, 0x0) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, 0x0) 6.158450471s ago: executing program 2 (id=813): syz_open_dev$video(&(0x7f0000000000), 0x8, 0x8000) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @remote, 0x3}, 0x1c) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f00000004c0)="24ee0b511c47275cd96b5ec651a80f0dce0141ffcbe8d084082b8a65a1d396bd23edc2388f9aec034caa72c095d58e603e19d9dec432f4ade8a6d1d5570ed280d56df31dbe2fffa68c0cbaa02854c798dc407ba2ce50027550dade4fb8bb256c27d84cbfff6399f5e9a20285aa729f6630bccc", 0x73}], 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000480)={@multicast2, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e1c, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3fff8000}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 5.721222942s ago: executing program 3 (id=814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x40001}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x5, @none, 0x401, 0x2}, 0xe) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x8001, @none, 0x401, 0x2}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x3fffd, 0x0, 0x52, 0x0, 0x0, 0x0}, 0x50) 4.339871749s ago: executing program 3 (id=815): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x4, 0x1}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x122}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1008, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000001100)=@mmap={0xe, 0x7, 0x4, 0x0, 0x6f5, {}, {0x3, 0x0, 0x9, 0x0, 0x7, 0x3, "10927843"}, 0x0, 0x1, {}, 0x7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000011, &(0x7f0000000180)={[{@uqnoenforce}, {@bsdgroups}, {@filestreams}, {@noattr2}, {@nogrpid}, {@norecovery}, {@inode64}, {@attr2}]}, 0x1, 0x985f, &(0x7f0000012fc0)="$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") io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_GETNSID={0x14, 0x5a, 0x2, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 3.89997436s ago: executing program 1 (id=816): syz_open_dev$video(0x0, 0x8, 0x8000) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @remote, 0x3}, 0x1c) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e1c, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3fff8000}, 0x1c) 2.760775146s ago: executing program 0 (id=817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000400)={0x3, &(0x7f0000000300)=[{0x7, 0x81, 0x3, 0x9}, {0x4fef, 0x8, 0xec, 0x6}, {0x3, 0xff, 0x7, 0xffff}]}) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab400000000008000", 0xc}, {&(0x7f0000000280)="cc86", 0x2}], 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000200)=0x6, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000500)={0x9, [[0x3, 0x101, 0x8, 0x5, 0x4c, 0x3, 0x4, 0x4], [0xa, 0x81, 0xffffffff, 0x2, 0x6, 0xffffff80, 0x5, 0x1], [0x1, 0x5, 0x8517, 0x7, 0x7, 0x10001, 0xb, 0xb]], '\x00', [{0x3, 0xc, 0x1, 0x1, 0x1}, {0x5776d45a, 0x40, 0x1, 0x1, 0x1}, {0x10001, 0x0, 0x1, 0x1}, {0xfffffff7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xc, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x80000001}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x16) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x6}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x6}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010140, 0x0, 0x3}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d7, 0x2, 0x6], [0x9d8, 0x7, 0x1, 0x9, 0xc, 0x4, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x4000000005, 0x1, 0x2a9, 0x9, 0xc39, 0x3, 0x8, 0xffffffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x2, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x5, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x7, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x807, 0x1, 0x7ffffffffffffffc, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x2, 0x8, 0x20406, 0x3, 0x6, 0x102, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000140)=0x81e8) add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000000000000200000006000000000000001400000000000000100100000a"], 0x30}, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0)) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 2.759665796s ago: executing program 2 (id=818): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e000005000000002000", @ANYRES32, @ANYBLOB="02000000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="7e6ba4f0af122d1764ec03dfd39c2c490ca8038a54f05ffffaa44e49139c3f129a71c642f9cff64bd51de7f1888f37c051814c6f96e83069f810133b85b8ee0e7ec3a777f20664e7eca7ab4d18dd91bf69e5a04f7ec7af307d38fbc08682cbb870b8a708253b0000001a683bf33d4343e4829ab375bfa5aa3f943c640bfacbcc6810daf2", @ANYRES16=0x0, @ANYBLOB="000228bd70000800000017000000040001800c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="34000180140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d616373656330"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d867", 0x8c}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f", 0x45}], 0x4}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.207998892s ago: executing program 1 (id=819): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0xc03, &(0x7f0000008040)=ANY=[], 0x2, 0x5fbf, &(0x7f0000002080)="$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") r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0205647, &(0x7f00000000c0)={0x8f010000, 0x0, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) write$FUSE_NOTIFY_INVAL_ENTRY(r1, 0x0, 0x2f) syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x1, 0x1ff, &(0x7f00000005c0)="$eJzs3M1O1FAYxvGn0xZGNOJH/IgrExPjRkaBhMxKuQBvwMQFwUImFjXiBmKi3IR7t668BBO9D28AFu5ccUzbQ2Y6MzCnpaXK/H8J05eZ87TnQM5h2oYRgKn1NH305KmdVsaYj3clPX8mKWi4cwBqZez20ACYPn7pqf/iaA0B8F86WPUltfXdk379/rC+b7/aju8fDlZbWeFJ+wP5C675PS/d3gny+TlJF0daj56QmC9Z/r7y+UsFjz83lNcV13w2/gf3FGogf1nSvJTu5qqka5KuS7NJ2xuSWrnjz9jv+vnb2RN7jsMAAAAAAOBEydnnwmnzE3fgS3o09pXkPHijF0fjX50stPnHJfMzNr94yvzS4JOt41p7/TLMNrM2v7D+Jn5Zsg9AWa1i83/ksqDL/D92OtiVIT//Q/fe2CuCG73PhTIAMts7u6/W4jh6V2Xx5KQ2UtEdJitCxT0cX3xNCv3J7ozUfKwyRbLYlo0f3ZCpumOfNLmNcWhznoqg2p/zD3nD8zTITaJv9ndb6SiGFgr/jBcmALXrvN9629ne2X3Y21rbjDaj18sr3e7K8tJit5O+LU8ezXzTvQRQh/4f/aZ7AgAAAAAAAAAAAAAAyrop6VZa/TwsEHP9eA8AAAAA/5Cz+KeopscIAAAAAAAAAAAAAMB59zcAAP//jf04bg==") truncate(&(0x7f00000003c0)='./file2\x00', 0x1bfc) 1.146626674s ago: executing program 3 (id=820): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x4, 0x1}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 0s ago: executing program 3 (id=821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000400)={0x3, &(0x7f0000000300)=[{0x7, 0x81, 0x3, 0x9}, {0x4fef, 0x8, 0xec, 0x6}, {0x3, 0xff, 0x7, 0xffff}]}) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="242dfcb354b3", 0x6}, {&(0x7f0000000240)="a43b2eaab400000000008000", 0xc}, {&(0x7f0000000280)="cc86", 0x2}], 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000200)=0x6, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000500)={0x9, [[0x3, 0x101, 0x8, 0x5, 0x4c, 0x3, 0x4, 0x4], [0xa, 0x81, 0xffffffff, 0x2, 0x6, 0xffffff80, 0x5, 0x1], [0x1, 0x5, 0x8517, 0x7, 0x7, 0x10001, 0xb, 0xb]], '\x00', [{0x3, 0xc, 0x1, 0x1, 0x1}, {0x5776d45a, 0x40, 0x1, 0x1, 0x1}, {0x10001, 0x0, 0x1, 0x1}, {0xfffffff7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xa, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x3, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x7ff, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0xc, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x80000001}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x16) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x6}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000001c0)={0x6}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010140, 0x0, 0x3}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d7, 0x2, 0x6], [0x9d8, 0x7, 0x1, 0x9, 0xc, 0x4, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x4000000005, 0x1, 0x2a9, 0x9, 0xc39, 0x3, 0x8, 0xffffffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x2, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x5, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x7, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x807, 0x1, 0x7ffffffffffffffc, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x2, 0x8, 0x20406, 0x3, 0x6, 0x102, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000140)=0x81e8) add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000000000000200000006000000000000001400000000000000100100000a"], 0x30}, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000002c0)) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x398}) kernel console output (not intermixed with test programs): name+0x90/0x90 [ 367.203521][ T7527] ? __fget_files+0x43d/0x4b0 [ 367.208241][ T7527] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 367.214259][ T7527] ? lock_chain_count+0x20/0x20 [ 367.219137][ T7527] __x64_sys_sendto+0xde/0xf0 [ 367.223844][ T7527] do_syscall_64+0x55/0xa0 [ 367.228281][ T7527] ? clear_bhb_loop+0x40/0x90 [ 367.232991][ T7527] ? clear_bhb_loop+0x40/0x90 [ 367.237689][ T7527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.243689][ T7527] RIP: 0033:0x7f701339c799 [ 367.248121][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.267743][ T7527] RSP: 002b:00007f701422e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 367.276178][ T7527] RAX: ffffffffffffffda RBX: 00007f7013615fa0 RCX: 00007f701339c799 [ 367.284182][ T7527] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 367.292207][ T7527] RBP: 00007f701422e090 R08: 000020000005ffe4 R09: 000000000000001c [ 367.300230][ T7527] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 367.308222][ T7527] R13: 00007f7013616038 R14: 00007f7013615fa0 R15: 00007fffdeca6f68 [ 367.316224][ T7527] [ 368.635887][ T7530] loop0: detected capacity change from 0 to 4096 [ 368.655404][ T7530] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 368.804340][ T7530] ntfs: volume version 3.1. [ 369.164927][ T7537] pim6reg1: entered promiscuous mode [ 369.170371][ T7537] pim6reg1: entered allmulticast mode [ 370.048887][ T7543] pim6reg1: entered promiscuous mode [ 370.054354][ T7543] pim6reg1: entered allmulticast mode [ 370.597670][ T5084] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 370.752487][ T7550] netlink: 'syz.0.406': attribute type 21 has an invalid length. [ 370.768086][ T7550] IPv6: NLM_F_CREATE should be specified when creating new route [ 370.777502][ T7550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.785270][ T7550] IPv6: NLM_F_CREATE should be set when creating new route [ 370.792577][ T7550] IPv6: NLM_F_CREATE should be set when creating new route [ 370.799863][ T7550] IPv6: NLM_F_CREATE should be set when creating new route [ 370.922030][ T7550] loop0: detected capacity change from 0 to 1024 [ 371.035021][ T7550] hfsplus: failed to load root directory [ 371.330983][ T7557] No such timeout policy "syz1" [ 371.359370][ T7556] autofs4:pid:7556:autofs_fill_super: called with bogus options [ 371.370102][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 372.712812][ T7563] FAULT_INJECTION: forcing a failure. [ 372.712812][ T7563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.747069][ T7563] CPU: 1 PID: 7563 Comm: syz.2.412 Not tainted syzkaller #0 [ 372.754448][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.764521][ T7563] Call Trace: [ 372.767805][ T7563] [ 372.770742][ T7563] dump_stack_lvl+0x18c/0x250 [ 372.775449][ T7563] ? show_regs_print_info+0x20/0x20 [ 372.780671][ T7563] ? load_image+0x400/0x400 [ 372.785194][ T7563] ? __lock_acquire+0x7d40/0x7d40 [ 372.790246][ T7563] ? mark_lock+0x94/0x320 [ 372.794590][ T7563] should_fail_ex+0x39d/0x4d0 [ 372.799284][ T7563] prepare_alloc_pages+0x1e2/0x5f0 [ 372.804680][ T7563] __alloc_pages+0x134/0x460 [ 372.809280][ T7563] ? zone_statistics+0x170/0x170 [ 372.814246][ T7563] __folio_alloc+0x10/0x20 [ 372.818676][ T7563] vma_alloc_folio+0x47a/0x8f0 [ 372.823454][ T7563] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 372.829276][ T7563] shmem_alloc_folio+0x1a9/0x2a0 [ 372.834228][ T7563] ? folio_put+0xd0/0xd0 [ 372.838505][ T7563] ? shmem_inode_acct_block+0x324/0x460 [ 372.844071][ T7563] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 372.849820][ T7563] ? put_swap_device+0x230/0x230 [ 372.854773][ T7563] ? xas_load+0x12b/0x140 [ 372.859110][ T7563] ? filemap_get_entry+0xce/0x3f0 [ 372.864152][ T7563] ? filemap_get_entry+0xce/0x3f0 [ 372.869178][ T7563] ? filemap_get_entry+0x379/0x3f0 [ 372.874289][ T7563] ? __lock_acquire+0x1273/0x7d40 [ 372.879320][ T7563] ? page_cache_prev_miss+0x390/0x390 [ 372.884715][ T7563] shmem_get_folio_gfp+0xcde/0x2aa0 [ 372.889962][ T7563] shmem_fault+0x1b8/0x810 [ 372.894378][ T7563] ? zero_pipe_buf_get+0x10/0x10 [ 372.899318][ T7563] ? handle_mm_fault+0xe7/0x4c00 [ 372.904369][ T7563] ? __lock_acquire+0x7d40/0x7d40 [ 372.909407][ T7563] __do_fault+0x13b/0x4d0 [ 372.913738][ T7563] ? handle_mm_fault+0x227d/0x4c00 [ 372.918854][ T7563] handle_mm_fault+0x2299/0x4c00 [ 372.923796][ T7563] ? handle_mm_fault+0xe7/0x4c00 [ 372.928733][ T7563] ? numa_migrate_prep+0x350/0x350 [ 372.933845][ T7563] ? lock_chain_count+0x20/0x20 [ 372.938695][ T7563] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 372.943974][ T7563] do_user_addr_fault+0x730/0x12c0 [ 372.949093][ T7563] exc_page_fault+0x64/0x100 [ 372.953681][ T7563] asm_exc_page_fault+0x26/0x30 [ 372.958521][ T7563] RIP: 0010:__import_iovec+0x187/0x850 [ 372.963980][ T7563] Code: 24 18 74 08 48 89 df e8 77 05 b7 fd 48 c7 03 00 00 00 00 4c 89 fb e9 d3 04 00 00 4d 85 e4 0f 88 5d 05 00 00 0f 01 cb 0f ae e8 <4d> 8b 7c 24 08 49 8b 1c 24 31 ff 4c 89 fe e8 f6 d9 5e fd 4d 85 ff [ 372.983582][ T7563] RSP: 0018:ffffc90003a77c60 EFLAGS: 00050206 [ 372.989645][ T7563] RAX: 1ffff9200074efc4 RBX: 0000000000000000 RCX: 0000000000000000 [ 372.997611][ T7563] RDX: ffff888022683c00 RSI: 0000000000000001 RDI: 0000000000000001 [ 373.005576][ T7563] RBP: 0000000000000008 R08: ffffc90003a77e20 R09: ffffc90003a77e40 [ 373.013542][ T7563] R10: ffffc90003a77e40 R11: fffff5200074efcd R12: 0000200000000000 [ 373.021526][ T7563] R13: dffffc0000000000 R14: ffffc90003a77d80 R15: ffffc90003a77e20 [ 373.029518][ T7563] import_iovec+0x73/0xa0 [ 373.033846][ T7563] do_writev+0x235/0x480 [ 373.038103][ T7563] ? do_readv+0x460/0x460 [ 373.042425][ T7563] ? __fget_files+0x28/0x4b0 [ 373.047029][ T7563] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 373.053014][ T7563] ? lock_chain_count+0x20/0x20 [ 373.057898][ T7563] ? lockdep_hardirqs_on+0x98/0x150 [ 373.063097][ T7563] do_syscall_64+0x55/0xa0 [ 373.067507][ T7563] ? clear_bhb_loop+0x40/0x90 [ 373.072267][ T7563] ? clear_bhb_loop+0x40/0x90 [ 373.076953][ T7563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.082842][ T7563] RIP: 0033:0x7fa7f599c799 [ 373.087250][ T7563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.106860][ T7563] RSP: 002b:00007fa7f6914028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 373.115269][ T7563] RAX: ffffffffffffffda RBX: 00007fa7f5c15fa0 RCX: 00007fa7f599c799 [ 373.123236][ T7563] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 373.131208][ T7563] RBP: 00007fa7f6914090 R08: 0000000000000000 R09: 0000000000000000 [ 373.139171][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.147139][ T7563] R13: 00007fa7f5c16038 R14: 00007fa7f5c15fa0 R15: 00007fff82984fc8 [ 373.155129][ T7563] [ 374.895309][ T7576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.416'. [ 375.025506][ T7578] loop2: detected capacity change from 0 to 512 [ 375.093477][ T7578] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 375.115564][ T7582] loop1: detected capacity change from 0 to 512 [ 375.159364][ T7582] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 375.182853][ T7562] loop0: detected capacity change from 0 to 65536 [ 375.193447][ T7580] loop3: detected capacity change from 0 to 8192 [ 375.588728][ T7583] xt_hashlimit: size too large, truncated to 1048576 [ 377.680346][ T7589] xt_hashlimit: size too large, truncated to 1048576 [ 379.239074][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.246438][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.246550][ T7562] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop0": -EINTR [ 380.121480][ T7597] xt_hashlimit: size too large, truncated to 1048576 [ 381.339171][ C1] sched: RT throttling activated [ 381.938939][ T7596] loop0: detected capacity change from 0 to 8192 [ 382.303105][ T7596] netlink: 164 bytes leftover after parsing attributes in process `syz.0.422'. [ 382.566969][ T7602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 382.616597][ T7602] FAT-fs (loop0): Filesystem has been set read-only [ 382.639461][ T7602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 382.703899][ T7602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 383.132937][ T7602] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 386.934990][ T7628] No such timeout policy "syz1" [ 386.949488][ T7628] autofs4:pid:7628:autofs_fill_super: called with bogus options [ 386.964594][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 387.727303][ T7630] FAULT_INJECTION: forcing a failure. [ 387.727303][ T7630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.759566][ T7630] CPU: 0 PID: 7630 Comm: syz.3.431 Not tainted syzkaller #0 [ 387.766897][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.776981][ T7630] Call Trace: [ 387.780359][ T7630] [ 387.783326][ T7630] dump_stack_lvl+0x18c/0x250 [ 387.788024][ T7630] ? show_regs_print_info+0x20/0x20 [ 387.793254][ T7630] ? load_image+0x400/0x400 [ 387.797794][ T7630] ? __might_fault+0xaa/0x120 [ 387.802489][ T7630] ? __lock_acquire+0x7d40/0x7d40 [ 387.807535][ T7630] should_fail_ex+0x39d/0x4d0 [ 387.812234][ T7630] _copy_from_user+0x2f/0xe0 [ 387.816839][ T7630] __x64_sys_utimes+0x121/0x250 [ 387.821718][ T7630] ? __ia32_sys_futimesat+0x270/0x270 [ 387.827099][ T7630] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 387.833096][ T7630] ? lock_chain_count+0x20/0x20 [ 387.837977][ T7630] ? lockdep_hardirqs_on+0x98/0x150 [ 387.843198][ T7630] do_syscall_64+0x55/0xa0 [ 387.847628][ T7630] ? clear_bhb_loop+0x40/0x90 [ 387.852332][ T7630] ? clear_bhb_loop+0x40/0x90 [ 387.857022][ T7630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.862930][ T7630] RIP: 0033:0x7f701339c799 [ 387.867360][ T7630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.886985][ T7630] RSP: 002b:00007f701422e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 387.895429][ T7630] RAX: ffffffffffffffda RBX: 00007f7013615fa0 RCX: 00007f701339c799 [ 387.903429][ T7630] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 00002000000001c0 [ 387.911416][ T7630] RBP: 00007f701422e090 R08: 0000000000000000 R09: 0000000000000000 [ 387.919398][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.927389][ T7630] R13: 00007f7013616038 R14: 00007f7013615fa0 R15: 00007fffdeca6f68 [ 387.935394][ T7630] [ 388.495328][ T7626] loop0: detected capacity change from 0 to 40427 [ 388.772677][ T7644] FAULT_INJECTION: forcing a failure. [ 388.772677][ T7644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.786055][ T7644] CPU: 0 PID: 7644 Comm: syz.1.428 Not tainted syzkaller #0 [ 388.793353][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.803505][ T7644] Call Trace: [ 388.806792][ T7644] [ 388.809734][ T7644] dump_stack_lvl+0x18c/0x250 [ 388.814519][ T7644] ? show_regs_print_info+0x20/0x20 [ 388.819734][ T7644] ? load_image+0x400/0x400 [ 388.824248][ T7644] ? __lock_acquire+0x7d40/0x7d40 [ 388.829291][ T7644] ? snprintf+0xe9/0x140 [ 388.833550][ T7644] should_fail_ex+0x39d/0x4d0 [ 388.838244][ T7644] _copy_to_user+0x2f/0xa0 [ 388.842673][ T7644] simple_read_from_buffer+0xe7/0x150 [ 388.848067][ T7644] proc_fail_nth_read+0x1e8/0x260 [ 388.853109][ T7644] ? proc_fault_inject_write+0x360/0x360 [ 388.858757][ T7644] ? fsnotify_perm+0x271/0x5e0 [ 388.863534][ T7644] ? proc_fault_inject_write+0x360/0x360 [ 388.869178][ T7644] vfs_read+0x28b/0x970 [ 388.873350][ T7644] ? kernel_read+0x1e0/0x1e0 [ 388.878035][ T7644] ? __fget_files+0x28/0x4b0 [ 388.882719][ T7644] ? __fget_files+0x28/0x4b0 [ 388.887314][ T7644] ? __fget_files+0x43d/0x4b0 [ 388.892012][ T7644] ? __fdget_pos+0x2a3/0x330 [ 388.896612][ T7644] ? ksys_read+0x75/0x260 [ 388.900958][ T7644] ksys_read+0x150/0x260 [ 388.905213][ T7644] ? vfs_write+0x990/0x990 [ 388.909731][ T7644] ? lockdep_hardirqs_on+0x98/0x150 [ 388.914942][ T7644] do_syscall_64+0x55/0xa0 [ 388.919365][ T7644] ? clear_bhb_loop+0x40/0x90 [ 388.924047][ T7644] ? clear_bhb_loop+0x40/0x90 [ 388.928736][ T7644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.934636][ T7644] RIP: 0033:0x7f47a195cfce [ 388.939057][ T7644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.958673][ T7644] RSP: 002b:00007f47a2780fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.967098][ T7644] RAX: ffffffffffffffda RBX: 00007f47a27816c0 RCX: 00007f47a195cfce [ 388.975073][ T7644] RDX: 000000000000000f RSI: 00007f47a27810a0 RDI: 0000000000000006 [ 388.983059][ T7644] RBP: 00007f47a2781090 R08: 0000000000000000 R09: 0000000000000000 [ 388.991040][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.999019][ T7644] R13: 00007f47a1c16218 R14: 00007f47a1c16180 R15: 00007ffc4b128ed8 [ 389.007013][ T7644] [ 389.029320][ T7626] F2FS-fs (loop0): Invalid segment/section count (24 != 24 * 3) [ 389.066961][ T7626] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 389.127049][ T7645] No such timeout policy "syz1" [ 389.133653][ T7645] autofs4:pid:7645:autofs_fill_super: called with bogus options [ 389.142826][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 389.172157][ T7626] F2FS-fs (loop0): heap/no_heap options were deprecated [ 389.185893][ T7626] F2FS-fs (loop0): invalid crc value [ 389.208976][ T7626] F2FS-fs (loop0): SIT is corrupted node# 0 vs 7 [ 390.506299][ T7626] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 390.611975][ T7651] loop2: detected capacity change from 0 to 512 [ 390.631215][ T7651] FAT-fs (loop2): Directory bread(block 199916) failed [ 390.638700][ T7651] FAT-fs (loop2): Directory bread(block 199917) failed [ 390.647655][ T7651] FAT-fs (loop2): Directory bread(block 199918) failed [ 390.655017][ T7651] FAT-fs (loop2): Directory bread(block 199919) failed [ 390.662776][ T7651] FAT-fs (loop2): Directory bread(block 199920) failed [ 390.689988][ T7651] FAT-fs (loop2): Directory bread(block 199921) failed [ 390.697579][ T7651] FAT-fs (loop2): Directory bread(block 199922) failed [ 390.730705][ T7651] FAT-fs (loop2): Directory bread(block 199923) failed [ 390.771216][ T7651] process 'syz.2.436' launched '/dev/fd/6' with NULL argv: empty string added [ 391.600257][ T7658] loop3: detected capacity change from 0 to 40427 [ 391.608693][ T7658] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 391.617148][ T7658] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 391.657618][ T7658] F2FS-fs (loop3): Found nat_bits in checkpoint [ 391.723611][ T7658] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 391.731000][ T7658] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 393.679939][ T7678] loop0: detected capacity change from 0 to 2048 [ 393.692997][ T7678] UDF-fs: bad mount option "aceland" or missing value [ 394.259617][ T7682] netlink: 'syz.1.435': attribute type 4 has an invalid length. [ 395.738431][ T7697] No such timeout policy "syz1" [ 395.748993][ T7697] autofs4:pid:7697:autofs_fill_super: called with bogus options [ 395.760682][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 398.047790][ T7716] loop2: detected capacity change from 0 to 128 [ 398.157292][ T7716] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 398.199600][ T7716] hpfs: filesystem error: improperly stopped [ 398.217310][ T7716] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 398.227716][ T7716] hpfs: You really don't want any checks? You are crazy... [ 398.239215][ T7716] hpfs: Code page index out of array [ 398.245150][ T7716] hpfs: code page support is disabled [ 398.262538][ T7716] hpfs: hpfs_map_4sectors(): unaligned read [ 398.269118][ T7716] hpfs: hpfs_map_4sectors(): unaligned read [ 398.283455][ T7716] hpfs: filesystem error: unable to find root dir [ 398.360314][ T7716] FAULT_INJECTION: forcing a failure. [ 398.360314][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 398.383647][ T7716] CPU: 0 PID: 7716 Comm: syz.2.455 Not tainted syzkaller #0 [ 398.391001][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.401173][ T7716] Call Trace: [ 398.404478][ T7716] [ 398.407439][ T7716] dump_stack_lvl+0x18c/0x250 [ 398.412160][ T7716] ? show_regs_print_info+0x20/0x20 [ 398.417391][ T7716] ? load_image+0x400/0x400 [ 398.421942][ T7716] ? __might_sleep+0xe0/0xe0 [ 398.426559][ T7716] ? __lock_acquire+0x7d40/0x7d40 [ 398.431610][ T7716] should_fail_ex+0x39d/0x4d0 [ 398.436324][ T7716] should_failslab+0x9/0x20 [ 398.440855][ T7716] slab_pre_alloc_hook+0x59/0x310 [ 398.445918][ T7716] ? vfs_write+0x7dd/0x990 [ 398.450360][ T7716] kmem_cache_alloc+0x5a/0x2d0 [ 398.455153][ T7716] ? getname_flags+0xbb/0x500 [ 398.459871][ T7716] getname_flags+0xbb/0x500 [ 398.464412][ T7716] do_sys_openat2+0xda/0x1d0 [ 398.469206][ T7716] ? do_sys_open+0xe0/0xe0 [ 398.473652][ T7716] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 398.479664][ T7716] ? lock_chain_count+0x20/0x20 [ 398.484544][ T7716] __x64_sys_openat+0x139/0x160 [ 398.489458][ T7716] do_syscall_64+0x55/0xa0 [ 398.493903][ T7716] ? clear_bhb_loop+0x40/0x90 [ 398.498602][ T7716] ? clear_bhb_loop+0x40/0x90 [ 398.503358][ T7716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.509313][ T7716] RIP: 0033:0x7fa7f599c799 [ 398.513756][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.533392][ T7716] RSP: 002b:00007fa7f6914028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 398.541836][ T7716] RAX: ffffffffffffffda RBX: 00007fa7f5c15fa0 RCX: 00007fa7f599c799 [ 398.549918][ T7716] RDX: 0000000000048041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 398.557913][ T7716] RBP: 00007fa7f6914090 R08: 0000000000000000 R09: 0000000000000000 [ 398.565911][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.573909][ T7716] R13: 00007fa7f5c16038 R14: 00007fa7f5c15fa0 R15: 00007fff82984fc8 [ 398.581926][ T7716] [ 399.382090][ T7723] netlink: 'syz.2.457': attribute type 4 has an invalid length. [ 400.262892][ T7726] loop3: detected capacity change from 0 to 128 [ 400.273645][ T7726] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 400.360576][ T7726] hpfs: filesystem error: improperly stopped [ 400.366635][ T7726] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 400.416605][ T7726] hpfs: You really don't want any checks? You are crazy... [ 400.439461][ T7726] hpfs: Code page index out of array [ 400.444813][ T7726] hpfs: code page support is disabled [ 400.469431][ T7726] hpfs: hpfs_map_4sectors(): unaligned read [ 400.477324][ T7726] hpfs: hpfs_map_4sectors(): unaligned read [ 400.498615][ T7726] hpfs: filesystem error: unable to find root dir [ 401.008477][ T7738] No such timeout policy "syz1" [ 401.018907][ T7738] autofs4:pid:7738:autofs_fill_super: called with bogus options [ 401.030938][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 402.998129][ T7752] loop2: detected capacity change from 0 to 2048 [ 403.098367][ T7752] UDF-fs: bad mount option "aceland" or missing value [ 403.291262][ T7751] loop1: detected capacity change from 0 to 40427 [ 403.322549][ T7751] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 403.330464][ T7751] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 403.361090][ T6872] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 403.396543][ T7751] F2FS-fs (loop1): Found nat_bits in checkpoint [ 403.447164][ T7751] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 403.454322][ T7751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 406.005763][ T7775] netlink: 'syz.1.466': attribute type 4 has an invalid length. [ 407.055365][ T7781] loop0: detected capacity change from 0 to 512 [ 407.131931][ T7781] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 407.902311][ T7781] xt_hashlimit: size too large, truncated to 1048576 [ 409.112522][ T7788] loop3: detected capacity change from 0 to 2048 [ 409.133714][ T7788] UDF-fs: bad mount option "aceland" or missing value [ 409.989273][ T7795] No such timeout policy "syz1" [ 410.083803][ T7795] autofs4:pid:7795:autofs_fill_super: called with bogus options [ 410.110667][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 411.019649][ T7793] sctp: [Deprecated]: syz.1.472 (pid 7793) Use of int in max_burst socket option deprecated. [ 411.019649][ T7793] Use struct sctp_assoc_value instead [ 412.782812][ T7811] No such timeout policy "syz1" [ 412.788816][ T7811] autofs4:pid:7811:autofs_fill_super: called with bogus options [ 412.797707][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 414.588423][ T7828] loop1: detected capacity change from 0 to 512 [ 414.617127][ T7828] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 414.727901][ T7829] loop3: detected capacity change from 0 to 512 [ 415.077874][ T7828] xt_hashlimit: size too large, truncated to 1048576 [ 416.659405][ T7829] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 417.368087][ T7839] xt_hashlimit: size too large, truncated to 1048576 [ 419.244726][ T7843] netlink: 'syz.2.487': attribute type 4 has an invalid length. [ 420.920103][ T7846] loop0: detected capacity change from 0 to 512 [ 420.964001][ T7846] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 421.715729][ T7847] xt_hashlimit: size too large, truncated to 1048576 [ 423.246201][ T7853] loop1: detected capacity change from 0 to 24 [ 423.276522][ T7853] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 423.388274][ T6872] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 423.420957][ T7853] syz.1.486: attempt to access beyond end of device [ 423.420957][ T7853] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 423.481615][ T7852] loop1: detected capacity change from 0 to 2048 [ 423.500120][ T7855] loop3: detected capacity change from 0 to 2048 [ 423.535019][ T7855] UDF-fs: bad mount option "aceland" or missing value [ 423.579826][ T7852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.462269][ T7864] FAULT_INJECTION: forcing a failure. [ 424.462269][ T7864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.475565][ T7864] CPU: 1 PID: 7864 Comm: syz.2.489 Not tainted syzkaller #0 [ 424.482899][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 424.492964][ T7864] Call Trace: [ 424.496249][ T7864] [ 424.499183][ T7864] dump_stack_lvl+0x18c/0x250 [ 424.503882][ T7864] ? show_regs_print_info+0x20/0x20 [ 424.509181][ T7864] ? load_image+0x400/0x400 [ 424.513698][ T7864] ? __might_fault+0xaa/0x120 [ 424.518381][ T7864] ? __lock_acquire+0x7d40/0x7d40 [ 424.523419][ T7864] should_fail_ex+0x39d/0x4d0 [ 424.528116][ T7864] _copy_from_user+0x2f/0xe0 [ 424.532726][ T7864] do_sock_getsockopt+0x188/0x450 [ 424.537767][ T7864] ? __ia32_sys_setsockopt+0x200/0x200 [ 424.543235][ T7864] ? lockdep_hardirqs_on+0x90/0x150 [ 424.548465][ T7864] __x64_sys_getsockopt+0x1d6/0x280 [ 424.553693][ T7864] ? lockdep_hardirqs_on+0x90/0x150 [ 424.558913][ T7864] ? lockdep_hardirqs_on+0x90/0x150 [ 424.564132][ T7864] do_syscall_64+0x55/0xa0 [ 424.568573][ T7864] ? clear_bhb_loop+0x40/0x90 [ 424.573265][ T7864] ? clear_bhb_loop+0x40/0x90 [ 424.577956][ T7864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.583869][ T7864] RIP: 0033:0x7fa7f599c799 [ 424.588296][ T7864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.607920][ T7864] RSP: 002b:00007fa7f68d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 424.616539][ T7864] RAX: ffffffffffffffda RBX: 00007fa7f5c16180 RCX: 00007fa7f599c799 [ 424.624556][ T7864] RDX: 0000000000000004 RSI: 0000000000000084 RDI: 0000000000000005 [ 424.632564][ T7864] RBP: 00007fa7f68d2090 R08: 0000200000000100 R09: 0000000000000000 [ 424.640594][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.648579][ T7864] R13: 00007fa7f5c16218 R14: 00007fa7f5c16180 R15: 00007fff82984fc8 [ 424.656592][ T7864] [ 426.219328][ T7879] No such timeout policy "syz1" [ 426.225844][ T7879] autofs4:pid:7879:autofs_fill_super: called with bogus options [ 426.235868][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 426.952113][ T7882] loop2: detected capacity change from 0 to 512 [ 427.017828][ T7882] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 427.065010][ T7885] loop0: detected capacity change from 0 to 512 [ 427.905922][ T7885] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 427.929596][ T6872] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 428.098349][ T7882] xt_hashlimit: size too large, truncated to 1048576 [ 429.707425][ T7899] loop3: detected capacity change from 0 to 512 [ 429.861736][ T7899] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 430.253620][ T7900] xt_hashlimit: size too large, truncated to 1048576 [ 432.736234][ T7910] No such timeout policy "syz1" [ 432.742827][ T7910] autofs4:pid:7910:autofs_fill_super: called with bogus options [ 432.752230][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 432.828698][ T7908] loop1: detected capacity change from 0 to 4096 [ 432.864420][ T7908] ntfs3: Bad value for 'dmask' [ 433.709244][ T7916] netlink: 'syz.2.497': attribute type 4 has an invalid length. [ 434.761662][ T7924] loop0: detected capacity change from 0 to 512 [ 434.779853][ T7922] loop3: detected capacity change from 0 to 2048 [ 434.794890][ T7924] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 434.806521][ T7922] UDF-fs: bad mount option "aceland" or missing value [ 434.996272][ T7924] xt_hashlimit: size too large, truncated to 1048576 [ 437.706117][ T7937] loop1: detected capacity change from 0 to 512 [ 437.795848][ T7937] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 438.531377][ T7940] xt_hashlimit: size too large, truncated to 1048576 [ 440.146047][ T7948] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 440.322305][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.328629][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.059536][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 441.323531][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 441.360510][ T42] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 441.380315][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.389000][ T42] usb 4-1: Product: syz [ 441.407936][ T42] usb 4-1: Manufacturer: syz [ 441.418394][ T42] usb 4-1: SerialNumber: syz [ 441.430845][ T42] r8152-cfgselector 4-1: config 0 descriptor?? [ 441.448977][ T7954] loop2: detected capacity change from 0 to 512 [ 441.483255][ T7954] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 441.759458][ T7954] xt_hashlimit: size too large, truncated to 1048576 [ 443.631779][ T42] r8152-cfgselector 4-1: Unknown version 0x0000 [ 443.649234][ T42] r8152-cfgselector 4-1: bad CDC descriptors [ 443.660344][ T42] r8152-cfgselector 4-1: Unknown version 0x0000 [ 443.688634][ T42] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 444.318828][ T7962] netlink: 'syz.1.513': attribute type 4 has an invalid length. [ 445.055174][ T5084] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 445.321239][ T7966] loop3: detected capacity change from 0 to 2048 [ 445.366580][ T7966] UDF-fs: bad mount option "aceland" or missing value [ 447.618962][ T7992] loop1: detected capacity change from 0 to 40427 [ 447.639116][ T7992] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 447.647341][ T7992] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 447.708347][ T7992] F2FS-fs (loop1): Found nat_bits in checkpoint [ 447.767822][ T7992] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 447.774984][ T7992] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 450.890494][ T8017] netlink: 'syz.1.526': attribute type 4 has an invalid length. [ 451.650925][ T5084] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 451.901664][ T8026] loop2: detected capacity change from 0 to 4096 [ 451.916467][ T8024] loop3: detected capacity change from 0 to 2048 [ 451.933975][ T8026] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 451.950840][ T8024] UDF-fs: bad mount option "aceland" or missing value [ 451.998107][ T8026] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 452.006592][ T5758] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 452.026375][ T8026] ntfs3: loop2: Failed to load $Extend (-22). [ 452.038852][ T8026] ntfs3: loop2: Failed to initialize $Extend. [ 452.080075][ T8026] FAULT_INJECTION: forcing a failure. [ 452.080075][ T8026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.146565][ T8026] CPU: 1 PID: 8026 Comm: syz.2.532 Not tainted syzkaller #0 [ 452.153939][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.164122][ T8026] Call Trace: [ 452.167423][ T8026] [ 452.170375][ T8026] dump_stack_lvl+0x18c/0x250 [ 452.175111][ T8026] ? show_regs_print_info+0x20/0x20 [ 452.180339][ T8026] ? load_image+0x400/0x400 [ 452.184853][ T8026] ? __lock_acquire+0x7d40/0x7d40 [ 452.189912][ T8026] should_fail_ex+0x39d/0x4d0 [ 452.194622][ T8026] strncpy_from_user+0x36/0x2d0 [ 452.199495][ T8026] path_setxattr+0x146/0x5d0 [ 452.204120][ T8026] ? simple_xattrs_free+0x150/0x150 [ 452.209340][ T8026] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 452.215320][ T8026] ? lock_chain_count+0x20/0x20 [ 452.220184][ T8026] __x64_sys_setxattr+0xbb/0xd0 [ 452.225043][ T8026] do_syscall_64+0x55/0xa0 [ 452.229464][ T8026] ? clear_bhb_loop+0x40/0x90 [ 452.234138][ T8026] ? clear_bhb_loop+0x40/0x90 [ 452.238819][ T8026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.244719][ T8026] RIP: 0033:0x7fa7f599c799 [ 452.249137][ T8026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.268845][ T8026] RSP: 002b:00007fa7f6914028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 452.277285][ T8026] RAX: ffffffffffffffda RBX: 00007fa7f5c15fa0 RCX: 00007fa7f599c799 [ 452.285255][ T8026] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 452.293237][ T8026] RBP: 00007fa7f6914090 R08: 0000000000000002 R09: 0000000000000000 [ 452.301203][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.309169][ T8026] R13: 00007fa7f5c16038 R14: 00007fa7f5c15fa0 R15: 00007fff82984fc8 [ 452.317148][ T8026] [ 452.563251][ T8022] loop0: detected capacity change from 0 to 32768 [ 452.687017][ T8022] JFS: metapage_get_blocks failed [ 452.728268][ T8022] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 452.728268][ T8022] [ 452.769946][ T8022] ERROR: (device loop0): remounting filesystem as read-only [ 453.098592][ T8022] UBIFS error (pid: 8022): cannot open "ubifs", error -22 [ 453.118997][ T8039] loop3: detected capacity change from 0 to 512 [ 453.166081][ T8039] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 453.742483][ T8041] xt_hashlimit: size too large, truncated to 1048576 [ 455.473070][ T8044] loop1: detected capacity change from 0 to 4096 [ 455.525007][ T8044] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 455.562427][ T114] blkno = 5002c, nblocks = 1 [ 455.567076][ T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 455.567076][ T114] [ 455.593328][ T8046] loop2: detected capacity change from 0 to 512 [ 455.630530][ T8046] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 455.631934][ T8044] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 455.670383][ T8044] ntfs3: loop1: Failed to load $Extend (-22). [ 455.676538][ T8044] ntfs3: loop1: Failed to initialize $Extend. [ 455.699243][ T8046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 455.750344][ T8046] EXT4-fs (loop2): 1 truncate cleaned up [ 455.760541][ T8046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.292600][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.531766][ T8067] loop3: detected capacity change from 0 to 2048 [ 458.567480][ T8067] UDF-fs: bad mount option "aceland" or missing value [ 458.986576][ T8069] loop2: detected capacity change from 0 to 32768 [ 459.156818][ T8069] JBD2: Ignoring recovery information on journal [ 459.192273][ T8071] loop1: detected capacity change from 0 to 32768 [ 459.281201][ T8071] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 459.369692][ T8071] JBD2: Ignoring recovery information on journal [ 459.420046][ T8069] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 459.562656][ T8071] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 459.601260][ T8071] FAULT_INJECTION: forcing a failure. [ 459.601260][ T8071] name failslab, interval 1, probability 0, space 0, times 0 [ 459.630362][ T8071] CPU: 1 PID: 8071 Comm: syz.1.543 Not tainted syzkaller #0 [ 459.637712][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.647793][ T8071] Call Trace: [ 459.651094][ T8071] [ 459.654044][ T8071] dump_stack_lvl+0x18c/0x250 [ 459.658759][ T8071] ? show_regs_print_info+0x20/0x20 [ 459.664083][ T8071] ? load_image+0x400/0x400 [ 459.668629][ T8071] ? __might_sleep+0xe0/0xe0 [ 459.673308][ T8071] ? __lock_acquire+0x7d40/0x7d40 [ 459.678367][ T8071] should_fail_ex+0x39d/0x4d0 [ 459.683120][ T8071] should_failslab+0x9/0x20 [ 459.687665][ T8071] slab_pre_alloc_hook+0x59/0x310 [ 459.692704][ T8071] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 459.698430][ T8071] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 459.704154][ T8071] __kmem_cache_alloc_node+0x53/0x250 [ 459.709528][ T8071] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 459.715243][ T8071] __kmalloc+0xa4/0x230 [ 459.719487][ T8071] tomoyo_realpath_from_path+0xe3/0x5d0 [ 459.725030][ T8071] tomoyo_path_number_perm+0x248/0x620 [ 459.730666][ T8071] ? tomoyo_path_number_perm+0x217/0x620 [ 459.736328][ T8071] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 459.741919][ T8071] ? ksys_write+0x1c4/0x260 [ 459.746484][ T8071] ? __fget_files+0x28/0x4b0 [ 459.751098][ T8071] ? __fget_files+0x28/0x4b0 [ 459.755731][ T8071] security_file_ioctl+0x70/0xa0 [ 459.760704][ T8071] __se_sys_ioctl+0x48/0x170 [ 459.765318][ T8071] do_syscall_64+0x55/0xa0 [ 459.769765][ T8071] ? clear_bhb_loop+0x40/0x90 [ 459.774468][ T8071] ? clear_bhb_loop+0x40/0x90 [ 459.779175][ T8071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.785094][ T8071] RIP: 0033:0x7f47a199c799 [ 459.789623][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.809260][ T8071] RSP: 002b:00007f47a27c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.817710][ T8071] RAX: ffffffffffffffda RBX: 00007f47a1c15fa0 RCX: 00007f47a199c799 [ 459.825712][ T8071] RDX: 00002000000000c0 RSI: 0000000080106f05 RDI: 0000000000000004 [ 459.833709][ T8071] RBP: 00007f47a27c3090 R08: 0000000000000000 R09: 0000000000000000 [ 459.841705][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.849700][ T8071] R13: 00007f47a1c16038 R14: 00007f47a1c15fa0 R15: 00007ffc4b128ed8 [ 459.857730][ T8071] [ 460.572140][ T8071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 460.791361][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 460.795632][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 461.433568][ T8082] loop3: detected capacity change from 0 to 32768 [ 461.553726][ T8082] JFS: metapage_get_blocks failed [ 461.574492][ T8082] ERROR: (device loop3): release_metapage: metapage_write_one() failed [ 461.574492][ T8082] [ 461.626343][ T8082] ERROR: (device loop3): remounting filesystem as read-only [ 461.850502][ T8093] loop1: detected capacity change from 0 to 512 [ 462.091225][ T8094] No such timeout policy "syz1" [ 462.098645][ T8094] autofs4:pid:8094:autofs_fill_super: called with bogus options [ 462.109615][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 462.141789][ T8095] UBIFS error (pid: 8095): cannot open "ubifs", error -22 [ 462.154101][ T8093] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 462.614568][ T8093] xt_hashlimit: size too large, truncated to 1048576 [ 464.043095][ T8087] loop2: detected capacity change from 0 to 32768 [ 464.045901][ T113] blkno = 5002c, nblocks = 1 [ 464.054294][ T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 464.054294][ T113] [ 464.100159][ T8087] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 464.155435][ T8087] XFS (loop2): Ending clean mount [ 464.262395][ T5769] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 466.795962][ T8115] loop0: detected capacity change from 0 to 32768 [ 466.859588][ T8115] JBD2: Ignoring recovery information on journal [ 466.933402][ T8123] loop1: detected capacity change from 0 to 4096 [ 466.944803][ T8123] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 466.956063][ T8123] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 466.965359][ T8123] ntfs3: loop1: try to read out of volume at offset 0x1ff000 [ 466.972948][ T8123] ntfs3: loop1: Failed to load $MFT. [ 466.985365][ T8115] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 467.024469][ T8121] loop3: detected capacity change from 0 to 32768 [ 467.069860][ T8115] FAULT_INJECTION: forcing a failure. [ 467.069860][ T8115] name failslab, interval 1, probability 0, space 0, times 0 [ 467.100051][ T8115] CPU: 0 PID: 8115 Comm: syz.0.553 Not tainted syzkaller #0 [ 467.107392][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.117479][ T8115] Call Trace: [ 467.120776][ T8115] [ 467.123727][ T8115] dump_stack_lvl+0x18c/0x250 [ 467.128435][ T8115] ? show_regs_print_info+0x20/0x20 [ 467.133756][ T8115] ? load_image+0x400/0x400 [ 467.138297][ T8115] ? __might_sleep+0xe0/0xe0 [ 467.142921][ T8115] ? __lock_acquire+0x7d40/0x7d40 [ 467.148011][ T8115] should_fail_ex+0x39d/0x4d0 [ 467.152749][ T8115] should_failslab+0x9/0x20 [ 467.157624][ T8115] slab_pre_alloc_hook+0x59/0x310 [ 467.162672][ T8115] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 467.168394][ T8115] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 467.174104][ T8115] __kmem_cache_alloc_node+0x53/0x250 [ 467.179570][ T8115] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 467.185282][ T8115] __kmalloc+0xa4/0x230 [ 467.189440][ T8115] tomoyo_realpath_from_path+0xe3/0x5d0 [ 467.194991][ T8115] tomoyo_path_number_perm+0x248/0x620 [ 467.200467][ T8115] ? tomoyo_path_number_perm+0x217/0x620 [ 467.206137][ T8115] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 467.211701][ T8115] ? ksys_write+0x1c4/0x260 [ 467.216227][ T8115] ? __fget_files+0x28/0x4b0 [ 467.220826][ T8115] ? __fget_files+0x28/0x4b0 [ 467.225425][ T8115] security_file_ioctl+0x70/0xa0 [ 467.230368][ T8115] __se_sys_ioctl+0x48/0x170 [ 467.234980][ T8115] do_syscall_64+0x55/0xa0 [ 467.239410][ T8115] ? clear_bhb_loop+0x40/0x90 [ 467.244085][ T8115] ? clear_bhb_loop+0x40/0x90 [ 467.248762][ T8115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.254655][ T8115] RIP: 0033:0x7fde8079c799 [ 467.259084][ T8115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.278696][ T8115] RSP: 002b:00007fde815ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.287113][ T8115] RAX: ffffffffffffffda RBX: 00007fde80a15fa0 RCX: 00007fde8079c799 [ 467.295078][ T8115] RDX: 0000000000000000 RSI: 0000000080106f05 RDI: 0000000000000004 [ 467.303062][ T8115] RBP: 00007fde815ba090 R08: 0000000000000000 R09: 0000000000000000 [ 467.311101][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.319074][ T8115] R13: 00007fde80a16038 R14: 00007fde80a15fa0 R15: 00007ffde5047e68 [ 467.327061][ T8115] [ 467.374214][ T8115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 467.478852][ T8121] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 467.570163][ T8121] JBD2: Ignoring recovery information on journal [ 467.609544][ T5767] ocfs2: Unmounting device (7,0) on (node local) [ 467.640915][ T8133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.554'. [ 467.670936][ T8133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.554'. [ 467.736383][ T8121] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 468.041463][ T5084] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 468.113729][ T8143] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 468.128642][ T8143] PKCS7: Only support pkcs7_signedData type [ 469.098776][ T8147] loop0: detected capacity change from 0 to 2048 [ 469.106461][ T8147] UDF-fs: bad mount option "aceland" or missing value [ 469.208374][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 469.338051][ T6872] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 469.700865][ T5084] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 469.762839][ T8157] No such timeout policy "syz1" [ 469.778615][ T8157] autofs4:pid:8157:autofs_fill_super: called with bogus options [ 469.790757][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 471.155116][ T8152] loop1: detected capacity change from 0 to 32768 [ 471.227126][ T8152] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 471.240336][ T8182] FAULT_INJECTION: forcing a failure. [ 471.240336][ T8182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.334155][ T8182] CPU: 0 PID: 8182 Comm: syz.0.567 Not tainted syzkaller #0 [ 471.341495][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.351579][ T8182] Call Trace: [ 471.354879][ T8182] [ 471.357828][ T8182] dump_stack_lvl+0x18c/0x250 [ 471.362635][ T8182] ? show_regs_print_info+0x20/0x20 [ 471.367864][ T8182] ? load_image+0x400/0x400 [ 471.372388][ T8182] ? __might_fault+0xaa/0x120 [ 471.377092][ T8182] ? __lock_acquire+0x7d40/0x7d40 [ 471.382149][ T8182] should_fail_ex+0x39d/0x4d0 [ 471.386864][ T8182] _copy_from_user+0x2f/0xe0 [ 471.391488][ T8182] ___sys_sendmsg+0x1c7/0x360 [ 471.396289][ T8182] ? get_pid_task+0x20/0x1e0 [ 471.400928][ T8182] ? __sys_sendmsg+0x2a0/0x2a0 [ 471.405750][ T8182] ? __lock_acquire+0x7d40/0x7d40 [ 471.410826][ T8182] __se_sys_sendmsg+0x1c2/0x2b0 [ 471.415772][ T8182] ? __x64_sys_sendmsg+0x80/0x80 [ 471.420745][ T8182] ? lockdep_hardirqs_on+0x98/0x150 [ 471.425959][ T8182] do_syscall_64+0x55/0xa0 [ 471.430395][ T8182] ? clear_bhb_loop+0x40/0x90 [ 471.435083][ T8182] ? clear_bhb_loop+0x40/0x90 [ 471.439777][ T8182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.445696][ T8182] RIP: 0033:0x7fde8079c799 [ 471.450141][ T8182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.469778][ T8182] RSP: 002b:00007fde815ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.478209][ T8182] RAX: ffffffffffffffda RBX: 00007fde80a15fa0 RCX: 00007fde8079c799 [ 471.486201][ T8182] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 471.494187][ T8182] RBP: 00007fde815ba090 R08: 0000000000000000 R09: 0000000000000000 [ 471.502155][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.510121][ T8182] R13: 00007fde80a16038 R14: 00007fde80a15fa0 R15: 00007ffde5047e68 [ 471.518113][ T8182] [ 471.587887][ T8177] loop2: detected capacity change from 0 to 32768 [ 471.605766][ T8152] XFS (loop1): Ending clean mount [ 471.620518][ T8152] FAULT_INJECTION: forcing a failure. [ 471.620518][ T8152] name failslab, interval 1, probability 0, space 0, times 0 [ 471.640761][ T8177] XFS: ikeep mount option is deprecated. [ 471.668967][ T8152] CPU: 1 PID: 8152 Comm: syz.1.560 Not tainted syzkaller #0 [ 471.676312][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.686395][ T8152] Call Trace: [ 471.689689][ T8152] [ 471.692636][ T8152] dump_stack_lvl+0x18c/0x250 [ 471.697349][ T8152] ? show_regs_print_info+0x20/0x20 [ 471.702584][ T8152] ? load_image+0x400/0x400 [ 471.707128][ T8152] ? __might_sleep+0xe0/0xe0 [ 471.711775][ T8152] ? __lock_acquire+0x7d40/0x7d40 [ 471.716942][ T8152] should_fail_ex+0x39d/0x4d0 [ 471.721661][ T8152] should_failslab+0x9/0x20 [ 471.726185][ T8152] slab_pre_alloc_hook+0x59/0x310 [ 471.731233][ T8152] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 471.736983][ T8152] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 471.742724][ T8152] __kmem_cache_alloc_node+0x53/0x250 [ 471.748136][ T8152] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 471.753877][ T8152] __kmalloc+0xa4/0x230 [ 471.758067][ T8152] tomoyo_realpath_from_path+0xe3/0x5d0 [ 471.763646][ T8152] tomoyo_path_number_perm+0x248/0x620 [ 471.769137][ T8152] ? tomoyo_path_number_perm+0x217/0x620 [ 471.774798][ T8152] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 471.780273][ T8152] ? proc_fail_nth_write+0x1c5/0x250 [ 471.785558][ T8152] ? proc_fail_nth_read+0x260/0x260 [ 471.790778][ T8152] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 471.796759][ T8152] security_file_ioctl+0x70/0xa0 [ 471.801697][ T8152] __se_sys_ioctl+0x48/0x170 [ 471.806283][ T8152] do_syscall_64+0x55/0xa0 [ 471.810700][ T8152] ? clear_bhb_loop+0x40/0x90 [ 471.815371][ T8152] ? clear_bhb_loop+0x40/0x90 [ 471.820045][ T8152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.825933][ T8152] RIP: 0033:0x7f47a199c799 [ 471.830347][ T8152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.849949][ T8152] RSP: 002b:00007f47a27c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.858357][ T8152] RAX: ffffffffffffffda RBX: 00007f47a1c15fa0 RCX: 00007f47a199c799 [ 471.866325][ T8152] RDX: 0000200000000040 RSI: 00000000c0c0586d RDI: 0000000000000005 [ 471.874297][ T8152] RBP: 00007f47a27c3090 R08: 0000000000000000 R09: 0000000000000000 [ 471.882260][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.890220][ T8152] R13: 00007f47a1c16038 R14: 00007f47a1c15fa0 R15: 00007ffc4b128ed8 [ 471.898235][ T8152] [ 471.911902][ T8152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.928250][ T8177] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 471.982411][ T5084] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 472.071607][ T8177] XFS (loop2): Ending clean mount [ 472.086895][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 472.131186][ T8168] loop3: detected capacity change from 0 to 32768 [ 472.177826][ T5084] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 472.181982][ T8168] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 472.251922][ T5769] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 472.390693][ T8168] XFS (loop3): Ending clean mount [ 472.604406][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 472.786906][ T8217] loop1: detected capacity change from 0 to 256 [ 472.873147][ T8217] FAT-fs (loop1): Directory bread(block 64) failed [ 472.900972][ T8217] FAT-fs (loop1): Directory bread(block 65) failed [ 472.939449][ T8217] FAT-fs (loop1): Directory bread(block 66) failed [ 472.946506][ T8217] FAT-fs (loop1): Directory bread(block 67) failed [ 473.117938][ T8217] FAT-fs (loop1): Directory bread(block 68) failed [ 473.149254][ T8217] FAT-fs (loop1): Directory bread(block 69) failed [ 473.156216][ T8217] FAT-fs (loop1): Directory bread(block 70) failed [ 473.222274][ T8225] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 473.229272][ T8225] PKCS7: Only support pkcs7_signedData type [ 473.366347][ T8217] FAT-fs (loop1): Directory bread(block 71) failed [ 473.527083][ T8217] FAT-fs (loop1): Directory bread(block 72) failed [ 473.673631][ T8217] FAT-fs (loop1): Directory bread(block 73) failed [ 477.458839][ T8250] FAULT_INJECTION: forcing a failure. [ 477.458839][ T8250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.472428][ T8250] CPU: 1 PID: 8250 Comm: syz.0.577 Not tainted syzkaller #0 [ 477.479748][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.489828][ T8250] Call Trace: [ 477.493125][ T8250] [ 477.496073][ T8250] dump_stack_lvl+0x18c/0x250 [ 477.500780][ T8250] ? show_regs_print_info+0x20/0x20 [ 477.505999][ T8250] ? load_image+0x400/0x400 [ 477.510532][ T8250] ? __might_fault+0xaa/0x120 [ 477.515246][ T8250] ? __lock_acquire+0x7d40/0x7d40 [ 477.520288][ T8250] should_fail_ex+0x39d/0x4d0 [ 477.525034][ T8250] _copy_from_user+0x2f/0xe0 [ 477.529679][ T8250] __x64_sys_setrlimit+0xcd/0x150 [ 477.534735][ T8250] ? __ia32_sys_prlimit64+0xb0/0xb0 [ 477.536058][ T8251] loop2: detected capacity change from 0 to 512 [ 477.539942][ T8250] ? lockdep_hardirqs_on+0x98/0x150 [ 477.539970][ T8250] do_syscall_64+0x55/0xa0 [ 477.539992][ T8250] ? clear_bhb_loop+0x40/0x90 [ 477.560516][ T8250] ? clear_bhb_loop+0x40/0x90 [ 477.565221][ T8250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.571138][ T8250] RIP: 0033:0x7fde8079c799 [ 477.575567][ T8250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.595191][ T8250] RSP: 002b:00007fde815ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 477.603628][ T8250] RAX: ffffffffffffffda RBX: 00007fde80a15fa0 RCX: 00007fde8079c799 [ 477.611608][ T8250] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 3f08cf1b8a08fe6e [ 477.619579][ T8250] RBP: 00007fde815ba090 R08: 0000000000000000 R09: 0000000000000000 [ 477.627543][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.635511][ T8250] R13: 00007fde80a16038 R14: 00007fde80a15fa0 R15: 00007ffde5047e68 [ 477.643489][ T8250] [ 477.718926][ T8251] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 477.724194][ T5084] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 478.110632][ T8251] xt_hashlimit: size too large, truncated to 1048576 [ 479.603057][ T8260] FAULT_INJECTION: forcing a failure. [ 479.603057][ T8260] name failslab, interval 1, probability 0, space 0, times 0 [ 479.639227][ T8260] CPU: 1 PID: 8260 Comm: syz.0.581 Not tainted syzkaller #0 [ 479.646573][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.656650][ T8260] Call Trace: [ 479.659938][ T8260] [ 479.662877][ T8260] dump_stack_lvl+0x18c/0x250 [ 479.667578][ T8260] ? show_regs_print_info+0x20/0x20 [ 479.672839][ T8260] ? load_image+0x400/0x400 [ 479.677362][ T8260] ? __might_sleep+0xe0/0xe0 [ 479.681975][ T8260] ? __lock_acquire+0x7d40/0x7d40 [ 479.687022][ T8260] should_fail_ex+0x39d/0x4d0 [ 479.691725][ T8260] should_failslab+0x9/0x20 [ 479.696242][ T8260] slab_pre_alloc_hook+0x59/0x310 [ 479.701291][ T8260] ? tomoyo_encode+0x28b/0x540 [ 479.706074][ T8260] ? tomoyo_encode+0x28b/0x540 [ 479.710852][ T8260] __kmem_cache_alloc_node+0x53/0x250 [ 479.716340][ T8260] ? tomoyo_encode+0x28b/0x540 [ 479.721119][ T8260] __kmalloc+0xa4/0x230 [ 479.725300][ T8260] tomoyo_encode+0x28b/0x540 [ 479.729910][ T8260] tomoyo_realpath_from_path+0x592/0x5d0 [ 479.735659][ T8260] tomoyo_path_number_perm+0x248/0x620 [ 479.741141][ T8260] ? tomoyo_path_number_perm+0x217/0x620 [ 479.746788][ T8260] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 479.752277][ T8260] ? ksys_write+0x1c4/0x260 [ 479.756937][ T8260] ? __fget_files+0x28/0x4b0 [ 479.761552][ T8260] ? __fget_files+0x28/0x4b0 [ 479.766176][ T8260] security_file_ioctl+0x70/0xa0 [ 479.771145][ T8260] __se_sys_ioctl+0x48/0x170 [ 479.775852][ T8260] do_syscall_64+0x55/0xa0 [ 479.780287][ T8260] ? clear_bhb_loop+0x40/0x90 [ 479.784981][ T8260] ? clear_bhb_loop+0x40/0x90 [ 479.789763][ T8260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.795675][ T8260] RIP: 0033:0x7fde8079c799 [ 479.800102][ T8260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.819740][ T8260] RSP: 002b:00007fde815ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.828188][ T8260] RAX: ffffffffffffffda RBX: 00007fde80a15fa0 RCX: 00007fde8079c799 [ 479.836173][ T8260] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 479.844165][ T8260] RBP: 00007fde815ba090 R08: 0000000000000000 R09: 0000000000000000 [ 479.852158][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.860154][ T8260] R13: 00007fde80a16038 R14: 00007fde80a15fa0 R15: 00007ffde5047e68 [ 479.868159][ T8260] [ 479.873493][ T8260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 479.879544][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 480.019000][ T8264] loop1: detected capacity change from 0 to 512 [ 480.267470][ T8] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 480.276541][ T8] usb 4-1: config 0 has no interface number 0 [ 480.282757][ T8] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.296279][ T8] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 480.308728][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 480.317926][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.045490][ T8] usb 4-1: Product: syz [ 481.049768][ T8] usb 4-1: Manufacturer: syz [ 481.054392][ T8] usb 4-1: SerialNumber: syz [ 481.066523][ T8] usb 4-1: config 0 descriptor?? [ 481.093256][ T8] yurex 4-1:0.50: Could not submitting URB [ 481.109345][ T8] yurex: probe of 4-1:0.50 failed with error -5 [ 481.341145][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.370004][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.407506][ T8276] loop1: detected capacity change from 0 to 1024 [ 481.707524][ T8293] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 481.714578][ T8293] PKCS7: Only support pkcs7_signedData type [ 481.806320][ T5808] usb 4-1: USB disconnect, device number 5 [ 482.546350][ T5084] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 485.063743][ T8315] loop3: detected capacity change from 0 to 32768 [ 485.103667][ T8315] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.589 (8315) [ 485.172496][ T8315] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 485.193055][ T8315] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 485.229847][ T8315] BTRFS info (device loop3): metadata ratio 4095 [ 485.238562][ T8315] BTRFS info (device loop3): max_inline at 4096 [ 485.262343][ T8315] BTRFS info (device loop3): enabling disk space caching [ 485.307960][ T8315] BTRFS info (device loop3): disabling tree log [ 485.330505][ T8315] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 485.364685][ T8315] BTRFS info (device loop3): trying to use backup root at mount time [ 485.403875][ T8315] BTRFS error (device loop3): cannot disable free space tree [ 485.427569][ T8315] BTRFS error (device loop3): open_ctree failed: -22 [ 485.753714][ T8341] No such timeout policy "syz1" [ 485.764453][ T8341] autofs4:pid:8341:autofs_fill_super: called with bogus options [ 485.776249][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 486.318598][ T8343] FAULT_INJECTION: forcing a failure. [ 486.318598][ T8343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.368134][ T8343] CPU: 1 PID: 8343 Comm: syz.3.597 Not tainted syzkaller #0 [ 486.375475][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.385557][ T8343] Call Trace: [ 486.388851][ T8343] [ 486.391806][ T8343] dump_stack_lvl+0x18c/0x250 [ 486.396524][ T8343] ? show_regs_print_info+0x20/0x20 [ 486.401766][ T8343] ? load_image+0x400/0x400 [ 486.406350][ T8343] ? __might_fault+0xaa/0x120 [ 486.411047][ T8343] ? __lock_acquire+0x7d40/0x7d40 [ 486.416106][ T8343] should_fail_ex+0x39d/0x4d0 [ 486.420817][ T8343] _copy_from_user+0x2f/0xe0 [ 486.425439][ T8343] ___sys_sendmsg+0x1c7/0x360 [ 486.430135][ T8343] ? get_pid_task+0x20/0x1e0 [ 486.434746][ T8343] ? __sys_sendmsg+0x2a0/0x2a0 [ 486.439543][ T8343] ? __lock_acquire+0x7d40/0x7d40 [ 486.444612][ T8343] __se_sys_sendmsg+0x1c2/0x2b0 [ 486.449486][ T8343] ? __x64_sys_sendmsg+0x80/0x80 [ 486.454454][ T8343] ? lockdep_hardirqs_on+0x98/0x150 [ 486.459669][ T8343] do_syscall_64+0x55/0xa0 [ 486.464097][ T8343] ? clear_bhb_loop+0x40/0x90 [ 486.468786][ T8343] ? clear_bhb_loop+0x40/0x90 [ 486.473478][ T8343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.479402][ T8343] RIP: 0033:0x7f701339c799 [ 486.483833][ T8343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.503456][ T8343] RSP: 002b:00007f701422e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.511869][ T8343] RAX: ffffffffffffffda RBX: 00007f7013615fa0 RCX: 00007f701339c799 [ 486.519847][ T8343] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 486.527816][ T8343] RBP: 00007f701422e090 R08: 0000000000000000 R09: 0000000000000000 [ 486.535784][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.543749][ T8343] R13: 00007f7013616038 R14: 00007f7013615fa0 R15: 00007fffdeca6f68 [ 486.551730][ T8343] [ 486.635453][ T8349] veth1_virt_wifi: entered promiscuous mode [ 486.676712][ T8349] tipc: Enabling of bearer rejected, failed to enable media [ 486.819685][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.599'. [ 486.843314][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 487.178380][ T8363] loop3: detected capacity change from 0 to 128 [ 488.313826][ T8377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 488.452974][ T8376] loop0: detected capacity change from 0 to 8192 [ 488.676912][ T8381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 488.709660][ T8381] FAT-fs (loop0): Filesystem has been set read-only [ 488.731386][ T8381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 488.740588][ T8381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 488.822478][ T8384] No such timeout policy "syz1" [ 488.833109][ T8384] autofs4:pid:8384:autofs_fill_super: called with bogus options [ 488.844974][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 488.976738][ T8381] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 489.462081][ T8383] fuse: Unknown parameter 'fdê0x000000000000000c' [ 489.829858][ T8391] netlink: 156 bytes leftover after parsing attributes in process `syz.3.609'. [ 489.848286][ T8391] FAULT_INJECTION: forcing a failure. [ 489.848286][ T8391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.883628][ T8391] CPU: 1 PID: 8391 Comm: syz.3.609 Not tainted syzkaller #0 [ 489.890980][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.901150][ T8391] Call Trace: [ 489.904443][ T8391] [ 489.907386][ T8391] dump_stack_lvl+0x18c/0x250 [ 489.912088][ T8391] ? show_regs_print_info+0x20/0x20 [ 489.917300][ T8391] ? load_image+0x400/0x400 [ 489.921831][ T8391] ? __lock_acquire+0x7d40/0x7d40 [ 489.927057][ T8391] ? snprintf+0xe9/0x140 [ 489.931316][ T8391] should_fail_ex+0x39d/0x4d0 [ 489.936020][ T8391] _copy_to_user+0x2f/0xa0 [ 489.940535][ T8391] simple_read_from_buffer+0xe7/0x150 [ 489.945933][ T8391] proc_fail_nth_read+0x1e8/0x260 [ 489.950972][ T8391] ? proc_fault_inject_write+0x360/0x360 [ 489.956617][ T8391] ? fsnotify_perm+0x271/0x5e0 [ 489.961404][ T8391] ? proc_fault_inject_write+0x360/0x360 [ 489.967066][ T8391] vfs_read+0x28b/0x970 [ 489.971240][ T8391] ? kernel_read+0x1e0/0x1e0 [ 489.975932][ T8391] ? __fget_files+0x28/0x4b0 [ 489.980534][ T8391] ? __fget_files+0x28/0x4b0 [ 489.985305][ T8391] ? __fget_files+0x43d/0x4b0 [ 489.990022][ T8391] ? __fdget_pos+0x2a3/0x330 [ 489.994645][ T8391] ? ksys_read+0x75/0x260 [ 489.999090][ T8391] ksys_read+0x150/0x260 [ 490.003354][ T8391] ? vfs_write+0x990/0x990 [ 490.007782][ T8391] ? lockdep_hardirqs_on+0x98/0x150 [ 490.013064][ T8391] do_syscall_64+0x55/0xa0 [ 490.017687][ T8391] ? clear_bhb_loop+0x40/0x90 [ 490.022391][ T8391] ? clear_bhb_loop+0x40/0x90 [ 490.027093][ T8391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.033004][ T8391] RIP: 0033:0x7f701335cfce [ 490.037438][ T8391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.057261][ T8391] RSP: 002b:00007f701422dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.065700][ T8391] RAX: ffffffffffffffda RBX: 00007f701422e6c0 RCX: 00007f701335cfce [ 490.073686][ T8391] RDX: 000000000000000f RSI: 00007f701422e0a0 RDI: 0000000000000004 [ 490.081686][ T8391] RBP: 00007f701422e090 R08: 0000000000000000 R09: 0000000000000000 [ 490.089668][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.097643][ T8391] R13: 00007f7013616038 R14: 00007f7013615fa0 R15: 00007fffdeca6f68 [ 490.105743][ T8391] [ 491.006585][ T8398] FAULT_INJECTION: forcing a failure. [ 491.006585][ T8398] name failslab, interval 1, probability 0, space 0, times 0 [ 491.094012][ T8398] CPU: 1 PID: 8398 Comm: syz.0.610 Not tainted syzkaller #0 [ 491.101359][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.111426][ T8398] Call Trace: [ 491.114718][ T8398] [ 491.117654][ T8398] dump_stack_lvl+0x18c/0x250 [ 491.122445][ T8398] ? show_regs_print_info+0x20/0x20 [ 491.127664][ T8398] ? load_image+0x400/0x400 [ 491.132190][ T8398] ? __might_sleep+0xe0/0xe0 [ 491.136791][ T8398] ? __lock_acquire+0x7d40/0x7d40 [ 491.141843][ T8398] ? prepend_path+0x4b/0x960 [ 491.146482][ T8398] should_fail_ex+0x39d/0x4d0 [ 491.151198][ T8398] should_failslab+0x9/0x20 [ 491.155726][ T8398] slab_pre_alloc_hook+0x59/0x310 [ 491.160768][ T8398] ? __asan_memcpy+0x40/0x70 [ 491.165387][ T8398] ? tomoyo_encode+0x28b/0x540 [ 491.170183][ T8398] ? tomoyo_encode+0x28b/0x540 [ 491.174966][ T8398] __kmem_cache_alloc_node+0x53/0x250 [ 491.180357][ T8398] ? prepend_path+0x4b/0x960 [ 491.184974][ T8398] ? tomoyo_encode+0x28b/0x540 [ 491.189745][ T8398] __kmalloc+0xa4/0x230 [ 491.193920][ T8398] tomoyo_encode+0x28b/0x540 [ 491.198528][ T8398] tomoyo_realpath_from_path+0x592/0x5d0 [ 491.204186][ T8398] tomoyo_path_number_perm+0x248/0x620 [ 491.209663][ T8398] ? tomoyo_path_number_perm+0x217/0x620 [ 491.215319][ T8398] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 491.220795][ T8398] ? ksys_write+0x1c4/0x260 [ 491.225344][ T8398] ? __fget_files+0x28/0x4b0 [ 491.229944][ T8398] ? __fget_files+0x28/0x4b0 [ 491.234558][ T8398] security_file_ioctl+0x70/0xa0 [ 491.239512][ T8398] __se_sys_ioctl+0x48/0x170 [ 491.244121][ T8398] do_syscall_64+0x55/0xa0 [ 491.248605][ T8398] ? clear_bhb_loop+0x40/0x90 [ 491.253302][ T8398] ? clear_bhb_loop+0x40/0x90 [ 491.257997][ T8398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.263902][ T8398] RIP: 0033:0x7fde8079c799 [ 491.268328][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.287953][ T8398] RSP: 002b:00007fde815ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.296388][ T8398] RAX: ffffffffffffffda RBX: 00007fde80a15fa0 RCX: 00007fde8079c799 [ 491.304372][ T8398] RDX: 0000000000000000 RSI: 00000000000054a2 RDI: 0000000000000003 [ 491.312366][ T8398] RBP: 00007fde815ba090 R08: 0000000000000000 R09: 0000000000000000 [ 491.320351][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.328338][ T8398] R13: 00007fde80a16038 R14: 00007fde80a15fa0 R15: 00007ffde5047e68 [ 491.336340][ T8398] [ 491.443977][ T8400] loop3: detected capacity change from 0 to 4096 [ 491.544397][ T8403] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 491.575279][ T8398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.887424][ T5808] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 492.911713][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 493.233997][ T8424] No such timeout policy "syz1" [ 493.240617][ T8424] autofs4:pid:8424:autofs_fill_super: called with bogus options [ 493.251441][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 493.438170][ T5808] usb 3-1: no configurations [ 493.445677][ T5808] usb 3-1: can't read configurations, error -22 [ 493.649512][ T5808] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 493.718106][ T8430] FAULT_INJECTION: forcing a failure. [ 493.718106][ T8430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.732305][ T8430] CPU: 0 PID: 8430 Comm: syz.1.619 Not tainted syzkaller #0 [ 493.739629][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.749738][ T8430] Call Trace: [ 493.753032][ T8430] [ 493.755967][ T8430] dump_stack_lvl+0x18c/0x250 [ 493.760666][ T8430] ? show_regs_print_info+0x20/0x20 [ 493.765873][ T8430] ? load_image+0x400/0x400 [ 493.770408][ T8430] ? __might_fault+0xaa/0x120 [ 493.775088][ T8430] ? __lock_acquire+0x7d40/0x7d40 [ 493.780111][ T8430] should_fail_ex+0x39d/0x4d0 [ 493.784793][ T8430] _copy_from_user+0x2f/0xe0 [ 493.789471][ T8430] ucma_create_id+0xea/0x380 [ 493.794063][ T8430] ? __might_fault+0xaa/0x120 [ 493.798730][ T8430] ? ucma_close+0x170/0x170 [ 493.803229][ T8430] ? __might_fault+0xaa/0x120 [ 493.807900][ T8430] ? __might_fault+0xc6/0x120 [ 493.812566][ T8430] ? __might_fault+0xaa/0x120 [ 493.817238][ T8430] ucma_write+0x252/0x2f0 [ 493.821573][ T8430] ? ucma_get_global_nl_info+0x70/0x70 [ 493.827029][ T8430] ? fsnotify_perm+0x5d/0x5e0 [ 493.831700][ T8430] ? security_file_permission+0x79/0xa0 [ 493.837268][ T8430] do_iter_write+0x4ea/0xc30 [ 493.841867][ T8430] ? ucma_get_global_nl_info+0x70/0x70 [ 493.847327][ T8430] ? vfs_iter_write+0xa0/0xa0 [ 493.851999][ T8430] ? __import_iovec+0x3fa/0x850 [ 493.856851][ T8430] ? import_iovec+0x73/0xa0 [ 493.861346][ T8430] do_writev+0x27f/0x480 [ 493.865593][ T8430] ? do_readv+0x460/0x460 [ 493.869921][ T8430] ? __fget_files+0x28/0x4b0 [ 493.874517][ T8430] ? lock_chain_count+0x20/0x20 [ 493.879552][ T8430] ? __secure_computing+0x111/0x2f0 [ 493.884769][ T8430] do_syscall_64+0x55/0xa0 [ 493.889190][ T8430] ? clear_bhb_loop+0x40/0x90 [ 493.893869][ T8430] ? clear_bhb_loop+0x40/0x90 [ 493.898545][ T8430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.904436][ T8430] RIP: 0033:0x7f47a199c799 [ 493.908892][ T8430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.928590][ T8430] RSP: 002b:00007f47a27c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 493.937090][ T8430] RAX: ffffffffffffffda RBX: 00007f47a1c15fa0 RCX: 00007f47a199c799 [ 493.945060][ T8430] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000f [ 493.953117][ T8430] RBP: 00007f47a27c3090 R08: 0000000000000000 R09: 0000000000000000 [ 493.961529][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.969520][ T8430] R13: 00007f47a1c16038 R14: 00007f47a1c15fa0 R15: 00007ffc4b128ed8 [ 493.977503][ T8430] [ 494.010536][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 494.011902][ T8433] loop0: detected capacity change from 0 to 512 [ 494.025820][ T5808] usb 3-1: no configurations [ 494.042913][ T5808] usb 3-1: can't read configurations, error -22 [ 494.057303][ T5808] usb usb3-port1: attempt power cycle [ 494.087276][ T8433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.102093][ T8433] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 494.127451][ T8428] Illegal XDP return value 4291375104 on prog (id 11) dev syz_tun, expect packet loss! [ 494.195777][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.337568][ T8447] netlink: 156 bytes leftover after parsing attributes in process `syz.0.623'. [ 494.348480][ T27] audit: type=1326 audit(1774258734.686:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.1.624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47a199c799 code=0x0 [ 497.026253][ T8490] loop3: detected capacity change from 0 to 4096 [ 497.074604][ T8491] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 497.119583][ T788] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 498.388252][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 498.422871][ T788] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 498.439759][ T8496] netlink: 'syz.2.635': attribute type 4 has an invalid length. [ 498.527038][ T788] usb 2-1: string descriptor 0 read error: -22 [ 498.534313][ T788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.548469][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.575951][ T788] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 498.812781][ T788] usb 2-1: USB disconnect, device number 5 [ 499.175918][ T8506] FAULT_INJECTION: forcing a failure. [ 499.175918][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 499.188738][ T8506] CPU: 0 PID: 8506 Comm: syz.0.638 Not tainted syzkaller #0 [ 499.196121][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.206264][ T8506] Call Trace: [ 499.209552][ T8506] [ 499.212487][ T8506] dump_stack_lvl+0x18c/0x250 [ 499.217187][ T8506] ? show_regs_print_info+0x20/0x20 [ 499.222483][ T8506] ? load_image+0x400/0x400 [ 499.226997][ T8506] ? __might_sleep+0xe0/0xe0 [ 499.231621][ T8506] ? __lock_acquire+0x7d40/0x7d40 [ 499.236671][ T8506] should_fail_ex+0x39d/0x4d0 [ 499.241378][ T8506] should_failslab+0x9/0x20 [ 499.245912][ T8506] slab_pre_alloc_hook+0x59/0x310 [ 499.250956][ T8506] ? kvmalloc_node+0x70/0x180 [ 499.255648][ T8506] ? kvmalloc_node+0x70/0x180 [ 499.260340][ T8506] __kmem_cache_alloc_node+0x53/0x250 [ 499.265730][ T8506] ? kvmalloc_node+0x70/0x180 [ 499.270414][ T8506] __kmalloc_node+0xa4/0x230 [ 499.275014][ T8506] ? __might_fault+0xaa/0x120 [ 499.279716][ T8506] kvmalloc_node+0x70/0x180 [ 499.284283][ T8506] xt_alloc_table_info+0x3b/0xa0 [ 499.289254][ T8506] do_ipt_set_ctl+0x901/0xe00 [ 499.293970][ T8506] ? ipt_unregister_table_exit+0x230/0x230 [ 499.299794][ T8506] ? __lock_acquire+0x7d40/0x7d40 [ 499.304826][ T8506] ? rcu_is_watching+0x15/0xb0 [ 499.309602][ T8506] ? trace_contention_end+0x39/0xe0 [ 499.314812][ T8506] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 499.320460][ T8506] ? mutex_unlock+0x10/0x10 [ 499.324980][ T8506] ? aa_af_perm+0x330/0x330 [ 499.329500][ T8506] ? __fget_files+0x28/0x4b0 [ 499.334117][ T8506] nf_setsockopt+0x263/0x280 [ 499.338791][ T8506] ? sock_common_recvmsg+0x190/0x190 [ 499.344106][ T8506] do_sock_setsockopt+0x175/0x1a0 [ 499.349138][ T8506] ? __fdget+0x180/0x210 [ 499.353396][ T8506] __x64_sys_setsockopt+0x182/0x200 [ 499.358625][ T8506] do_syscall_64+0x55/0xa0 [ 499.363078][ T8506] ? clear_bhb_loop+0x40/0x90 [ 499.367871][ T8506] ? clear_bhb_loop+0x40/0x90 [ 499.372564][ T8506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.378468][ T8506] RIP: 0033:0x7fde8079c799 [ 499.382896][ T8506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.403041][ T8506] RSP: 002b:00007fde81578028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 499.411474][ T8506] RAX: ffffffffffffffda RBX: 00007fde80a16180 RCX: 00007fde8079c799 [ 499.419457][ T8506] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 499.427430][ T8506] RBP: 00007fde81578090 R08: 0000000000000370 R09: 0000000000000000 [ 499.435416][ T8506] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 499.443394][ T8506] R13: 00007fde80a16218 R14: 00007fde80a16180 R15: 00007ffde5047e68 [ 499.451402][ T8506] [ 501.014517][ T8511] loop0: detected capacity change from 0 to 1024 [ 501.260868][ T8511] EXT4-fs: Ignoring removed orlov option [ 501.267022][ T8511] EXT4-fs: inline encryption not supported [ 501.357816][ T8511] EXT4-fs: Ignoring removed nobh option [ 501.763914][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.770665][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.814587][ T8511] ext3: Unknown parameter 'hash' [ 503.406040][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.455163][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.485036][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.507420][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.034678][ T8540] netlink: 'syz.3.646': attribute type 4 has an invalid length. [ 504.829327][ T789] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 505.029949][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 505.061410][ T789] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 505.078632][ T789] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 505.098724][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.120765][ T789] usb 3-1: Product: syz [ 505.131602][ T789] usb 3-1: Manufacturer: syz [ 505.142864][ T789] usb 3-1: SerialNumber: syz [ 505.167511][ T789] usb 3-1: config 0 descriptor?? [ 505.213237][ T8536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 505.274619][ T789] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 505.405411][ T8546] FAULT_INJECTION: forcing a failure. [ 505.405411][ T8546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.452279][ T789] usb 3-1: USB disconnect, device number 6 [ 505.459422][ T12] usb 3-1: Failed to submit usb control message: -71 [ 505.479228][ T8546] CPU: 0 PID: 8546 Comm: syz.0.648 Not tainted syzkaller #0 [ 505.486570][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.496673][ T8546] Call Trace: [ 505.499967][ T8546] [ 505.502910][ T8546] dump_stack_lvl+0x18c/0x250 [ 505.507671][ T8546] ? show_regs_print_info+0x20/0x20 [ 505.512905][ T8546] ? load_image+0x400/0x400 [ 505.517449][ T8546] ? __might_fault+0xaa/0x120 [ 505.522164][ T8546] ? __lock_acquire+0x7d40/0x7d40 [ 505.527223][ T8546] should_fail_ex+0x39d/0x4d0 [ 505.531940][ T8546] _copy_from_user+0x2f/0xe0 [ 505.536565][ T8546] __se_sys_memfd_create+0x295/0x660 [ 505.541881][ T8546] do_syscall_64+0x55/0xa0 [ 505.546330][ T8546] ? clear_bhb_loop+0x40/0x90 [ 505.551040][ T8546] ? clear_bhb_loop+0x40/0x90 [ 505.555748][ T8546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.561673][ T8546] RIP: 0033:0x7fde8079c799 [ 505.566103][ T8546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.585724][ T8546] RSP: 002b:00007fde815b9e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 505.594150][ T8546] RAX: ffffffffffffffda RBX: 00000000000001a0 RCX: 00007fde8079c799 [ 505.602297][ T8546] RDX: 00007fde815b9ee0 RSI: 0000000000000000 RDI: 00007fde80832e79 [ 505.610262][ T8546] RBP: 0000200000000640 R08: 00000000ffffffff R09: 0000000000000000 [ 505.618311][ T8546] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000200 [ 505.626276][ T8546] R13: 00007fde815b9ee0 R14: 00007fde815b9ea0 R15: 0000200000000240 [ 505.634251][ T8546] [ 505.649189][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 505.656363][ T12] usb 3-1: unable to get target info from device [ 505.679554][ T12] usb 3-1: could not get target info (-71) [ 505.685745][ T12] usb 3-1: could not probe fw (-71) [ 505.977927][ T8551] loop3: detected capacity change from 0 to 512 [ 506.177870][ T8548] loop1: detected capacity change from 0 to 40427 [ 506.230894][ T8548] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 506.237690][ T8548] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 506.344040][ T8551] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 506.569552][ T8548] F2FS-fs (loop1): Found nat_bits in checkpoint [ 506.652627][ T8548] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 506.659884][ T8548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 506.738343][ T27] audit: type=1800 audit(1774258747.066:6): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.645" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 506.891293][ T8548] xt_CT: No such helper "snmp_trap" [ 506.999395][ T5768] syz-executor: attempt to access beyond end of device [ 506.999395][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 507.158881][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 508.833115][ T8574] loop2: detected capacity change from 0 to 1764 [ 510.059271][ T789] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 510.299381][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 510.308297][ T789] usb 4-1: config 5 has an invalid interface number: 245 but max is 0 [ 510.329179][ T789] usb 4-1: config 5 has no interface number 0 [ 510.349478][ T789] usb 4-1: config 5 interface 245 has no altsetting 0 [ 511.219684][ T789] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=ba.d2 [ 511.228867][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.296875][ T789] usb 4-1: Product: syz [ 511.319236][ T789] usb 4-1: Manufacturer: syz [ 511.324455][ T789] usb 4-1: SerialNumber: syz [ 512.102169][ T8593] loop2: detected capacity change from 0 to 4096 [ 512.166007][ T8593] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 512.222854][ T789] gspca_main: mars-2.14.0 probing 093a:050f [ 512.288921][ T8593] FAULT_INJECTION: forcing a failure. [ 512.288921][ T8593] name failslab, interval 1, probability 0, space 0, times 0 [ 512.312789][ T789] usb 4-1: USB disconnect, device number 6 [ 512.356627][ T8593] CPU: 0 PID: 8593 Comm: syz.2.657 Not tainted syzkaller #0 [ 512.364400][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.368108][ T8596] loop1: detected capacity change from 0 to 128 [ 512.374459][ T8593] Call Trace: [ 512.374509][ T8593] [ 512.374518][ T8593] dump_stack_lvl+0x18c/0x250 [ 512.374551][ T8593] ? show_regs_print_info+0x20/0x20 [ 512.374572][ T8593] ? load_image+0x400/0x400 [ 512.374593][ T8593] ? __might_sleep+0xe0/0xe0 [ 512.374612][ T8593] ? __lock_acquire+0x7d40/0x7d40 [ 512.374630][ T8593] ? mi_find_attr+0x2a0/0x2b0 [ 512.374653][ T8593] should_fail_ex+0x39d/0x4d0 [ 512.374682][ T8593] should_failslab+0x9/0x20 [ 512.374702][ T8593] slab_pre_alloc_hook+0x59/0x310 [ 512.374726][ T8593] ? indx_read+0x227/0xca0 [ 512.374746][ T8593] __kmem_cache_alloc_node+0x53/0x250 [ 512.374770][ T8593] ? indx_read+0x227/0xca0 [ 512.374788][ T8593] kmalloc_trace+0x2a/0xe0 [ 512.374811][ T8593] indx_read+0x227/0xca0 [ 512.374831][ T8593] ? ntfs_get_block_direct_IO_R+0xb0/0xb0 [ 512.374861][ T8593] ntfs_readdir+0xa47/0xeb0 [ 512.374899][ T8593] ? dir_is_empty+0x740/0x740 [ 512.374918][ T8593] ? end_current_label_crit_section+0x149/0x170 [ 512.374947][ T8593] ? down_read_killable+0x1d0/0x340 [ 512.374963][ T8593] ? fsnotify_perm+0x271/0x5e0 [ 512.374986][ T8593] iterate_dir+0x1c2/0x580 [ 512.437717][ T8596] FAT-fs (loop1): FAT read failed (blocknr 128) [ 512.440048][ T8593] __se_sys_getdents64+0xf6/0x270 [ 512.440080][ T8593] ? __x64_sys_getdents64+0x80/0x80 [ 512.440099][ T8593] ? filldir+0x660/0x660 [ 512.440124][ T8593] ? lockdep_hardirqs_on+0x98/0x150 [ 512.440146][ T8593] do_syscall_64+0x55/0xa0 [ 512.440166][ T8593] ? clear_bhb_loop+0x40/0x90 [ 512.440184][ T8593] ? clear_bhb_loop+0x40/0x90 [ 512.440203][ T8593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.440219][ T8593] RIP: 0033:0x7fa7f599c799 [ 512.539088][ T8593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.558701][ T8593] RSP: 002b:00007fa7f6914028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 512.567115][ T8593] RAX: ffffffffffffffda RBX: 00007fa7f5c15fa0 RCX: 00007fa7f599c799 [ 512.575080][ T8593] RDX: 0000000000000071 RSI: 00002000000001c0 RDI: 0000000000000003 [ 512.583048][ T8593] RBP: 00007fa7f6914090 R08: 0000000000000000 R09: 0000000000000000 [ 512.591028][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.598986][ T8593] R13: 00007fa7f5c16038 R14: 00007fa7f5c15fa0 R15: 00007fff82984fc8 [ 512.606957][ T8593] [ 513.610076][ T8608] loop3: detected capacity change from 0 to 512 [ 513.686299][ T8608] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 514.169023][ T8617] No such timeout policy "syz1" [ 514.234332][ T8617] autofs4:pid:8617:autofs_fill_super: called with bogus options [ 514.268335][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 515.752058][ T8621] xt_hashlimit: size too large, truncated to 1048576 [ 516.956299][ T8623] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 519.757611][ T8649] loop0: detected capacity change from 0 to 4096 [ 519.937902][ T8652] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 519.988121][ T8649] FAULT_INJECTION: forcing a failure. [ 519.988121][ T8649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.007487][ T8649] CPU: 1 PID: 8649 Comm: syz.0.671 Not tainted syzkaller #0 [ 520.014840][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.025345][ T8649] Call Trace: [ 520.028639][ T8649] [ 520.031561][ T8649] dump_stack_lvl+0x18c/0x250 [ 520.036257][ T8649] ? show_regs_print_info+0x20/0x20 [ 520.041445][ T8649] ? load_image+0x400/0x400 [ 520.046026][ T8649] ? __lock_acquire+0x7d40/0x7d40 [ 520.051057][ T8649] ? __kasan_slab_alloc+0x6c/0x80 [ 520.056098][ T8649] should_fail_ex+0x39d/0x4d0 [ 520.060786][ T8649] strncpy_from_user+0x36/0x2d0 [ 520.065632][ T8649] getname_flags+0xf6/0x500 [ 520.070128][ T8649] ? syscall_enter_from_user_mode+0x25/0x80 [ 520.076020][ T8649] __x64_sys_rmdir+0x3c/0x50 [ 520.080602][ T8649] do_syscall_64+0x55/0xa0 [ 520.085025][ T8649] ? clear_bhb_loop+0x40/0x90 [ 520.089696][ T8649] ? clear_bhb_loop+0x40/0x90 [ 520.094368][ T8649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.100261][ T8649] RIP: 0033:0x7fde8079c799 [ 520.104690][ T8649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.124301][ T8649] RSP: 002b:00007fde815ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 520.132722][ T8649] RAX: ffffffffffffffda RBX: 00007fde80a15fa0 RCX: 00007fde8079c799 [ 520.140689][ T8649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000005c0 [ 520.148653][ T8649] RBP: 00007fde815ba090 R08: 0000000000000000 R09: 0000000000000000 [ 520.156620][ T8649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.164607][ T8649] R13: 00007fde80a16038 R14: 00007fde80a15fa0 R15: 00007ffde5047e68 [ 520.172593][ T8649] [ 520.175740][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.431272][ T8659] loop1: detected capacity change from 0 to 128 [ 520.499253][ T8660] No such timeout policy "syz1" [ 520.509918][ T8660] autofs4:pid:8660:autofs_fill_super: called with bogus options [ 520.521591][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 521.064035][ T8659] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.098983][ T8659] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 521.685503][ T8] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 521.941242][ T8] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 521.954476][ T8] usb 1-1: config 0 has no interface number 0 [ 521.972227][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 522.011002][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.034116][ T8] usb 1-1: Product: syz [ 522.038370][ T8] usb 1-1: Manufacturer: syz [ 522.047292][ T8670] loop2: detected capacity change from 0 to 8 [ 522.059592][ T8] usb 1-1: SerialNumber: syz [ 522.094526][ T8] usb 1-1: config 0 descriptor?? [ 522.112127][ T8] hub 1-1:0.132: bad descriptor, ignoring hub [ 522.118341][ T8] hub: probe of 1-1:0.132 failed with error -5 [ 522.156653][ T8] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input6 [ 522.165010][ T8670] SQUASHFS error: xz decompression failed, data probably corrupt [ 522.177877][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.184674][ T8670] SQUASHFS error: Failed to read block 0x108: -5 [ 522.207536][ T8670] SQUASHFS error: Unable to read metadata cache entry [106] [ 522.223895][ T8670] SQUASHFS error: Unable to read inode 0x11f [ 522.531360][ T8672] loop1: detected capacity change from 0 to 8192 [ 522.569477][ T8672] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 522.621329][ T8672] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 522.630791][ T8672] REISERFS (device loop1): using ordered data mode [ 522.637373][ T8672] reiserfs: using flush barriers [ 522.741617][ T8672] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 522.779940][ T8672] REISERFS (device loop1): checking transaction log (loop1) [ 522.787474][ T27] audit: type=1326 audit(1774258763.086:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.2.680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7f599c799 code=0x0 [ 522.864882][ T8683] loop3: detected capacity change from 0 to 1764 [ 522.979408][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 523.012661][ T8672] REISERFS (device loop1): Using tea hash to sort names [ 523.033534][ T8672] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 523.179228][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 523.193667][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 523.215889][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 523.228920][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 523.266904][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.288714][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 523.309408][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.403290][ T5773] usb 1-1: USB disconnect, device number 10 [ 523.931733][ T23] usb 3-1: usb_control_msg returned -71 [ 523.943943][ T23] usbtmc 3-1:16.0: can't read capabilities [ 523.994076][ T23] usb 3-1: USB disconnect, device number 7 [ 525.231129][ T8702] loop1: detected capacity change from 0 to 512 [ 525.242681][ T8702] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 525.296552][ T6872] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 525.534842][ T8706] xt_hashlimit: size too large, truncated to 1048576 [ 527.045035][ T8708] loop3: detected capacity change from 0 to 512 [ 527.090832][ T8708] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 528.838241][ T8714] loop0: detected capacity change from 0 to 32768 [ 528.859515][ T8714] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.687 (8714) [ 528.885671][ T8714] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 528.896017][ T8714] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 528.905080][ T8714] BTRFS info (device loop0): enabling disk space caching [ 528.912217][ T8714] BTRFS info (device loop0): force clearing of disk cache [ 528.919476][ T8714] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 528.929507][ T8714] BTRFS info (device loop0): use zstd compression, level 3 [ 528.937269][ T8714] BTRFS info (device loop0): disk space caching is enabled [ 529.105818][ T8714] BTRFS info (device loop0): enabling ssd optimizations [ 529.112921][ T8714] BTRFS info (device loop0): auto enabling async discard [ 529.126909][ T8714] BTRFS info (device loop0): rebuilding free space tree [ 529.209453][ T8714] BTRFS info (device loop0): disabling free space tree [ 529.217701][ T8714] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 529.227879][ T8714] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 529.979255][ T27] audit: type=1800 audit(1774258770.306:8): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.687" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 530.100087][ T5767] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 531.626106][ T5808] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 532.126896][ T5808] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 532.155925][ T5808] usb 1-1: config 0 has no interface number 0 [ 532.175975][ T5808] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 532.186264][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.196392][ T5808] usb 1-1: Product: syz [ 532.201744][ T5808] usb 1-1: Manufacturer: syz [ 532.206395][ T5808] usb 1-1: SerialNumber: syz [ 532.215620][ T5808] usb 1-1: config 0 descriptor?? [ 532.225578][ T5808] hub 1-1:0.132: bad descriptor, ignoring hub [ 532.231882][ T5808] hub: probe of 1-1:0.132 failed with error -5 [ 532.386974][ T5808] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input7 [ 532.434141][ T8773] loop2: detected capacity change from 0 to 512 [ 532.670295][ T8773] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 533.462430][ T8784] xt_hashlimit: size too large, truncated to 1048576 [ 536.955175][ T8794] loop0: detected capacity change from 0 to 32768 [ 536.997668][ T8794] [ 536.997668][ T8794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 536.997668][ T8794] [ 537.357409][ T8801] netlink: 'syz.2.697': attribute type 4 has an invalid length. [ 537.415198][ T5808] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 537.580142][ T5767] [ 537.580142][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 537.580142][ T5767] [ 537.615035][ T5767] [ 537.615035][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 537.615035][ T5767] [ 537.629775][ T5808] usb 2-1: Using ep0 maxpacket: 32 [ 537.644958][ T5808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 537.665962][ T5808] usb 2-1: config 2 has an invalid interface number: 147 but max is 0 [ 537.696988][ T5808] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 537.717924][ T5808] usb 2-1: config 2 has no interface number 0 [ 537.728400][ T5808] usb 2-1: config 2 interface 147 has no altsetting 0 [ 537.751233][ T5808] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=c8.8e [ 537.765965][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.784407][ T5808] usb 2-1: Product: syz [ 537.788621][ T5808] usb 2-1: Manufacturer: syz [ 537.809189][ T5808] usb 2-1: SerialNumber: syz [ 537.828357][ T5808] ims_pcu 2-1:2.147: Zero length descriptor [ 537.835162][ T5808] ims_pcu: probe of 2-1:2.147 failed with error -22 [ 537.849356][ T789] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 538.067344][ T789] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 538.086081][ T789] usb 4-1: config 0 has no interface number 0 [ 538.098986][ T789] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 538.115422][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.124110][ T789] usb 4-1: Product: syz [ 538.128332][ T789] usb 4-1: Manufacturer: syz [ 538.133760][ T789] usb 4-1: SerialNumber: syz [ 538.146242][ T789] usb 4-1: config 0 descriptor?? [ 538.251586][ T8815] loop0: detected capacity change from 0 to 64 [ 539.008806][ T789] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 539.074428][ T789] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 539.108268][ T789] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 539.134405][ T789] usb 4-1: media controller created [ 539.216891][ T5773] usb 2-1: USB disconnect, device number 6 [ 539.247417][ T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.265364][ T8821] loop0: detected capacity change from 0 to 512 [ 539.316513][ T8821] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 539.360112][ T789] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 539.590759][ T8822] xt_hashlimit: size too large, truncated to 1048576 [ 541.273566][ T789] usb 4-1: USB disconnect, device number 7 [ 542.819192][ T788] usb 1-1: USB disconnect, device number 11 [ 543.685810][ T8840] netlink: 'syz.3.713': attribute type 4 has an invalid length. [ 544.419036][ T27] audit: type=1800 audit(1774259040.754:9): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.712" name="/" dev="fuse" ino=1 res=0 errno=0 [ 544.467398][ T5773] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 544.672934][ T5773] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 544.689284][ T5773] usb 2-1: config 0 has no interface number 0 [ 544.724606][ T5773] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 544.752663][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.790789][ T5773] usb 2-1: Product: syz [ 544.837865][ T5773] usb 2-1: Manufacturer: syz [ 544.860512][ T5773] usb 2-1: SerialNumber: syz [ 544.887475][ T5773] usb 2-1: config 0 descriptor?? [ 544.900524][ T5773] hub 2-1:0.132: bad descriptor, ignoring hub [ 544.922410][ T5773] hub: probe of 2-1:0.132 failed with error -5 [ 544.944066][ T5773] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input8 [ 545.460262][ T8852] can0: slcan on ttyS3. [ 547.311082][ T8847] can0 (unregistered): slcan off ttyS3. [ 547.428578][ T789] usb 2-1: USB disconnect, device number 7 [ 547.498851][ T8870] loop3: detected capacity change from 0 to 512 [ 547.508821][ T8870] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 547.771675][ T8874] xt_hashlimit: size too large, truncated to 1048576 [ 550.199026][ T8896] loop0: detected capacity change from 0 to 512 [ 550.213046][ T8896] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 550.968034][ T8905] netlink: 'syz.1.723': attribute type 4 has an invalid length. [ 551.914541][ T8881] loop3: detected capacity change from 0 to 32768 [ 551.953784][ T8881] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.719 (8881) [ 551.976732][ T8901] loop2: detected capacity change from 0 to 8192 [ 552.005883][ T8901] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 552.019537][ T8881] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 552.722036][ T8901] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 552.763565][ T8898] xt_hashlimit: size too large, truncated to 1048576 [ 552.884605][ T8881] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 552.916791][ T8901] REISERFS (device loop2): using ordered data mode [ 552.925325][ T8881] BTRFS info (device loop3): force zlib compression, level 3 [ 553.030421][ T8881] BTRFS info (device loop3): turning on flush-on-commit [ 553.037518][ T8881] BTRFS info (device loop3): max_inline at 4096 [ 553.043936][ T8901] reiserfs: using flush barriers [ 553.751989][ T8901] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 553.819581][ T8881] BTRFS info (device loop3): using free space tree [ 553.829779][ T8901] REISERFS warning (device loop2): journal-2004 journal_init: Journal cnode memory allocation failed (73728 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large. [ 553.889492][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 553.890206][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 553.969743][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 553.991649][ T5758] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 554.039928][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 554.040558][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 554.099955][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 554.149919][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 554.184923][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 554.216483][ T8927] loop2: detected capacity change from 0 to 512 [ 554.270582][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 554.271202][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 554.312386][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 554.336867][ T8927] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 554.390687][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 554.391215][ T8881] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 554.451987][ T8881] BTRFS error (device loop3): open_ctree failed: -12 [ 554.634501][ T8936] xt_hashlimit: size too large, truncated to 1048576 [ 555.918093][ T8942] loop2: detected capacity change from 0 to 512 [ 556.009600][ T8942] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 556.058972][ T6872] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by udevd (6872) [ 556.358996][ T8948] xt_hashlimit: size too large, truncated to 1048576 [ 557.839979][ T788] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 558.052681][ T788] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 558.069193][ T788] usb 4-1: config 0 has no interface number 0 [ 558.089483][ T788] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 558.134472][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.184267][ T788] usb 4-1: Product: syz [ 558.188502][ T788] usb 4-1: Manufacturer: syz [ 558.222396][ T788] usb 4-1: SerialNumber: syz [ 558.247815][ T788] usb 4-1: config 0 descriptor?? [ 558.275701][ T788] hub 4-1:0.132: bad descriptor, ignoring hub [ 558.297200][ T788] hub: probe of 4-1:0.132 failed with error -5 [ 558.340547][ T788] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input9 [ 560.022596][ T8965] loop0: detected capacity change from 0 to 1024 [ 560.571816][ T8969] No such timeout policy "syz1" [ 560.579482][ T8969] autofs4:pid:8969:autofs_fill_super: called with bogus options [ 560.588680][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 560.719792][ T8974] loop0: detected capacity change from 0 to 2048 [ 560.748665][ T8974] UDF-fs: bad mount option "aceland" or missing value [ 560.954742][ T8981] loop2: detected capacity change from 0 to 512 [ 561.518078][ T8982] loop1: detected capacity change from 0 to 64 [ 561.629263][ T789] usb 4-1: USB disconnect, device number 8 [ 561.661858][ T8981] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 561.754034][ T5758] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 562.037910][ T8981] xt_hashlimit: size too large, truncated to 1048576 [ 563.405897][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.412359][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.469180][ T789] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 563.695423][ T789] usb 4-1: config 0 has no interfaces? [ 563.749226][ T789] usb 4-1: string descriptor 0 read error: -71 [ 563.756204][ T789] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 563.789185][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.820617][ T789] usb 4-1: config 0 descriptor?? [ 563.839862][ T789] usb 4-1: can't set config #0, error -71 [ 563.868075][ T789] usb 4-1: USB disconnect, device number 9 [ 563.895827][ T8988] loop1: detected capacity change from 0 to 512 [ 563.923342][ T8988] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 563.944282][ T8990] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 564.153893][ T8992] xt_hashlimit: size too large, truncated to 1048576 [ 565.316693][ T8990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.542589][ T8993] bond1: (slave geneve2): Opening slave failed [ 566.813279][ T9017] No such timeout policy "syz1" [ 566.820427][ T9017] autofs4:pid:9017:autofs_fill_super: called with bogus options [ 566.830371][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 566.907500][ T9020] No such timeout policy "syz1" [ 566.918350][ T9020] autofs4:pid:9020:autofs_fill_super: called with bogus options [ 566.931111][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 567.532167][ T9024] loop1: detected capacity change from 0 to 256 [ 567.825073][ T9029] No such timeout policy "syz1" [ 567.831646][ T9029] autofs4:pid:9029:autofs_fill_super: called with bogus options [ 567.840905][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 568.040547][ T9033] loop0: detected capacity change from 0 to 2048 [ 568.048167][ T9033] UDF-fs: bad mount option "aceland" or missing value [ 568.633999][ T9036] loop2: detected capacity change from 0 to 64 [ 569.658334][ T9042] netlink: 'syz.3.749': attribute type 4 has an invalid length. [ 572.802683][ T9072] No such timeout policy "syz1" [ 572.809342][ T9072] autofs4:pid:9072:autofs_fill_super: called with bogus options [ 573.746603][ T9045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.971797][ T9066] loop0: detected capacity change from 0 to 32768 [ 573.974805][ T9078] loop1: detected capacity change from 0 to 512 [ 574.041410][ T9078] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 574.067883][ T9066] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 574.104708][ T9066] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 574.166552][ T5758] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 574.192946][ T9081] loop2: detected capacity change from 0 to 4096 [ 574.208055][ T9081] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 574.362019][ T9083] loop3: detected capacity change from 0 to 2048 [ 574.405395][ T9083] UDF-fs: bad mount option "aceland" or missing value [ 574.637711][ T9084] xt_hashlimit: size too large, truncated to 1048576 [ 574.698183][ T9081] FAULT_INJECTION: forcing a failure. [ 574.698183][ T9081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.931761][ T9066] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 29ms [ 574.940221][ T9081] CPU: 0 PID: 9081 Comm: syz.2.760 Not tainted syzkaller #0 [ 574.947548][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.957625][ T9081] Call Trace: [ 574.960920][ T9081] [ 574.963869][ T9081] dump_stack_lvl+0x18c/0x250 [ 574.968574][ T9081] ? show_regs_print_info+0x20/0x20 [ 574.973797][ T9081] ? load_image+0x400/0x400 [ 574.978319][ T9081] ? __might_fault+0xaa/0x120 [ 574.983009][ T9081] ? __lock_acquire+0x7d40/0x7d40 [ 574.988064][ T9081] should_fail_ex+0x39d/0x4d0 [ 574.992776][ T9081] strncpy_from_user+0x36/0x2d0 [ 574.997648][ T9081] getname_flags+0xf6/0x500 [ 575.002183][ T9081] __x64_sys_rename+0x5f/0x90 [ 575.006875][ T9081] do_syscall_64+0x55/0xa0 [ 575.011306][ T9081] ? clear_bhb_loop+0x40/0x90 [ 575.016010][ T9081] ? clear_bhb_loop+0x40/0x90 [ 575.020721][ T9081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.026638][ T9081] RIP: 0033:0x7fa7f599c799 [ 575.031071][ T9081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.047210][ T5847] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 575.050675][ T9081] RSP: 002b:00007fa7f6914028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 575.050697][ T9081] RAX: ffffffffffffffda RBX: 00007fa7f5c15fa0 RCX: 00007fa7f599c799 [ 575.050708][ T9081] RDX: 0000000000000000 RSI: 0000200000000b80 RDI: 00002000000003c0 [ 575.050718][ T9081] RBP: 00007fa7f6914090 R08: 0000000000000000 R09: 0000000000000000 [ 575.050727][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.050736][ T9081] R13: 00007fa7f5c16038 R14: 00007fa7f5c15fa0 R15: 00007fff82984fc8 [ 575.050760][ T9081] [ 575.242009][ T5847] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 575.703273][ T5847] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 461ms [ 575.815960][ T5847] gfs2: fsid=syz:syz.0: jid=0: Done [ 575.860401][ T9066] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 575.889651][ T9066] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 576.889239][ T5847] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 577.071449][ T5847] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 577.084022][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.105537][ T5847] usb 4-1: config 0 descriptor?? [ 577.122445][ T5847] cp210x 4-1:0.0: cp210x converter detected [ 577.526728][ T5847] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 577.566483][ T5847] usb 4-1: cp210x converter now attached to ttyUSB0 [ 578.157467][ T9111] No such timeout policy "syz1" [ 578.168498][ T9111] autofs4:pid:9111:autofs_fill_super: called with bogus options [ 578.180738][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 579.840093][ T5808] usb 4-1: USB disconnect, device number 10 [ 579.870855][ T5808] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 579.916386][ T5808] cp210x 4-1:0.0: device disconnected [ 580.477737][ T9126] loop3: detected capacity change from 0 to 2048 [ 580.503267][ T9126] UDF-fs: bad mount option "aceland" or missing value [ 580.726666][ T9129] loop2: detected capacity change from 0 to 1024 [ 581.953973][ T9138] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 582.699653][ T9115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.238786][ T9153] No such timeout policy "syz1" [ 584.253571][ T9147] autofs4:pid:9147:autofs_fill_super: called with bogus options [ 584.263127][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 584.352757][ T9155] FAULT_INJECTION: forcing a failure. [ 584.352757][ T9155] name failslab, interval 1, probability 0, space 0, times 0 [ 584.366265][ T9155] CPU: 0 PID: 9155 Comm: syz.0.779 Not tainted syzkaller #0 [ 584.373847][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.383930][ T9155] Call Trace: [ 584.387237][ T9155] [ 584.390186][ T9155] dump_stack_lvl+0x18c/0x250 [ 584.394890][ T9155] ? show_regs_print_info+0x20/0x20 [ 584.400115][ T9155] ? load_image+0x400/0x400 [ 584.404653][ T9155] ? __might_sleep+0xe0/0xe0 [ 584.409278][ T9155] ? __lock_acquire+0x7d40/0x7d40 [ 584.414337][ T9155] should_fail_ex+0x39d/0x4d0 [ 584.419057][ T9155] should_failslab+0x9/0x20 [ 584.423597][ T9155] slab_pre_alloc_hook+0x59/0x310 [ 584.428659][ T9155] ? tomoyo_encode+0x28b/0x540 [ 584.433452][ T9155] ? tomoyo_encode+0x28b/0x540 [ 584.438242][ T9155] __kmem_cache_alloc_node+0x53/0x250 [ 584.443814][ T9155] ? tomoyo_encode+0x28b/0x540 [ 584.448595][ T9155] __kmalloc+0xa4/0x230 [ 584.452769][ T9155] tomoyo_encode+0x28b/0x540 [ 584.457374][ T9155] tomoyo_realpath_from_path+0x592/0x5d0 [ 584.463041][ T9155] tomoyo_path_number_perm+0x248/0x620 [ 584.468532][ T9155] ? tomoyo_path_number_perm+0x217/0x620 [ 584.474201][ T9155] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 584.479686][ T9155] ? ksys_write+0x1c4/0x260 [ 584.484246][ T9155] ? __fget_files+0x28/0x4b0 [ 584.488883][ T9155] ? __fget_files+0x28/0x4b0 [ 584.493503][ T9155] security_file_ioctl+0x70/0xa0 [ 584.498475][ T9155] __se_sys_ioctl+0x48/0x170 [ 584.503084][ T9155] do_syscall_64+0x55/0xa0 [ 584.507513][ T9155] ? clear_bhb_loop+0x40/0x90 [ 584.512198][ T9155] ? clear_bhb_loop+0x40/0x90 [ 584.516887][ T9155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.522793][ T9155] RIP: 0033:0x7fde8079c799 [ 584.527225][ T9155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.546854][ T9155] RSP: 002b:00007fde815ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.555297][ T9155] RAX: ffffffffffffffda RBX: 00007fde80a15fa0 RCX: 00007fde8079c799 [ 584.563290][ T9155] RDX: 0000200000000100 RSI: 0000000000008991 RDI: 0000000000000003 [ 584.571290][ T9155] RBP: 00007fde815ba090 R08: 0000000000000000 R09: 0000000000000000 [ 584.579283][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.587275][ T9155] R13: 00007fde80a16038 R14: 00007fde80a15fa0 R15: 00007ffde5047e68 [ 584.595281][ T9155] [ 584.672085][ T9155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 584.788777][ T9158] loop0: detected capacity change from 0 to 512 [ 584.838813][ T9158] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 585.475609][ T9163] xt_hashlimit: size too large, truncated to 1048576 [ 588.149359][ T9171] netlink: 'syz.2.785': attribute type 4 has an invalid length. [ 589.445216][ T5773] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 589.643891][ T5773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 590.089824][ T9195] No such timeout policy "syz1" [ 590.096540][ T9195] autofs4:pid:9195:autofs_fill_super: called with bogus options [ 590.105780][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 590.137777][ T5773] usb 2-1: not running at top speed; connect to a high speed hub [ 590.147233][ T5773] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.158161][ T5773] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.172492][ T5773] usb 2-1: string descriptor 0 read error: -22 [ 590.179058][ T5773] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.188703][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.212220][ T5773] usb 2-1: 0:2 : does not exist [ 590.469534][ T9190] netlink: set zone limit has 8 unknown bytes [ 591.067496][ T9202] netlink: 'syz.0.792': attribute type 4 has an invalid length. [ 592.005138][ T9205] loop2: detected capacity change from 0 to 2048 [ 592.030766][ T9205] UDF-fs: bad mount option "aceland" or missing value [ 592.099973][ T6872] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 592.114707][ T9207] capability: warning: `syz.3.791' uses 32-bit capabilities (legacy support in use) [ 592.151486][ T5773] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 592.174373][ T5773] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 592.222806][ T5773] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 592.250258][ T5773] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 592.326624][ T5773] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 592.360898][ T5773] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 592.861812][ T9212] netlink: 'syz.3.794': attribute type 4 has an invalid length. [ 593.576300][ T5773] usb 2-1: USB disconnect, device number 8 [ 594.354344][ T9221] FAULT_INJECTION: forcing a failure. [ 594.354344][ T9221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.430347][ T9221] CPU: 1 PID: 9221 Comm: syz.0.793 Not tainted syzkaller #0 [ 594.437692][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.447768][ T9221] Call Trace: [ 594.451061][ T9221] [ 594.453740][ T9215] loop1: detected capacity change from 0 to 32768 [ 594.454161][ T9221] dump_stack_lvl+0x18c/0x250 [ 594.465516][ T9221] ? show_regs_print_info+0x20/0x20 [ 594.470741][ T9221] ? load_image+0x400/0x400 [ 594.475266][ T9221] ? __lock_acquire+0x7d40/0x7d40 [ 594.480307][ T9221] ? snprintf+0xe9/0x140 [ 594.484564][ T9221] should_fail_ex+0x39d/0x4d0 [ 594.489260][ T9221] _copy_to_user+0x2f/0xa0 [ 594.493707][ T9221] simple_read_from_buffer+0xe7/0x150 [ 594.499102][ T9221] proc_fail_nth_read+0x1e8/0x260 [ 594.500126][ T9215] (syz.1.796,9215,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "resv_level=00000000000000008006" or missing value [ 594.504131][ T9221] ? proc_fault_inject_write+0x360/0x360 [ 594.523116][ T9221] ? fsnotify_perm+0x271/0x5e0 [ 594.527887][ T9221] ? proc_fault_inject_write+0x360/0x360 [ 594.533517][ T9221] vfs_read+0x28b/0x970 [ 594.537674][ T9221] ? kernel_read+0x1e0/0x1e0 [ 594.542259][ T9221] ? __fget_files+0x28/0x4b0 [ 594.546842][ T9221] ? __fget_files+0x28/0x4b0 [ 594.551423][ T9221] ? __fget_files+0x43d/0x4b0 [ 594.556101][ T9221] ? __fdget_pos+0x2a3/0x330 [ 594.560688][ T9221] ? ksys_read+0x75/0x260 [ 594.565010][ T9221] ksys_read+0x150/0x260 [ 594.569250][ T9221] ? vfs_write+0x990/0x990 [ 594.573669][ T9221] ? lockdep_hardirqs_on+0x98/0x150 [ 594.578863][ T9221] do_syscall_64+0x55/0xa0 [ 594.583275][ T9221] ? clear_bhb_loop+0x40/0x90 [ 594.587943][ T9221] ? clear_bhb_loop+0x40/0x90 [ 594.592616][ T9221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.598503][ T9221] RIP: 0033:0x7fde8075cfce [ 594.602913][ T9221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 594.622619][ T9221] RSP: 002b:00007fde815b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.631041][ T9221] RAX: ffffffffffffffda RBX: 00007fde815ba6c0 RCX: 00007fde8075cfce [ 594.639012][ T9221] RDX: 000000000000000f RSI: 00007fde815ba0a0 RDI: 0000000000000005 [ 594.646981][ T9221] RBP: 00007fde815ba090 R08: 0000000000000000 R09: 0000000000000000 [ 594.654949][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.662911][ T9221] R13: 00007fde80a16038 R14: 00007fde80a15fa0 R15: 00007ffde5047e68 [ 594.670891][ T9221] [ 594.756004][ T9215] (syz.1.796,9215,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 595.423286][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 596.705744][ T9252] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 596.837600][ T9252] team0: Device veth1_vlan failed to register rx_handler [ 598.065459][ T5857] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 598.276921][ T9252] syz.0.803 (9252) used greatest stack depth: 19560 bytes left [ 599.476723][ T5857] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 599.485159][ T5857] usb 3-1: config 0 has no interface number 0 [ 599.553828][ T5857] usb 3-1: string descriptor 0 read error: -71 [ 599.569341][ T5857] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 599.591628][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.612182][ T5857] usb 3-1: config 0 descriptor?? [ 599.617990][ T5857] usb 3-1: can't set config #0, error -71 [ 599.626070][ T5857] usb 3-1: USB disconnect, device number 8 [ 599.901035][ T9265] No such timeout policy "syz1" [ 599.911565][ T9265] autofs4:pid:9265:autofs_fill_super: called with bogus options [ 599.923131][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 600.750807][ T9268] No such timeout policy "syz1" [ 600.757209][ T9268] autofs4:pid:9268:autofs_fill_super: called with bogus options [ 600.766321][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 601.619623][ T9270] FAULT_INJECTION: forcing a failure. [ 601.619623][ T9270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.633162][ T9270] CPU: 1 PID: 9270 Comm: syz.0.810 Not tainted syzkaller #0 [ 601.640446][ T9270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.650501][ T9270] Call Trace: [ 601.653803][ T9270] [ 601.656726][ T9270] dump_stack_lvl+0x18c/0x250 [ 601.661449][ T9270] ? show_regs_print_info+0x20/0x20 [ 601.666664][ T9270] ? load_image+0x400/0x400 [ 601.671191][ T9270] ? __might_fault+0xaa/0x120 [ 601.675870][ T9270] ? __lock_acquire+0x7d40/0x7d40 [ 601.680901][ T9270] should_fail_ex+0x39d/0x4d0 [ 601.685594][ T9270] _copy_from_iter+0x1d9/0x12e0 [ 601.690452][ T9270] ? __virt_addr_valid+0x18c/0x540 [ 601.695572][ T9270] ? __lock_acquire+0x7d40/0x7d40 [ 601.700689][ T9270] ? copyout_mc+0x70/0x70 [ 601.705022][ T9270] ? __virt_addr_valid+0x18c/0x540 [ 601.710139][ T9270] ? __virt_addr_valid+0x18c/0x540 [ 601.715246][ T9270] ? __virt_addr_valid+0x469/0x540 [ 601.720366][ T9270] ? __phys_addr_symbol+0x2f/0x70 [ 601.725406][ T9270] ? __check_object_size+0x506/0xa20 [ 601.730703][ T9270] file_tty_write+0x4d0/0x980 [ 601.735388][ T9270] vfs_write+0x46c/0x990 [ 601.739724][ T9270] ? file_end_write+0x250/0x250 [ 601.744578][ T9270] ? __fget_files+0x43d/0x4b0 [ 601.749261][ T9270] ? __fdget_pos+0x1d8/0x330 [ 601.753841][ T9270] ? ksys_write+0x75/0x260 [ 601.758255][ T9270] ksys_write+0x150/0x260 [ 601.762711][ T9270] ? __ia32_sys_read+0x90/0x90 [ 601.767506][ T9270] ? lockdep_hardirqs_on+0x98/0x150 [ 601.772717][ T9270] do_syscall_64+0x55/0xa0 [ 601.777134][ T9270] ? clear_bhb_loop+0x40/0x90 [ 601.781799][ T9270] ? clear_bhb_loop+0x40/0x90 [ 601.786460][ T9270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.792344][ T9270] RIP: 0033:0x7fde8079c799 [ 601.796741][ T9270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.816425][ T9270] RSP: 002b:00007fde815ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 601.824838][ T9270] RAX: ffffffffffffffda RBX: 00007fde80a15fa0 RCX: 00007fde8079c799 [ 601.832803][ T9270] RDX: 00000000000000b0 RSI: 0000200000000200 RDI: 0000000000000005 [ 601.840765][ T9270] RBP: 00007fde815ba090 R08: 0000000000000000 R09: 0000000000000000 [ 601.848734][ T9270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.856785][ T9270] R13: 00007fde80a16038 R14: 00007fde80a15fa0 R15: 00007ffde5047e68 [ 601.864775][ T9270] [ 602.922129][ T9275] netlink: 148 bytes leftover after parsing attributes in process `syz.2.812'. [ 603.521987][ T9278] loop1: detected capacity change from 0 to 2048 [ 603.545478][ T9278] UDF-fs: bad mount option "aceland" or missing value [ 603.614717][ T6872] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 608.579214][ T5847] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 609.665175][ T5847] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 609.684643][ T5847] usb 1-1: config 0 has no interface number 0 [ 609.701711][ T5847] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 609.719241][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.738399][ T5847] usb 1-1: Product: syz [ 609.743103][ T5847] usb 1-1: Manufacturer: syz [ 609.758305][ T5847] usb 1-1: SerialNumber: syz [ 609.765854][ T5847] usb 1-1: config 0 descriptor?? [ 609.781486][ T5847] hub 1-1:0.132: bad descriptor, ignoring hub [ 609.787610][ T5847] hub: probe of 1-1:0.132 failed with error -5 [ 609.812317][ T5847] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input10 [ 610.070023][ T5857] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 610.314953][ T5857] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 610.331383][ T5857] usb 4-1: config 0 has no interface number 0 [ 610.377463][ T5857] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 610.397525][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.417783][ T5857] usb 4-1: Product: syz [ 610.422143][ T5857] usb 4-1: Manufacturer: syz [ 610.426774][ T5857] usb 4-1: SerialNumber: syz [ 610.459926][ T5857] usb 4-1: config 0 descriptor?? [ 610.489583][ T5857] hub 4-1:0.132: bad descriptor, ignoring hub [ 610.495730][ T5857] hub: probe of 4-1:0.132 failed with error -5 [ 610.523589][ T9328] loop1: detected capacity change from 0 to 32768 [ 610.529302][ T5857] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input11 [ 610.602994][ T9328] syz.1.819: attempt to access beyond end of device [ 610.602994][ T9328] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 610.629830][ T9328] lbmIODone: I/O error in JFS log [ 610.635524][ T9328] *** Log Format Error ! *** [ 610.661143][ T9328] lmLogInit: exit(-22) [ 610.669547][ T9328] lmLogOpen: exit(-22) [ 610.739925][ T9328] jfs_dirty_inode called on read-only volume [ 610.756112][ T9328] Is remount racy? [ 610.775269][ T9328] ERROR: (device loop1): txBegin: read-only filesystem [ 610.775269][ T9328] [ 610.797079][ T9328] ERROR: (device loop1): remounting filesystem as read-only [ 610.812281][ T9328] jfs_dirty_inode called on read-only volume [ 610.822332][ T9328] Is remount racy? [ 610.826143][ T9328] jfs_dirty_inode called on read-only volume [ 610.834705][ T9328] Is remount racy? [ 610.841099][ T9328] jfs_dirty_inode called on read-only volume [ 610.847349][ T9328] Is remount racy? [ 610.853387][ T9328] general protection fault, probably for non-canonical address 0xdffffc00000000c6: 0000 [#1] PREEMPT SMP KASAN [ 610.865135][ T9328] KASAN: null-ptr-deref in range [0x0000000000000630-0x0000000000000637] [ 610.873549][ T9328] CPU: 1 PID: 9328 Comm: syz.1.819 Not tainted syzkaller #0 [ 610.880833][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.890880][ T9328] RIP: 0010:txEnd+0xb4/0x520 [ 610.895467][ T9328] Code: 49 8d 5e 20 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ac 88 d8 fe 41 bf 30 06 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 8d 88 d8 fe 49 8b 1f 48 83 c3 30 [ 610.915073][ T9328] RSP: 0018:ffffc90004a9fb00 EFLAGS: 00010206 [ 610.921143][ T9328] RAX: 00000000000000c6 RBX: ffffc90002689020 RCX: 1ffff92000953f44 [ 610.929103][ T9328] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: 00000000ffffffff [ 610.937066][ T9328] RBP: ffffc90004a9fbf0 R08: ffffffff911c154f R09: 1ffffffff22382a9 [ 610.945027][ T9328] R10: dffffc0000000000 R11: fffffbfff22382aa R12: 0000000000001bfc [ 610.953078][ T9328] R13: dffffc0000000000 R14: ffffc90002689000 R15: 0000000000000630 [ 610.961043][ T9328] FS: 00007f47a27c36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 610.969970][ T9328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.976537][ T9328] CR2: 00007f701420cff8 CR3: 000000002ba08000 CR4: 00000000003526e0 [ 610.984497][ T9328] Call Trace: [ 610.987772][ T9328] [ 610.990694][ T9328] jfs_truncate_nolock+0x1e5/0x2c0 [ 610.995804][ T9328] ? jfs_direct_IO+0x220/0x220 [ 611.000556][ T9328] ? block_truncate_page+0x710/0x9f0 [ 611.005828][ T9328] ? jfs_dirty_inode+0x240/0x240 [ 611.010763][ T9328] jfs_truncate+0xce/0x140 [ 611.015172][ T9328] jfs_setattr+0x4f8/0x750 [ 611.019587][ T9328] ? jfs_fsync+0x1b0/0x1b0 [ 611.023998][ T9328] notify_change+0xb0d/0xe10 [ 611.028579][ T9328] do_truncate+0x1b0/0x240 [ 611.032981][ T9328] ? put_page_bootmem+0x2c0/0x2c0 [ 611.037998][ T9328] ? bpf_lsm_path_truncate+0x9/0x10 [ 611.043182][ T9328] vfs_truncate+0x266/0x300 [ 611.047675][ T9328] do_sys_truncate+0xf6/0x1c0 [ 611.052338][ T9328] ? lock_chain_count+0x20/0x20 [ 611.057196][ T9328] ? break_lease+0xd0/0xd0 [ 611.061606][ T9328] ? lockdep_hardirqs_on+0x98/0x150 [ 611.066799][ T9328] do_syscall_64+0x55/0xa0 [ 611.071234][ T9328] ? clear_bhb_loop+0x40/0x90 [ 611.075899][ T9328] ? clear_bhb_loop+0x40/0x90 [ 611.080604][ T9328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.086507][ T9328] RIP: 0033:0x7f47a199c799 [ 611.091068][ T9328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.110685][ T9328] RSP: 002b:00007f47a27c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 611.119098][ T9328] RAX: ffffffffffffffda RBX: 00007f47a1c15fa0 RCX: 00007f47a199c799 [ 611.127062][ T9328] RDX: 0000000000000000 RSI: 0000000000001bfc RDI: 00002000000003c0 [ 611.135023][ T9328] RBP: 00007f47a1a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 611.143047][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.151019][ T9328] R13: 00007f47a1c16038 R14: 00007f47a1c15fa0 R15: 00007ffc4b128ed8 [ 611.159000][ T9328] [ 611.162023][ T9328] Modules linked in: [ 611.166939][ T9328] ---[ end trace 0000000000000000 ]--- [ 611.172998][ T9328] RIP: 0010:txEnd+0xb4/0x520 [ 611.177631][ T9328] Code: 49 8d 5e 20 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ac 88 d8 fe 41 bf 30 06 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 8d 88 d8 fe 49 8b 1f 48 83 c3 30 [ 611.197550][ T9328] RSP: 0018:ffffc90004a9fb00 EFLAGS: 00010206 [ 611.203814][ T9328] RAX: 00000000000000c6 RBX: ffffc90002689020 RCX: 1ffff92000953f44 [ 611.211887][ T9328] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: 00000000ffffffff [ 611.219938][ T9328] RBP: ffffc90004a9fbf0 R08: ffffffff911c154f R09: 1ffffffff22382a9 [ 611.227947][ T9328] R10: dffffc0000000000 R11: fffffbfff22382aa R12: 0000000000001bfc [ 611.236089][ T9328] R13: dffffc0000000000 R14: ffffc90002689000 R15: 0000000000000630 [ 611.244104][ T9328] FS: 00007f47a27c36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 611.253147][ T9328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.259800][ T9328] CR2: 00007f701420cff8 CR3: 000000002ba08000 CR4: 00000000003526e0 [ 611.268259][ T9328] Kernel panic - not syncing: Fatal exception [ 611.274736][ T9328] Kernel Offset: disabled [ 611.279063][ T9328] Rebooting in 86400 seconds..