last executing test programs: 29m18.411082313s ago: executing program 3 (id=318): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b07010200", 0x6}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 29m12.367836315s ago: executing program 3 (id=322): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xf7) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r3, &(0x7f0000000000)="320d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a2", 0x1f) 29m10.836390411s ago: executing program 3 (id=326): openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x101000, 0x18) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0xb, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRES64, @ANYRES8], 0x24}}, 0x201c) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf25040000000500370001000000"], 0x1c}}, 0x10000) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x103004, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x17) 29m7.264281185s ago: executing program 3 (id=331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x80) 29m6.231910059s ago: executing program 3 (id=333): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401}, [@generic={0x91, 0x1, 0x1, 0x4b}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000040)=0x80000000, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x1000, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) 29m0.820737287s ago: executing program 3 (id=340): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) flock(r3, 0x1) 28m45.446361298s ago: executing program 32 (id=340): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) flock(r3, 0x1) 26m44.137528249s ago: executing program 1 (id=521): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(r1, &(0x7f0000000280), 0x9) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x29, 0x1, 0x40, "3a8e000000e2220009015500001010000000000000000000e9ffd100", 0x41416770}) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000002700)={0x2020}, 0x2020) 26m40.817136817s ago: executing program 1 (id=524): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 26m33.400985081s ago: executing program 1 (id=533): mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x181900, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) 26m26.958769153s ago: executing program 1 (id=541): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 26m18.1558627s ago: executing program 1 (id=554): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(r1, &(0x7f0000000280), 0x9) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x29, 0x1, 0x40, "3a8e000000e2220009015500001010000000000000000000e9ffd100", 0x41416770}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002700)={0x2020}, 0x2020) 26m15.273167377s ago: executing program 1 (id=558): mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) 26m0.168006912s ago: executing program 33 (id=558): mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) 18m47.55900406s ago: executing program 5 (id=1201): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x1b, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) 18m43.424074237s ago: executing program 5 (id=1203): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) bind$inet(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(0xffffffffffffffff, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd7"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000081c000180090001006d617371000000000c000280"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 18m41.199437019s ago: executing program 5 (id=1206): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200002, 0x2, 0x0, 0x1, 0x4}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000006040)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3800000000000000290000003600000000030000000000000502000c05020003000100c9100000000000000000000000000000000100000068000000000000002900000037000000000900000000000007"], 0x1c0}}], 0x1, 0x4000001) 18m39.208049096s ago: executing program 5 (id=1209): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x29, 0x1, 0x40, "3a8e000000e2220009015500001010000000000000000000e9ffd100", 0x41416770}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002700)={0x2020}, 0x2020) 18m36.0479812s ago: executing program 5 (id=1213): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\::1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 18m32.028251394s ago: executing program 5 (id=1215): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(r1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x29, 0x1, 0x40, "3a8e000000e2220009015500001010000000000000000000e9ffd100", 0x41416770}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002700)={0x2020}, 0x2020) 18m15.930389683s ago: executing program 34 (id=1215): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(r1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x29, 0x1, 0x40, "3a8e000000e2220009015500001010000000000000000000e9ffd100", 0x41416770}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002700)={0x2020}, 0x2020) 13m25.341158092s ago: executing program 4 (id=1869): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_RESOLV_LIST={{0x4}, 0x3}}}, 0x7) 13m20.647648183s ago: executing program 4 (id=1875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000080)={0x23, 0x1, 0x8}, 0x10) connect$phonet_pipe(r3, &(0x7f00000000c0)={0x23, 0x2, 0x8}, 0x10) 13m18.65194331s ago: executing program 4 (id=1878): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 13m18.453423865s ago: executing program 4 (id=1880): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 13m17.651335203s ago: executing program 4 (id=1886): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) 13m12.602050332s ago: executing program 4 (id=1891): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) bind$inet(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(0xffffffffffffffff, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000081c000180090001006d617371000000000c000280"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 12m57.250810982s ago: executing program 35 (id=1891): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) bind$inet(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(0xffffffffffffffff, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000081c000180090001006d617371000000000c000280"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 27.591178266s ago: executing program 7 (id=4348): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) 27.070233678s ago: executing program 2 (id=4349): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0/file0', [], 0xa, "3c7859296b4447381ed80906e80d7a9cf13e1141fb9b1b05449d4a16f27debdb4f6af604510f8eb4adfea7d6e5769af5c506bdabd0e07bc320ea824a62a556f69af26dff2b620cc14dfb1c921b4367fa6a9f0cb9fc54"}, 0xfffffffffffffd38) 25.760090229s ago: executing program 2 (id=4351): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x33, 0x0, &(0x7f0000002b00)) 25.460788686s ago: executing program 6 (id=4353): setresuid(0x0, 0xee01, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 24.87895607s ago: executing program 7 (id=4354): r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 24.284136864s ago: executing program 2 (id=4355): r0 = gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$getflags(r1, 0xb) 23.64179172s ago: executing program 6 (id=4357): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) lseek(r0, 0x8000000000000000, 0x1) 22.976075905s ago: executing program 2 (id=4358): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x41, 0x4, 0x5, 0x1b, "b0bf2ebb48c849ac4000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0x2020) 21.831417782s ago: executing program 7 (id=4359): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x1, 0x1fb}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) 21.216838297s ago: executing program 2 (id=4360): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) 19.655550854s ago: executing program 7 (id=4361): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x1823]}, 0x8) io_setup(0x6, &(0x7f0000000000)) 19.444078749s ago: executing program 6 (id=4362): syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) renameat2(r0, 0x0, r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) statx(r0, &(0x7f0000005ac0)='./file0\x00', 0x1000, 0x2, 0x0) 18.766474175s ago: executing program 0 (id=4363): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0xc, &(0x7f0000000080)={[{@subsystem='cpuacct'}]}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 18.597414259s ago: executing program 6 (id=4364): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000001140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 17.29211552s ago: executing program 0 (id=4365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) 16.88982726s ago: executing program 2 (id=4366): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x40, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0x4620, 0x7, 0x4e23, 0x8, 0xa, 0x0, 0x0, 0x2b}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d4, 0x32}, @in=@loopback, {0x80000020800, 0x17d, 0x0, 0x40000000000001, 0x4, 0x3, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x2}, {0xf6, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x4, 0xbe, 0x33}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000804) write(r0, &(0x7f0000000200)='2', 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x6000, 0x0) 15.908022033s ago: executing program 0 (id=4367): read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) write(r1, &(0x7f00000002c0)="ff5d03446d275d42b20f22da0500000000eafc8c1023309677b0bf617ed43108f6eef547cd484c2f3f5378d8558b1bfc25de3afe8820894c3edf32801e39c96fb44ac9028e63c8231a4317e5e612cde2835858b17a6ae439baaf1bcff7dbfc9b4441e6c680a8f8a7a7d5ef8a5c4273fd30adecc386943eb39fb02ebe11c98bed601937073fca09cccf9196e180d26fe059fb6c2e20f185f16dcaddc6205383e2b3682dc3765be73df51e", 0xaa) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0x3, 0x8, 0x0, 0x80, {0x5, 0x7fffffffffe, 0x40, 0x4, 0x20000016f, 0xdbf, 0x10, 0x0, 0x0, 0x8000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r0, {0x7, 0x27, 0x4, 0x801001a, 0x8, 0xfffe, 0x23, 0x3, 0x0, 0x0, 0x4}}, 0x50) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) write$uinput_user_dev(r2, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x8, 0x6, 0x3, 0xafc, 0x32, 0xebc0, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x100, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x800, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0xfffffffd, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x4, 0x7, 0x8, 0x5, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x2006, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x4, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x2], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x7, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x2, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x4, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0xe23, 0x101}, 0x18, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x9836, 0x0, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0xfff, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000], [0x0, 0x0, 0x2d8, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x8, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) 15.668032429s ago: executing program 7 (id=4368): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x41, 0x4, 0x5, 0x1b, "b0bf2ebb48c849ac4000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0x2020) 14.531708115s ago: executing program 6 (id=4369): modify_ldt$write2(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f0000000040)={0xc9, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f045}) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") write$nci(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r1, 0x0, 0x0) r3 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x1fc, 0xd615, 0x9, 0x535, 0xfffffffc, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) 12.068752324s ago: executing program 7 (id=4370): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) lseek(r0, 0x8000000000000000, 0x1) 6.192054653s ago: executing program 6 (id=4371): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4c002, 0x0) write(r0, 0x0, 0x0) 6.153551954s ago: executing program 0 (id=4372): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) unshare(0x20060400) write$cgroup_devices(r1, &(0x7f0000000540)={'c', ' *:* ', 'w\x00'}, 0x8) syz_pidfd_open(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@errors_remount}, {@dioread_lock}, {@i_version}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0xfffffffffffffffe}}, {@test_dummy_encryption}, {@noblock_validity}], [{@uid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x94\x10B\xe0\x0eOn\xd2\x992\v\xfe\x0fEU\xfce\x16\xdee/Q\x99\x9b$\x99\xf6S\xab\xfdk\xfbO\x8f\xd2\x94\xce\x10\x8b\x13\x1a\xabM,\x92JE\xac\x88\xa2\xd2'}}, {@pcr={'pcr', 0x3d, 0x2c}}, {@smackfsfloor={'smackfsfloor', 0x3d, '%,\'+$'}}]}, 0x3, 0x453, &(0x7f0000000600)="$eJzs281vFOUfAPDvzLbw+/HWivgColbR2PjS0oLKwYtGEw+amOgBj7UtBFmooTUR0mg1Bo+GxLvxaOJf4EkvRj2ZeNW7ISHaC+hpzczOlO2yu7R06xb280kGnmfm2T7Pt888O8/MMw2gb41k/yQRuyLit4gYqmdXFxip/3dteXH67+XF6SRqtTf/TPJyV5cXp8ui5ed2FpnRNCL9NCkqWW3+/IXTU9Xq7LkiP75w5r3x+fMXnjl1Zurk7MnZs5PHjh09MvH8c5PPrj2YJGl7aHfW1gMfzh3c/+rbl16fPn7pnZ++yUrvKo43xrERaUN6JAv8r1quudzj3ahsC9ndkE4Gbl6GraESEVl3Debjfygqcb3zhuKVT3raOGBTZdem7e0PL9VaqbTcC9x2kuh1C4DeKC/02f1vuf1HU48t4cqL9Rugq8ni9LXl+lY/MrByLz+4ifeuIxFxfOmfL7MtuvgcAgCgne+y+c/TreZ/adzbUG5PsTY0HBF3RcTeiLg7IvZFxD0Redn7IuL+G2pIO9bfvDR04/wnvXzLwa1BNv97oVjbWj3/W2n3cKXI7c7jH0xOnKrOHi5+J6MxuD3LT3So4/uXf/283bHG+V+2ZfWXc8GiHZcHmh7QzUwtTOWT0i648nHEgYFW8ScrKwFJROyPiAPr+9F7ysSpJ78+2K7QzePvoM0603rUvop4Iuv/WrIUTfGXks7rk+P/i+rs4fHyrLjRz79cfKNd/RuKvwuy/t+x+vxvLjKcNK7Xzq+/jou/f9b2nuZWz/9tyVt5v2wr9n0wtbBwbiJiW/Janl+1f/L6Z8t8WT6Lf/RQ6/G/t/hMVs8DEZGdxA9GxEMR8XDR9kci4tGIONQh/h9feuzdW49/c2Xxz7T8/ls5/5v6f/2Jyukfvm1X/9r6/2ieGi325N9/N7HWBm7kdwcAAAC3izR/Bz5Jx1bSaTo2Vn+Hf1/sSKtz8wtPnZh7/+xM/V354RhMyyddQw3PQyeSpeIn1vOTxbPi8viR4rnxF5X/5/mx6bnqTI9jh363s834z/xR6XXrgE3XhXU04DbVPP47v7IB3Elc/6F/Gf/Qv4x/6F+txv9HTXlrAXBncv2H/mX8Q/8y/qF/Gf/Qlzbyd/0S/ZyIdEs0Y5MSQ1ujGT1M9PqbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DQAA//82merZ") syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x808400, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@acl}]}, 0x1, 0x45f, &(0x7f0000000340)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) creat(&(0x7f0000000140)='./bus\x00', 0x182) stat(&(0x7f0000003540)='./file0\x00', &(0x7f0000003580)) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) 1.171317942s ago: executing program 36 (id=4366): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x40, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0x4620, 0x7, 0x4e23, 0x8, 0xa, 0x0, 0x0, 0x2b}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d4, 0x32}, @in=@loopback, {0x80000020800, 0x17d, 0x0, 0x40000000000001, 0x4, 0x3, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x2}, {0xf6, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x4, 0xbe, 0x33}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000804) write(r0, &(0x7f0000000200)='2', 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x6000, 0x0) 1.110158463s ago: executing program 0 (id=4374): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) 0s ago: executing program 0 (id=4375): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x6da24b7ebfdfaf83}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x10042, 0x4d) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.7.3253'. [ 1669.285612][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.292068][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.496683][ T7896] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1671.707024][ T7896] usb 8-1: Using ep0 maxpacket: 16 [ 1671.717043][ T7896] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1671.740557][ T7896] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.776558][ T7896] usb 8-1: Product: syz [ 1671.791971][ T7896] usb 8-1: Manufacturer: syz [ 1671.812210][ T7896] usb 8-1: SerialNumber: syz [ 1671.843580][ T7896] usb 8-1: config 0 descriptor?? [ 1672.280519][ T7896] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1672.328381][ T7896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1672.367103][ T7896] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1672.394824][ T7896] usb 8-1: media controller created [ 1672.481269][T17716] dtv5100: wlen = 0, aborting. [ 1672.499819][ T7896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1672.642151][ T7896] zl10353_read_register: readreg error (reg=127, ret==0) [ 1672.686602][ T7896] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1672.710004][ T7896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1672.776595][ T7896] usb 8-1: USB disconnect, device number 11 [ 1672.918056][ T7896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1674.444161][T17733] syzkaller0: entered promiscuous mode [ 1674.504961][T17733] syzkaller0: entered allmulticast mode [ 1674.556644][T17736] tipc: Started in network mode [ 1674.601231][T17736] tipc: Node identity fa169042410e, cluster identity 4711 [ 1674.667737][T17736] tipc: Enabled bearer , priority 0 [ 1674.726949][T17730] tipc: Resetting bearer [ 1675.214698][T17730] tipc: Disabling bearer [ 1679.059821][T17801] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1679.887289][T17821] netlink: 340 bytes leftover after parsing attributes in process `syz.6.3304'. [ 1679.917909][T17821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3304'. [ 1680.180964][T17831] zram0: detected capacity change from 0 to 8 [ 1681.499791][T17838] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1683.516646][ T5777] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1687.828250][T17884] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1688.019735][ T5818] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1688.221240][ T5818] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1688.235830][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.262686][ T5818] usb 3-1: Product: syz [ 1688.271845][ T5818] usb 3-1: Manufacturer: syz [ 1688.285492][ T5818] usb 3-1: SerialNumber: syz [ 1688.309654][ T5818] usb 3-1: config 0 descriptor?? [ 1688.332739][ T5818] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 022 [ 1688.432822][T17899] autofs4:pid:17899:autofs_fill_super: called with bogus options [ 1688.754088][ T5818] (null): failure reading functionality [ 1688.771504][ T5818] i2c i2c-1: failure reading functionality [ 1688.799101][ T5818] i2c i2c-1: connected i2c-tiny-usb device [ 1688.827684][ T5818] usb 3-1: USB disconnect, device number 22 [ 1689.917109][ T5777] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1692.729562][T17954] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3344'. [ 1694.806138][T17984] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3364'. [ 1695.925340][T18013] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3375'. [ 1699.802474][ T28] audit: type=1800 audit(1788151391.892:73): pid=18022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3379" name="(" dev="sda1" ino=2056 res=0 errno=0 [ 1700.626791][T18042] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3386'. [ 1700.636959][ T5818] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1700.829415][ T5818] usb 8-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 1700.858521][ T5818] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1700.883218][ T5818] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1700.997388][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1701.031663][ T5818] usb 8-1: Product: syz [ 1701.035915][ T5818] usb 8-1: Manufacturer: syz [ 1701.055574][ T5818] usb 8-1: SerialNumber: syz [ 1701.077526][ T5818] usb 8-1: config 0 descriptor?? [ 1701.136356][ T5818] snd-usb-audio: probe of 8-1:0.0 failed with error -22 [ 1701.213347][T18025] udevd[18025]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1701.257383][ T5815] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1701.328990][T18055] kvm: kvm [18054]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2900000001 [ 1701.367075][T18055] kvm: kvm [18054]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x290000009e [ 1701.390001][T18055] kvm: kvm [18054]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1701.466576][ T5815] usb 7-1: Using ep0 maxpacket: 32 [ 1701.483919][ T5815] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1701.506573][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.539120][ T5815] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1702.447257][ T5815] gspca_nw80x: reg_w err -110 [ 1702.461141][ T5815] nw80x: probe of 7-1:3.0 failed with error -110 [ 1703.032387][ T5815] usb 8-1: USB disconnect, device number 12 [ 1704.395144][ T7896] usb 7-1: USB disconnect, device number 21 [ 1706.293500][ T7896] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1708.109343][ T7896] usb 8-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 1708.150818][ T7896] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1708.189250][ T7896] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1708.226547][ T7896] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1708.255823][ T7896] usb 8-1: Product: syz [ 1708.282592][ T7896] usb 8-1: Manufacturer: syz [ 1708.294461][ T7896] usb 8-1: SerialNumber: syz [ 1708.318405][ T7896] usb 8-1: config 0 descriptor?? [ 1708.384419][ T7896] snd-usb-audio: probe of 8-1:0.0 failed with error -22 [ 1708.454294][T18025] udevd[18025]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1709.641595][ T5818] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1709.727004][ T5835] usb 8-1: USB disconnect, device number 13 [ 1709.849927][ T5818] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1709.869722][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.906725][ T5818] usb 7-1: Product: syz [ 1709.915166][ T5818] usb 7-1: Manufacturer: syz [ 1709.926781][ T5818] usb 7-1: SerialNumber: syz [ 1710.153196][ T7896] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1710.598861][ T5835] usb 7-1: USB disconnect, device number 22 [ 1710.737245][T18133] kvm: kvm [18132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1 [ 1710.768080][T18133] kvm: kvm [18132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfffd00000001 [ 1710.837318][T18133] kvm: kvm [18132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff00000001 [ 1710.873628][T18133] kvm_intel: kvm [18132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xfffe00000001 [ 1711.856926][ T7896] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1711.864284][ T7896] ath9k_htc: Failed to initialize the device [ 1711.946704][ T5835] usb 7-1: ath9k_htc: USB layer deinitialized [ 1711.956161][T18133] kvm: kvm [18132]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xfffe00000001 [ 1717.439038][T18193] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1717.780177][ T5818] IPVS: starting estimator thread 0... [ 1717.886799][T18194] IPVS: using max 16 ests per chain, 38400 per kthread [ 1717.964775][T18201] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3438'. [ 1718.698374][T18228] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3447'. [ 1721.208308][T18264] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3458'. [ 1721.573281][ T5815] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1722.669177][ T5815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1722.698219][ T5815] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1722.736752][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.005516][ T5815] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 1723.045405][ T5815] wwan wwan0: port wwan0qmi0 attached [ 1723.297412][T18279] afs: Unknown parameter '' [ 1724.573958][ T5815] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, 3a:c2:45:7c:82:2d [ 1724.634388][ T5815] usb 7-1: USB disconnect, device number 23 [ 1724.670334][ T5815] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device [ 1724.853364][ T5815] wwan wwan0: port wwan0qmi0 disconnected [ 1724.949254][T18292] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3470'. [ 1725.550425][T18309] block nbd7: shutting down sockets [ 1725.638605][T18314] binder: 18311:18314 ioctl 4018620d 0 returned -22 [ 1730.724693][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.745085][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.266939][T18348] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3480'. [ 1733.716647][T18356] configfs-gadget.g1 gadget.0: HOST MAC 12:50:28:e8:b3:1b [ 1733.724398][T18356] configfs-gadget.g1 gadget.0: MAC 66:9e:6d:75:02:61 [ 1734.696701][T18381] binder: 18380:18381 ioctl 4018620d 0 returned -22 [ 1734.736815][T18383] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3477'. [ 1734.976672][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1735.068905][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1735.468501][T18402] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3489'. [ 1736.031872][T18425] binder: 18424:18425 ioctl 4018620d 0 returned -22 [ 1737.969499][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1739.242761][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1739.377165][ T5835] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1739.420324][T18443] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3500'. [ 1740.523416][ T5835] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1740.555872][T18445] syz.7.3501 (18445) used greatest stack depth: 16808 bytes left [ 1740.611515][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.659067][ T5835] usb 7-1: config 0 descriptor?? [ 1740.690364][ T5835] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1741.070883][ T5835] gp8psk: usb in 128 operation failed. [ 1741.077423][ T5835] gp8psk: usb in 137 operation failed. [ 1741.082942][ T5835] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1741.134089][ T5835] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1741.143187][ T5818] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1741.173438][ T5835] usb 7-1: USB disconnect, device number 24 [ 1741.349015][ T5818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.370064][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1741.401108][ T5818] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1741.433925][ T5818] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1741.482065][ T5818] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1741.505668][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.526116][ T5818] usb 3-1: Product: syz [ 1741.535723][ T5818] usb 3-1: Manufacturer: syz [ 1741.545810][ T5818] usb 3-1: SerialNumber: syz [ 1741.771456][ T5818] usb 3-1: usb_control_msg returned -71 [ 1741.778083][ T5818] usbtmc 3-1:1.0: can't read capabilities [ 1741.795444][ T5818] usb 3-1: USB disconnect, device number 23 [ 1741.956630][ T5815] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1741.964384][ T5835] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1742.150717][ T5815] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1742.167659][ T5815] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.186134][ T5835] usb 8-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 1742.206803][ T5815] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1742.220074][ T5835] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1742.233948][ T5835] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1742.254999][ T5815] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 1742.264393][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1742.276480][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.284729][ T5835] usb 8-1: Product: syz [ 1742.294380][ T5835] usb 8-1: Manufacturer: syz [ 1742.311452][ T5835] usb 8-1: SerialNumber: syz [ 1742.376574][ T5818] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1743.496294][ T5815] snd-ua101 7-1:1.0: invalid bNumEndpoints [ 1744.219559][ T5835] usb 8-1: config 0 descriptor?? [ 1746.151698][ T5815] usb 7-1: USB disconnect, device number 25 [ 1746.178934][ T5835] snd-usb-audio: probe of 8-1:0.0 failed with error -22 [ 1746.191461][ T5818] usb 3-1: device descriptor read/all, error -71 [ 1746.429185][T18358] udevd[18358]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 1746.466250][T18473] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3509'. [ 1746.737961][ T788] usb 8-1: USB disconnect, device number 14 [ 1747.275491][T18493] jffs2: notice: (18493) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1749.357325][T18508] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3518'. [ 1749.530419][T18512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.566954][T18512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1755.575952][ T788] smpboot: CPU 1 is now offline [ 1757.796657][ T788] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1757.987989][ T788] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1758.001824][ T788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1758.063035][ T788] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1758.096610][ T788] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1758.135213][ T788] usb 7-1: Manufacturer: syz [ 1758.180153][ T788] usb 7-1: config 0 descriptor?? [ 1758.204355][T18567] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3528'. [ 1758.426830][ T788] rc_core: IR keymap rc-hauppauge not found [ 1758.438548][ T788] Registered IR keymap rc-empty [ 1758.478217][ T788] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1758.543314][ T788] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input13 [ 1758.773295][ C0] igorplugusb 7-1:0.0: receive overflow, at least 12 lost [ 1758.794599][T18575] rc rc0: two consecutive events of type space [ 1758.986219][ T788] usb 7-1: USB disconnect, device number 26 [ 1759.771887][T18597] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3543'. [ 1759.941289][T18601] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3545'. [ 1760.151324][ T5818] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1760.441862][T18605] PKCS7: Unknown OID: [4] 0.0 [ 1760.446636][T18605] PKCS7: Only support pkcs7_signedData type [ 1760.556596][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 1760.584401][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1760.638799][ T5818] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1760.680456][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1760.714289][ T5818] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1760.743550][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.774700][ T5818] usb 3-1: Product: syz [ 1760.791612][ T5818] usb 3-1: Manufacturer: syz [ 1760.906614][ T5818] usb 3-1: SerialNumber: syz [ 1760.940405][ T5818] usb 3-1: config 0 descriptor?? [ 1762.613435][ T5818] gs_usb 3-1:0.0: Couldn't get device config: (err=-110) [ 1762.636571][ T5818] gs_usb: probe of 3-1:0.0 failed with error -110 [ 1763.052857][T18633] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3558'. [ 1763.224046][T18638] random: crng reseeded on system resumption [ 1764.092693][ T5835] usb 3-1: USB disconnect, device number 26 [ 1767.676651][ T788] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1767.886693][ T788] usb 8-1: Using ep0 maxpacket: 32 [ 1767.897930][ T788] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 1767.928763][ T788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.982016][ T788] usb 8-1: config 0 descriptor?? [ 1768.413896][ T788] hid (null): report_id 0 is invalid [ 1768.450312][ T788] hid (null): nested delimiters [ 1768.493325][ T788] hid (null): bogus close delimiter [ 1768.583528][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1768.631231][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1768.685307][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1768.928251][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1768.972502][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.014248][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.065492][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.105811][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.147993][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.207572][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.267349][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.274839][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.405489][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.451067][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.506547][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.544985][T18726] binder: 18723:18726 ioctl 4018620d 0 returned -22 [ 1769.553810][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.605749][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.652370][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.695784][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.729635][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.782842][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.839287][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.879912][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1769.964216][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.015688][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.051854][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.091525][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.120971][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.158148][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.203528][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.244840][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.290033][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.328927][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.376709][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.384165][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.477357][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.540849][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.598864][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.670359][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.729172][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.789557][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.823023][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.856055][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.902827][T18767] binder: 18766:18767 ioctl 4018620d 0 returned -22 [ 1770.917214][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1770.966725][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.007320][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.014780][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.126494][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.173119][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.216161][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.265454][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.303967][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.359230][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.406868][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.473051][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.543753][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x3 [ 1771.585056][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.648339][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.655828][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1771.879096][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1773.448684][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1773.456156][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1773.906515][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1773.913987][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.106483][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.183304][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.200240][T18801] binder: 18797:18801 ioctl 4018620d 0 returned -22 [ 1774.225479][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.287482][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.294963][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.376143][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.414916][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.431834][T18807] ipvlan1: entered promiscuous mode [ 1774.445855][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.504393][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.516961][T18805] ipvlan1: left promiscuous mode [ 1774.554120][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.605339][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.667293][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.742363][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.779029][ T788] hid-generic 0003:1B1C:1B27.0004: unknown main item tag 0x0 [ 1774.830786][ T788] hid-generic 0003:1B1C:1B27.0004: report_id 0 is invalid [ 1774.903745][ T788] hid-generic 0003:1B1C:1B27.0004: item 0 0 1 8 parsing failed [ 1774.965184][ T788] hid-generic: probe of 0003:1B1C:1B27.0004 failed with error -22 [ 1775.068764][ T788] usb 8-1: USB disconnect, device number 15 [ 1775.883192][T18839] binder: 18836:18839 ioctl c0306201 0 returned -14 [ 1778.386583][ T7896] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1778.618027][ T7896] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 1778.646887][ T7896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.698858][ T7896] usb 3-1: config 0 has no interface number 0 [ 1778.705009][ T7896] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1778.759455][ T7896] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1778.803430][ T7896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.858207][ T7896] usb 3-1: Product: syz [ 1778.886657][ T7896] usb 3-1: Manufacturer: syz [ 1778.892093][ T7896] usb 3-1: SerialNumber: syz [ 1778.947387][ T7896] usb 3-1: config 0 descriptor?? [ 1778.983598][ T7896] streamzap 3-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1779.186121][T18463] usb 3-1: USB disconnect, device number 27 [ 1781.255805][T18913] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(3) [ 1781.266142][T18913] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(1) [ 1781.276208][T18913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3642'. [ 1783.362747][T18930] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1784.228049][T18943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.360299][T18943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.492248][T18943] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1784.501634][T18943] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1784.510572][T18943] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1784.519433][T18943] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1784.759323][T18943] team0: Port device vxlan0 added [ 1784.852001][T18951] netlink: 'syz.6.3655': attribute type 1 has an invalid length. [ 1784.884105][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3655'. [ 1785.489511][T18958] kvm: kvm [18954]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1 [ 1785.812183][T18958] kvm: kvm [18954]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1 [ 1785.862986][T18958] kvm: kvm [18954]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2 [ 1785.908592][T18958] kvm: kvm [18954]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1 [ 1786.696955][ T7896] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1786.757068][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3670'. [ 1786.896680][ T7896] usb 8-1: Using ep0 maxpacket: 16 [ 1786.906298][ T7896] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 1786.942216][ T7896] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1786.973143][ T7896] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.025401][ T7896] usb 8-1: Product: syz [ 1787.063180][ T7896] usb 8-1: Manufacturer: syz [ 1787.086741][ T7896] usb 8-1: SerialNumber: syz [ 1787.136010][ T7896] r8152-cfgselector 8-1: config 0 descriptor?? [ 1787.772094][ T7896] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1787.815787][ T7896] r8152-cfgselector 8-1: USB disconnect, device number 16 [ 1787.912707][T19013] gfs2: path_lookup on  returned error -2 [ 1788.228826][ T5818] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1788.448217][ T5818] usb 7-1: Using ep0 maxpacket: 8 [ 1788.477486][ T5818] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.525174][ T5818] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1788.585558][ T5818] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1788.655174][ T5818] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1788.726684][ T5818] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1788.735868][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.829809][ T5818] hub 7-1:1.0: bad descriptor, ignoring hub [ 1788.873845][ T5818] hub: probe of 7-1:1.0 failed with error -5 [ 1788.922564][ T5818] cdc_wdm 7-1:1.0: skipping garbage [ 1788.958185][ T5818] cdc_wdm 7-1:1.0: skipping garbage [ 1789.008647][ T5818] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1789.046717][ T5818] cdc_wdm 7-1:1.0: Unknown control protocol [ 1789.136916][ T5818] usb 7-1: USB disconnect, device number 27 [ 1789.872860][T19053] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3690'. [ 1790.237151][T19065] netlink: 'syz.2.3694': attribute type 2 has an invalid length. [ 1790.244949][T19065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3694'. [ 1790.586841][ T7896] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1790.706738][ T5818] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1790.806752][ T7896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 64703, setting to 1024 [ 1790.844146][ T7896] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1790.899199][ T7896] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1790.941825][ T7896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.960360][ T5818] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.990421][T19069] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1791.015295][ T5818] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1791.052255][ T7896] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 1791.078991][ T5818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.118649][ T7896] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 1791.166239][ T5818] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1791.244239][T19086] netlink: 'syz.0.3701': attribute type 72 has an invalid length. [ 1791.281045][T19087] netlink: 'syz.2.3702': attribute type 19 has an invalid length. [ 1791.293184][T19086] netlink: 'syz.0.3701': attribute type 1 has an invalid length. [ 1791.326183][T19086] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3701'. [ 1791.430549][T19069] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1791.469064][T19069] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1791.500154][T19069] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1791.647323][T19068] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1791.686366][ T7896] usb 7-1: USB disconnect, device number 28 [ 1791.716475][ T7896] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1791.744149][ T7896] spcp8x5 7-1:1.0: device disconnected [ 1792.234635][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.243268][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.251064][ T5818] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 1792.460140][ T5818] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1792.485158][ T5818] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 1792.531310][ T5818] usb 8-1: USB disconnect, device number 17 [ 1794.637136][T19122] binder: 19121:19122 ioctl c0306201 0 returned -14 [ 1795.978375][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3722'. [ 1796.389215][T19152] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3724'. [ 1796.696551][T18463] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1796.898991][T18463] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1796.942087][T18463] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1797.000121][T18463] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1797.058352][T18463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.100840][T18463] usb 3-1: Product: syz [ 1797.121552][T18463] usb 3-1: Manufacturer: syz [ 1797.147277][T18463] usb 3-1: SerialNumber: syz [ 1797.396956][ T7896] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1797.414929][T18463] usb 3-1: Limiting number of CPorts to U8_MAX [ 1797.495903][T19183] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3734'. [ 1797.612121][ T7896] usb 7-1: Using ep0 maxpacket: 8 [ 1797.662795][ T7896] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1797.690754][ T7896] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.739395][ T7896] usb 7-1: config 179 has no interface number 0 [ 1797.764615][ T7896] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1797.793951][ T7896] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1797.848971][ T7896] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1797.886332][ T7896] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1797.910682][ T7896] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1797.944704][ T7896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.037852][T18463] usb 3-1: failed to set connected state for cport 0: -121 [ 1798.070058][T18463] greybus greybus1: 0/0:0: failed to set connected state: -121 [ 1798.205260][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.231975][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.248976][T18463] usb 3-1: failed to send ARPC request 3: -71 [ 1798.298397][T18463] usb 3-1: failed to execute ARPC: -71 [ 1798.306875][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.355015][T18463] usb 3-1: failed to clear cport 0: -71 [ 1798.369038][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.395980][T18463] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 1798.416970][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.475739][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.486351][T18463] es2_ap_driver: probe of 3-1:1.0 failed with error -121 [ 1798.519604][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.550925][T18463] usb 3-1: USB disconnect, device number 28 [ 1798.575227][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.621702][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.676609][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.714505][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.756022][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.786266][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.839619][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.878852][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.923724][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1798.956065][ T7896] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 1799.011690][ T7896] hid-generic 0006:0004:0009.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1799.248731][ T7896] usb 7-1: USB disconnect, device number 29 [ 1799.311280][T19204] fido_id[19204]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1801.007194][T19225] FAULT_INJECTION: forcing a failure. [ 1801.007194][T19225] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1801.083233][T19225] CPU: 0 PID: 19225 Comm: syz.6.3746 Not tainted syzkaller #0 [ 1801.090832][T19225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1801.100986][T19225] Call Trace: [ 1801.104270][T19225] [ 1801.107202][T19225] dump_stack_lvl+0x18c/0x250 [ 1801.111888][T19225] ? show_regs_print_info+0x20/0x20 [ 1801.117107][T19225] ? load_image+0x420/0x420 [ 1801.121620][T19225] ? __might_fault+0xaa/0x120 [ 1801.126305][T19225] ? __lock_acquire+0x7d80/0x7d80 [ 1801.131337][T19225] ? trace_contention_end+0x39/0xe0 [ 1801.136545][T19225] ? __virt_addr_valid+0x10c/0x380 [ 1801.141669][T19225] should_fail_ex+0x394/0x4c0 [ 1801.146366][T19225] _copy_from_user+0x2f/0xe0 [ 1801.150969][T19225] snd_pcm_oss_write2+0x2c5/0x410 [ 1801.156028][T19225] ? snd_pcm_hw_param_max+0x6f0/0x6f0 [ 1801.161415][T19225] ? snd_pcm_do_prepare+0x230/0x230 [ 1801.166625][T19225] ? snd_pcm_action_nonatomic+0x24a/0x2a0 [ 1801.172369][T19225] snd_pcm_oss_write+0x6c7/0xb20 [ 1801.177329][T19225] ? snd_pcm_oss_read+0x8a0/0x8a0 [ 1801.182370][T19225] vfs_write+0x299/0x9a0 [ 1801.186628][T19225] ? file_end_write+0x250/0x250 [ 1801.191491][T19225] ? __fget_files+0x28/0x460 [ 1801.196130][T19225] ? __fget_files+0x3fc/0x460 [ 1801.200827][T19225] ? __fdget_pos+0x1d8/0x330 [ 1801.205436][T19225] ? ksys_write+0x74/0x260 [ 1801.209872][T19225] ksys_write+0x151/0x260 [ 1801.214310][T19225] ? __ia32_sys_read+0x90/0x90 [ 1801.219107][T19225] ? lockdep_hardirqs_on+0x98/0x150 [ 1801.224322][T19225] do_syscall_64+0x55/0xb0 [ 1801.228743][T19225] ? clear_bhb_loop+0x40/0x90 [ 1801.233450][T19225] ? clear_bhb_loop+0x40/0x90 [ 1801.238136][T19225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1801.244035][T19225] RIP: 0033:0x7fcc8979e159 [ 1801.248480][T19225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.268106][T19225] RSP: 002b:00007fcc8a61a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1801.276527][T19225] RAX: ffffffffffffffda RBX: 00007fcc89a25fa0 RCX: 00007fcc8979e159 [ 1801.284622][T19225] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1801.292596][T19225] RBP: 00007fcc89835024 R08: 0000000000000000 R09: 0000000000000000 [ 1801.300595][T19225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1801.308655][T19225] R13: 00007fcc89a26038 R14: 00007fcc89a25fa0 R15: 00007ffeeba84218 [ 1801.316661][T19225] [ 1801.463740][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'. [ 1801.676151][T19243] binder: BINDER_SET_CONTEXT_MGR already set [ 1801.716653][T19243] binder: 19242:19243 ioctl 4018620d 200000000040 returned -16 [ 1804.321935][T18660] tipc: Resetting bearer [ 1804.516085][T18660] tipc: Disabling bearer [ 1804.870801][T19283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.885678][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1804.976551][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.993975][T19283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.314006][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1805.396606][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.606033][T17840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1805.620803][T17840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1805.631091][T17840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1805.640289][T17840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1805.649290][T17840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1805.668449][T17840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1805.684978][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1805.692406][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1805.701016][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1805.713492][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1805.731277][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1805.738723][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1805.802249][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1805.862259][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.124039][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1806.187147][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.837199][T17840] Bluetooth: hci1: command tx timeout [ 1808.913560][ T34] tipc: Left network mode [ 1809.084914][T19296] chnl_net:caif_netlink_parms(): no params data found [ 1809.918198][T17840] Bluetooth: hci1: command tx timeout [ 1810.447273][ T5818] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1810.482041][T19296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.519609][T19296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.556094][T19296] bridge_slave_0: entered allmulticast mode [ 1810.590337][T19296] bridge_slave_0: entered promiscuous mode [ 1810.660208][ T5818] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1810.713578][ T5818] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1810.752603][ T5818] usb 8-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 1810.794834][ T5818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.854593][ T5818] usb 8-1: config 0 descriptor?? [ 1810.884465][T19348] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1810.913902][T19296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.945177][T19296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.984426][T19296] bridge_slave_1: entered allmulticast mode [ 1811.012189][T19296] bridge_slave_1: entered promiscuous mode [ 1811.341706][ T5818] hid (null): unknown global tag 0x6a [ 1811.372089][ T5818] hid (null): invalid report_count 42952 [ 1811.409087][ T5818] hid (null): unknown global tag 0x39 [ 1811.465994][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.488437][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.536538][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.564738][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.610090][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.646710][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.684094][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.716963][T19296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1811.733458][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.777353][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.795474][T19296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1811.818429][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.848480][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.873109][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.920718][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1811.997080][T17840] Bluetooth: hci1: command tx timeout [ 1813.580797][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1813.856106][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1813.911080][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1813.961764][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.013046][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.056233][T19373] dccp_invalid_packet: P.Data Offset(4) too small [ 1814.075198][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.089145][T17840] Bluetooth: hci1: command tx timeout [ 1814.138140][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.145412][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.239538][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.306787][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.313740][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.428527][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.496010][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.550827][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.617925][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.624857][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.722673][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.735020][T19296] team0: Port device team_slave_0 added [ 1814.792057][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.848099][T19296] team0: Port device team_slave_1 added [ 1814.867823][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1814.928705][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1815.013229][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1815.052556][T19386] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1815.077152][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1815.084249][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1815.197759][T19296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1815.229530][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1815.251668][T19296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1815.288303][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1815.295259][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1815.403582][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1815.583057][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1815.616492][T19296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.897115][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1815.951454][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.023332][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.080645][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.135228][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.184992][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.308745][T19296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1816.335836][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.366251][T19296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1816.406597][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.413639][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.516503][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.523436][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.583193][T19296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1816.630677][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.696524][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.703444][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.793814][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 1816.861322][ T5818] razer 0003:1532:010D.0006: unknown main item tag 0x1 [ 1816.904427][ T5818] razer 0003:1532:010D.0006: unexpected long global item [ 1816.946159][ T5818] razer: probe of 0003:1532:010D.0006 failed with error -22 [ 1817.004384][ T34] hsr_slave_0: left promiscuous mode [ 1817.028289][ T5818] usb 8-1: USB disconnect, device number 18 [ 1817.056584][ T788] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1817.135517][ T34] hsr_slave_1: left promiscuous mode [ 1817.209280][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1817.247484][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1817.276921][ T788] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1817.316114][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.347743][ T34] bridge_slave_1: left allmulticast mode [ 1817.370648][ T788] usb 3-1: config 0 descriptor?? [ 1817.404159][ T34] bridge_slave_1: left promiscuous mode [ 1817.422278][ T788] cp210x 3-1:0.0: cp210x converter detected [ 1817.434504][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.531378][ T34] bridge_slave_0: left allmulticast mode [ 1817.547039][ T34] bridge_slave_0: left promiscuous mode [ 1817.573938][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.741636][ T34] veth1_macvtap: left promiscuous mode [ 1817.766570][ T34] veth0_macvtap: left promiscuous mode [ 1817.792531][ T34] veth1_vlan: left promiscuous mode [ 1817.816595][ T34] veth0_vlan: left promiscuous mode [ 1817.828179][ T788] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1817.891378][ T788] usb 3-1: USB disconnect, device number 29 [ 1817.916335][ T788] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1817.967005][ T788] cp210x 3-1:0.0: device disconnected [ 1819.916473][T18463] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1820.335083][T18463] usb 3-1: config index 0 descriptor too short (expected 1040, got 18) [ 1820.352654][T18463] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.384669][T18463] usb 3-1: config 0 has no interfaces? [ 1820.411872][T18463] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1820.424268][T18463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.456259][T18463] usb 3-1: Product: syz [ 1820.477080][T18463] usb 3-1: Manufacturer: syz [ 1820.487082][T18463] usb 3-1: SerialNumber: syz [ 1820.510005][T18463] usb 3-1: config 0 descriptor?? [ 1821.655796][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1821.851571][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1822.034331][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1822.230469][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1823.296732][ T788] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1823.352620][ T34] bond0 (unregistering): Released all slaves [ 1823.490440][ T788] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1823.524781][ T788] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.597853][ T788] usb 8-1: Product: syz [ 1823.613628][ T788] usb 8-1: Manufacturer: syz [ 1823.639179][ T788] usb 8-1: SerialNumber: syz [ 1823.737134][ T7896] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1823.828238][T19296] hsr_slave_0: entered promiscuous mode [ 1823.858219][T18463] usb 3-1: USB disconnect, device number 30 [ 1824.127021][T19296] hsr_slave_1: entered promiscuous mode [ 1824.476199][T19296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1824.515018][T19296] Cannot create hsr debugfs directory [ 1824.958199][ T7896] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1824.965273][ T7896] ath9k_htc: Failed to initialize the device [ 1824.974778][ T5818] usb 8-1: USB disconnect, device number 19 [ 1825.069795][ T5818] usb 8-1: ath9k_htc: USB layer deinitialized [ 1826.828981][ T34] IPVS: stop unused estimator thread 0... [ 1828.612187][T19296] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1828.691072][T19296] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1828.818094][T19296] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1828.899653][T19296] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1829.036636][T18463] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1829.266748][T18463] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.317822][T18463] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1829.355608][T19296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1829.377561][T18463] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1829.432021][T18463] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1829.469952][T19296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1829.514126][T18463] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1830.705023][ T5835] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1830.727716][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.734899][T12703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1830.742744][T18463] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.828728][T12703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.835959][T12703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1830.941353][ T5835] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1830.994995][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.056281][T19296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1831.078640][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1831.108075][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1831.186293][ T5835] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1831.231273][T18463] gud: probe of 8-1:1.0 failed with error -32 [ 1831.246570][ T5835] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1831.300081][T18463] usb 8-1: USB disconnect, device number 20 [ 1831.306142][ T5835] usb 3-1: Manufacturer: syz [ 1831.358675][ T5835] usb 3-1: config 0 descriptor?? [ 1831.789633][ T5835] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 1831.864983][ T5835] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 1831.910775][T19296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1832.017026][ T5835] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1833.438225][T18463] usb 3-1: reset high-speed USB device number 31 using dummy_hcd [ 1834.042609][T19296] veth0_vlan: entered promiscuous mode [ 1834.118101][T19296] veth1_vlan: entered promiscuous mode [ 1834.621718][ T5835] usb 3-1: USB disconnect, device number 31 [ 1834.685501][T19296] veth0_macvtap: entered promiscuous mode [ 1834.755726][T19296] veth1_macvtap: entered promiscuous mode [ 1834.881281][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1834.939884][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.054670][T19479] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1835.091836][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1835.126619][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.162627][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1835.192880][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.223881][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1835.243401][T19617] md: loop0 has zero or unknown size, marking faulty! [ 1835.251206][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.282572][T19296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.303535][T19479] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.399867][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.416470][T19479] usb 8-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1835.468363][T19479] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.481575][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.508377][T19479] usb 8-1: Product: syz [ 1835.528195][T19479] usb 8-1: Manufacturer: syz [ 1835.534938][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.574951][T19479] usb 8-1: SerialNumber: syz [ 1835.587710][T19479] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1835.595328][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.645125][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.674090][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.706261][T19296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.734295][T19296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.783818][T19296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.845361][T19296] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.892526][T19296] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.932299][T19296] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.965024][T19296] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.203367][T19479] gspca_mr97310a: reg write [21] error -71 [ 1836.234552][T19479] mr97310a: probe of 8-1:1.0 failed with error -71 [ 1836.290866][T19479] usb 8-1: USB disconnect, device number 21 [ 1836.317178][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.388667][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.572393][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.621821][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.960501][T19674] random: crng reseeded on system resumption [ 1841.917321][T19706] ªªªªªª: renamed from vlan0 (while UP) [ 1844.017081][ T5835] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1844.282496][ T5835] usb 8-1: Using ep0 maxpacket: 8 [ 1844.313478][ T5835] usb 8-1: config 5 has an invalid interface number: 234 but max is 0 [ 1844.365797][ T5835] usb 8-1: config 5 has no interface number 0 [ 1844.416850][ T5835] usb 8-1: config 5 interface 234 has no altsetting 0 [ 1844.467673][ T5835] usb 8-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e [ 1844.517708][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.708728][ T5835] usb 8-1: Product: syz [ 1844.712954][ T5835] usb 8-1: Manufacturer: syz [ 1845.013695][ T5835] usb 8-1: SerialNumber: syz [ 1845.258562][ T5835] ipw 8-1:5.234: IPWireless converter converter detected [ 1845.337839][ T5835] usb 8-1: USB disconnect, device number 22 [ 1845.482579][ T5835] ipw 8-1:5.234: device disconnected [ 1846.828554][T19766] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1847.048006][T19775] FAULT_INJECTION: forcing a failure. [ 1847.048006][T19775] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1847.103102][T19775] CPU: 0 PID: 19775 Comm: syz.7.3892 Not tainted syzkaller #0 [ 1847.110638][T19775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1847.120698][T19775] Call Trace: [ 1847.123983][T19775] [ 1847.126939][T19775] dump_stack_lvl+0x18c/0x250 [ 1847.131655][T19775] ? show_regs_print_info+0x20/0x20 [ 1847.136865][T19775] ? load_image+0x420/0x420 [ 1847.141377][T19775] ? get_user_pages_fast_only+0xa0/0xa0 [ 1847.146955][T19775] ? asan.module_dtor+0x20/0x20 [ 1847.151811][T19775] should_fail_ex+0x394/0x4c0 [ 1847.156501][T19775] get_futex_key+0x16f/0x1030 [ 1847.161221][T19775] ? futex_setup_timer+0xc0/0xc0 [ 1847.166223][T19775] ? futex_wait_queue+0x138/0x1b0 [ 1847.171276][T19775] futex_wake_op+0x1e8/0xd40 [ 1847.175889][T19775] ? futex_wake+0x4f0/0x4f0 [ 1847.180413][T19775] ? file_end_write+0x159/0x250 [ 1847.185294][T19775] ? vfs_write+0x5de/0x9a0 [ 1847.189722][T19775] do_futex+0x385/0x3e0 [ 1847.193886][T19775] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1847.199793][T19775] __se_sys_futex+0x3a9/0x440 [ 1847.204480][T19775] ? __x64_sys_futex+0xf0/0xf0 [ 1847.209256][T19775] ? __x64_sys_futex+0x21/0xf0 [ 1847.214049][T19775] do_syscall_64+0x55/0xb0 [ 1847.218473][T19775] ? clear_bhb_loop+0x40/0x90 [ 1847.223155][T19775] ? clear_bhb_loop+0x40/0x90 [ 1847.227854][T19775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1847.233765][T19775] RIP: 0033:0x7f6e11d9e159 [ 1847.238184][T19775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.257792][T19775] RSP: 002b:00007f6e12c25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1847.266210][T19775] RAX: ffffffffffffffda RBX: 00007f6e12025fa0 RCX: 00007f6e11d9e159 [ 1847.274188][T19775] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc [ 1847.282164][T19775] RBP: 00007f6e11e35024 R08: 0000000000000000 R09: 0000000034fffffd [ 1847.290151][T19775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1847.298135][T19775] R13: 00007f6e12026038 R14: 00007f6e12025fa0 R15: 00007fff29abd318 [ 1847.306120][T19775] [ 1847.479368][ T5818] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1847.697691][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 1847.713800][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1847.748323][ T5818] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1847.775999][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.821559][ T5818] usb 3-1: Product: syz [ 1847.849283][ T5818] usb 3-1: Manufacturer: syz ¼[ 1847.868682][ T5818] usb 3-1: SerialNumber: syz [ 1847.901171][ T5818] usb 3-1: config 0 descriptor?? [ 1849.260062][T13258] Bluetooth: hci2: command 0x1003 tx timeout [ 1849.268009][T17840] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1850.061461][ T5818] usb 3-1: USB disconnect, device number 32 [ 1851.231166][T18463] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1851.437075][T18463] usb 7-1: Using ep0 maxpacket: 16 [ 1851.457858][T18463] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1851.478853][T18463] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1851.525616][T18463] usb 7-1: config 0 has no interface number 0 [ 1851.553024][T18463] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1851.574571][T18463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.610126][T18463] usb 7-1: Product: syz [ 1851.634821][T18463] usb 7-1: Manufacturer: syz [ 1851.653818][T18463] usb 7-1: SerialNumber: syz [ 1851.680715][T18463] usb 7-1: config 0 descriptor?? [ 1851.918855][T18463] usb 7-1: Found UVC 0.00 device syz (046d:08d3) [ 1851.955870][T18463] usb 7-1: No valid video chain found. [ 1852.063151][T19836] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1852.121626][T18463] usb 7-1: USB disconnect, device number 30 [ 1852.357188][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 1854.124422][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.130909][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.186508][T18463] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1855.525938][T18463] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1855.554741][T18463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.610301][T18463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.659880][T18463] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1855.726525][T18463] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1855.786619][T18463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.830622][T18463] usb 3-1: config 0 descriptor?? [ 1856.011133][T18463] usbhid 3-1:0.0: can't add hid device: -71 [ 1856.043042][T18463] usbhid: probe of 3-1:0.0 failed with error -71 [ 1856.093205][T18463] usb 3-1: USB disconnect, device number 33 [ 1856.166736][ T5835] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1857.376948][ T5835] usb 7-1: not running at top speed; connect to a high speed hub [ 1857.432766][ T5835] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1857.473362][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.516785][ T5835] usb 7-1: Product: syz [ 1857.520994][ T5835] usb 7-1: Manufacturer: syz [ 1857.560504][ T5835] usb 7-1: SerialNumber: syz [ 1857.593905][ T5835] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 1857.656831][ T5835] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1857.776804][ T5835] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1857.853900][ T5835] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1857.907428][ T5835] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1858.006763][ T5835] usb 7-1: USB disconnect, device number 31 [ 1858.078937][ T5835] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1858.197153][ T5835] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1858.268697][ T5835] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1858.334594][ T5835] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1858.395838][ T5835] keyspan 7-1:1.0: device disconnected [ 1858.847088][T19874] kernel read not supported for file /file0 (pid: 19874 comm: syz.0.3915) [ 1858.890883][ T28] audit: type=1800 audit(1788151550.982:74): pid=19874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3915" name="file0" dev="mqueue" ino=68952 res=0 errno=0 [ 1865.505696][T19939] FAULT_INJECTION: forcing a failure. [ 1865.505696][T19939] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.576663][T19939] CPU: 0 PID: 19939 Comm: syz.2.3926 Not tainted syzkaller #0 [ 1865.584194][T19939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1865.594282][T19939] Call Trace: [ 1865.597573][T19939] [ 1865.600530][T19939] dump_stack_lvl+0x18c/0x250 [ 1865.605246][T19939] ? show_regs_print_info+0x20/0x20 [ 1865.610460][T19939] ? load_image+0x420/0x420 [ 1865.614975][T19939] ? __might_sleep+0xe0/0xe0 [ 1865.619580][T19939] ? __lock_acquire+0x7d80/0x7d80 [ 1865.624624][T19939] should_fail_ex+0x394/0x4c0 [ 1865.629325][T19939] should_failslab+0x9/0x20 [ 1865.633861][T19939] slab_pre_alloc_hook+0x59/0x300 [ 1865.638898][T19939] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1865.644818][T19939] ? sk_prot_alloc+0xe7/0x210 [ 1865.649534][T19939] ? sk_prot_alloc+0xe7/0x210 [ 1865.654247][T19939] __kmem_cache_alloc_node+0x53/0x250 [ 1865.659642][T19939] ? sk_prot_alloc+0xe7/0x210 [ 1865.664335][T19939] __kmalloc+0xa7/0x240 [ 1865.668506][T19939] sk_prot_alloc+0xe7/0x210 [ 1865.673024][T19939] ? sk_alloc+0x24/0x350 [ 1865.677283][T19939] sk_alloc+0x3a/0x350 [ 1865.681401][T19939] __netlink_create+0x6c/0x290 [ 1865.686176][T19939] netlink_create+0x3ee/0x5c0 [ 1865.690894][T19939] ? genl_rcv+0x40/0x40 [ 1865.695058][T19939] __sock_create+0x49e/0x940 [ 1865.699666][T19939] __sys_socket+0xd7/0x1b0 [ 1865.704092][T19939] __x64_sys_socket+0x7a/0x90 [ 1865.708783][T19939] do_syscall_64+0x55/0xb0 [ 1865.713230][T19939] ? clear_bhb_loop+0x40/0x90 [ 1865.717945][T19939] ? clear_bhb_loop+0x40/0x90 [ 1865.722633][T19939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1865.728532][T19939] RIP: 0033:0x7f7aead9f9c7 [ 1865.732964][T19939] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1865.752582][T19939] RSP: 002b:00007f7aebd30f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1865.761027][T19939] RAX: ffffffffffffffda RBX: 00007f7aeb025fa0 RCX: 00007f7aead9f9c7 [ 1865.769032][T19939] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1865.777040][T19939] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1865.785044][T19939] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 1865.793029][T19939] R13: 00007f7aeb026038 R14: 00007f7aeb025fa0 R15: 00007ffd1770cac8 [ 1865.801041][T19939] [ 1869.627584][T19984] netlink: 'syz.0.3946': attribute type 1 has an invalid length. [ 1869.909868][T19984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1871.826658][ T5818] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1872.026520][ T5818] usb 8-1: Using ep0 maxpacket: 32 [ 1872.047748][ T5818] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1872.116623][ T5818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1872.184183][ T5818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1872.297929][ T5818] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1872.346701][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.395288][ T5818] usb 8-1: Product: syz [ 1872.436617][ T5818] usb 8-1: Manufacturer: syz [ 1872.450267][ T5818] usb 8-1: SerialNumber: syz [ 1872.493680][ T5818] usb 8-1: config 0 descriptor?? [ 1872.543549][T20022] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3955'. [ 1873.843225][ T5835] usb 8-1: USB disconnect, device number 23 [ 1875.602019][T20048] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1875.957078][T20056] binder: BINDER_SET_CONTEXT_MGR already set [ 1875.969807][T20056] binder: 20055:20056 ioctl 4018620d 200000000040 returned -16 [ 1876.883608][ T5835] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1877.096563][ T5835] usb 7-1: Using ep0 maxpacket: 32 [ 1877.122904][ T5835] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1877.165066][ T5835] usb 7-1: config 0 has no interface number 0 [ 1877.203882][ T5835] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1877.248144][ T5835] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1877.283212][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.476596][ T5835] usb 7-1: Product: syz [ 1877.493167][ T5835] usb 7-1: Manufacturer: syz [ 1877.833144][ T5835] usb 7-1: SerialNumber: syz [ 1877.893891][ T5835] usb 7-1: config 0 descriptor?? [ 1877.943327][ T5835] smsc75xx v1.0.0 [ 1879.338948][ T5835] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1879.380893][ T5835] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1879.398732][ T5835] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1879.412559][ T5835] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1879.432835][ T5835] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1879.471572][ T5835] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1879.496180][ T5835] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 1879.532205][ T5835] usb 7-1: USB disconnect, device number 32 [ 1879.777256][T20099] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1880.029902][T20104] bond1: Unable to set up delay as MII monitoring is disabled [ 1880.090831][T20104] bond1 (unregistering): Released all slaves [ 1880.245390][T20111] netlink: 'syz.0.3988': attribute type 1 has an invalid length. [ 1880.270608][T20111] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3988'. [ 1880.426484][T19631] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1880.646132][T19631] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 1880.701731][T19631] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1880.756612][T19631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.946551][T19631] usb 7-1: Product: syz [ 1881.950820][T19631] usb 7-1: Manufacturer: syz [ 1882.235103][T20124] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3992'. [ 1882.706709][T19631] usb 7-1: SerialNumber: syz [ 1882.738721][T19631] usb 7-1: config 0 descriptor?? [ 1882.900287][T19631] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 1883.029670][T18554] udevd[18554]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1885.200141][T19631] usb 7-1: USB disconnect, device number 33 [ 1887.986552][T19631] IPVS: starting estimator thread 0... [ 1888.196529][T20172] IPVS: using max 29 ests per chain, 69600 per kthread [ 1891.895439][T20209] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1893.426664][T19631] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1893.655229][T19631] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.720179][T19631] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1893.746586][T19631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.781980][T19631] usb 7-1: Product: syz [ 1893.816760][T19631] usb 7-1: Manufacturer: syz [ 1893.834747][T19631] usb 7-1: SerialNumber: syz [ 1894.078747][T19631] snd-usb-6fire 7-1:1.0: unable to receive device firmware state. [ 1894.109724][T19631] snd-usb-6fire: probe of 7-1:1.0 failed with error -121 [ 1895.585384][T19479] usb 7-1: USB disconnect, device number 34 [ 1897.346172][T20258] tipc: Enabling of bearer rejected, failed to enable media [ 1898.718420][T20271] fuse: Unknown parameter 'fd0x00000000000000050000000000000000000000000000000000000000' [ 1900.373680][T20296] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 1900.430270][T20302] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: | [ 1900.641870][T20306] FAULT_INJECTION: forcing a failure. [ 1900.641870][T20306] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1900.719932][T20306] CPU: 0 PID: 20306 Comm: syz.6.4051 Not tainted syzkaller #0 [ 1900.727452][T20306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1900.737513][T20306] Call Trace: [ 1900.740815][T20306] [ 1900.743757][T20306] dump_stack_lvl+0x18c/0x250 [ 1900.748442][T20306] ? show_regs_print_info+0x20/0x20 [ 1900.753657][T20306] ? load_image+0x420/0x420 [ 1900.758175][T20306] ? get_user_pages_fast_only+0xa0/0xa0 [ 1900.763736][T20306] ? asan.module_dtor+0x20/0x20 [ 1900.768599][T20306] should_fail_ex+0x394/0x4c0 [ 1900.773306][T20306] get_futex_key+0x16f/0x1030 [ 1900.778003][T20306] ? futex_setup_timer+0xc0/0xc0 [ 1900.782942][T20306] ? futex_wait_queue+0x138/0x1b0 [ 1900.787990][T20306] futex_wake_op+0x1e8/0xd40 [ 1900.792866][T20306] ? futex_setup_timer+0xc0/0xc0 [ 1900.797823][T20306] ? futex_wake+0x4f0/0x4f0 [ 1900.802338][T20306] ? file_end_write+0x159/0x250 [ 1900.807208][T20306] ? vfs_write+0x5de/0x9a0 [ 1900.811650][T20306] do_futex+0x385/0x3e0 [ 1900.815809][T20306] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1900.821712][T20306] __se_sys_futex+0x3a9/0x440 [ 1900.826395][T20306] ? __x64_sys_futex+0xf0/0xf0 [ 1900.831160][T20306] ? __x64_sys_futex+0x21/0xf0 [ 1900.836109][T20306] do_syscall_64+0x55/0xb0 [ 1900.840528][T20306] ? clear_bhb_loop+0x40/0x90 [ 1900.845207][T20306] ? clear_bhb_loop+0x40/0x90 [ 1900.849909][T20306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1900.855812][T20306] RIP: 0033:0x7fa81279e159 [ 1900.860227][T20306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1900.879838][T20306] RSP: 002b:00007fa813702028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1900.888260][T20306] RAX: ffffffffffffffda RBX: 00007fa812a25fa0 RCX: 00007fa81279e159 [ 1900.896240][T20306] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc [ 1900.904218][T20306] RBP: 00007fa812835024 R08: 0000000000000000 R09: 0000000034fffffd [ 1900.912198][T20306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1900.920170][T20306] R13: 00007fa812a26038 R14: 00007fa812a25fa0 R15: 00007ffe53edd2d8 [ 1900.928167][T20306] [ 1903.398543][T20319] random: crng reseeded on system resumption [ 1906.206680][T19479] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1906.420773][T19479] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1906.477248][T19479] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1906.531056][T19479] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.563570][T19479] usb 7-1: Product: syz [ 1906.581095][T19479] usb 7-1: Manufacturer: syz [ 1906.602442][T19479] usb 7-1: SerialNumber: syz [ 1906.639685][T19479] usb 7-1: config 0 descriptor?? [ 1906.678765][T19479] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1906.899474][T19479] usb 7-1: USB disconnect, device number 35 [ 1907.145438][T20396] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4082'. [ 1910.383740][T13258] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1910.394861][T13258] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1910.405347][T13258] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1910.413483][T13258] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1910.422064][T13258] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1910.429746][T13258] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1911.367315][T20448] chnl_net:caif_netlink_parms(): no params data found [ 1911.845640][T20448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.927743][T20448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.935057][T20448] bridge_slave_0: entered allmulticast mode [ 1912.042322][T20448] bridge_slave_0: entered promiscuous mode [ 1912.114575][T20448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.160027][T20448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.203648][T20448] bridge_slave_1: entered allmulticast mode [ 1912.255272][T20448] bridge_slave_1: entered promiscuous mode [ 1912.476610][T13258] Bluetooth: hci2: command tx timeout [ 1912.802146][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.060176][T20448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1913.135544][T20448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1913.371789][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.710591][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.732771][T20509] binder: BINDER_SET_CONTEXT_MGR already set [ 1913.755736][T20509] binder: 20508:20509 ioctl 4018620d 200000000040 returned -16 [ 1913.814414][T20448] team0: Port device team_slave_0 added [ 1913.975147][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.053959][T20448] team0: Port device team_slave_1 added [ 1914.583898][T13258] Bluetooth: hci2: command tx timeout [ 1914.682563][T20448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1914.746773][T20448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1914.870741][T20448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1915.042251][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.048847][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.083532][T20448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1915.121030][T20448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1915.223535][T20535] binder: BINDER_SET_CONTEXT_MGR already set [ 1915.242617][T20448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1915.257815][T20535] binder: 20534:20535 ioctl 4018620d 200000000040 returned -16 [ 1915.680160][T20448] hsr_slave_0: entered promiscuous mode [ 1915.741367][T20448] hsr_slave_1: entered promiscuous mode [ 1915.786598][T20448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1915.826286][T20448] Cannot create hsr debugfs directory [ 1916.028170][ T28] audit: type=1800 audit(1788151608.122:75): pid=20552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4139" name="(" dev="sda1" ino=2056 res=0 errno=0 [ 1916.353516][T20559] binder: BINDER_SET_CONTEXT_MGR already set [ 1916.390818][T20559] binder: 20557:20559 ioctl 4018620d 200000000040 returned -16 [ 1916.637785][T13258] Bluetooth: hci2: command tx timeout [ 1916.968963][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4148'. [ 1917.466056][T20578] sg_write: data in/out 432480/136 bytes for SCSI command 0x0-- guessing data in; [ 1917.466056][T20578] program syz.6.4147 not setting count and/or reply_len properly [ 1918.716971][T13258] Bluetooth: hci2: command tx timeout [ 1919.039933][T20617] FAULT_INJECTION: forcing a failure. [ 1919.039933][T20617] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1919.135896][T20617] CPU: 0 PID: 20617 Comm: syz.0.4162 Not tainted syzkaller #0 [ 1919.143407][T20617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1919.153470][T20617] Call Trace: [ 1919.156761][T20617] [ 1919.159700][T20617] dump_stack_lvl+0x18c/0x250 [ 1919.164404][T20617] ? show_regs_print_info+0x20/0x20 [ 1919.169615][T20617] ? load_image+0x420/0x420 [ 1919.174128][T20617] ? get_futex_key+0x88b/0x1030 [ 1919.178995][T20617] should_fail_ex+0x394/0x4c0 [ 1919.183687][T20617] get_futex_key+0x136/0x1030 [ 1919.188396][T20617] ? futex_wake_op+0xd17/0xd40 [ 1919.193173][T20617] ? futex_setup_timer+0xc0/0xc0 [ 1919.198124][T20617] futex_wake+0x127/0x4f0 [ 1919.202488][T20617] ? futex_wake_mark+0x150/0x150 [ 1919.207441][T20617] ? __lock_acquire+0x7d80/0x7d80 [ 1919.212475][T20617] ? file_end_write+0x159/0x250 [ 1919.217359][T20617] ? vfs_write+0x5de/0x9a0 [ 1919.221792][T20617] do_futex+0x35d/0x3e0 [ 1919.225960][T20617] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1919.231871][T20617] __se_sys_futex+0x3a9/0x440 [ 1919.236574][T20617] ? __x64_sys_futex+0xf0/0xf0 [ 1919.241367][T20617] ? __x64_sys_futex+0x21/0xf0 [ 1919.246139][T20617] do_syscall_64+0x55/0xb0 [ 1919.250569][T20617] ? clear_bhb_loop+0x40/0x90 [ 1919.255254][T20617] ? clear_bhb_loop+0x40/0x90 [ 1919.259944][T20617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1919.265850][T20617] RIP: 0033:0x7fdd0479e159 [ 1919.270275][T20617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1919.289905][T20617] RSP: 002b:00007fdd055c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1919.298327][T20617] RAX: ffffffffffffffda RBX: 00007fdd04a25fa8 RCX: 00007fdd0479e159 [ 1919.306308][T20617] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdd04a25fac [ 1919.314284][T20617] RBP: 00007fdd04a25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1919.322260][T20617] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1919.330242][T20617] R13: 00007fdd04a26038 R14: 00007fff272c4540 R15: 00007fff272c4628 [ 1919.338237][T20617] [ 1919.656309][T20629] binder: BINDER_SET_CONTEXT_MGR already set [ 1919.666454][T20629] binder: 20626:20629 ioctl 4018620d 200000000040 returned -16 [ 1920.682321][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1920.716212][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1920.785894][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1920.808523][T19631] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1920.860707][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1920.909296][ T12] bridge_slave_1: left allmulticast mode [ 1920.914987][ T12] bridge_slave_1: left promiscuous mode [ 1920.969513][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.012947][ T12] bridge_slave_0: left allmulticast mode [ 1921.031612][T19631] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 1921.041195][ T12] bridge_slave_0: left promiscuous mode [ 1921.061430][T19631] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1921.078789][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.147721][T19631] usb 7-1: config 4 has no interface number 0 [ 1921.182643][T19631] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1921.250559][ T12] veth1_macvtap: left promiscuous mode [ 1921.273294][T19631] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1921.286974][ T12] veth0_macvtap: left promiscuous mode [ 1921.303170][T19631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.319217][ T12] veth1_vlan: left promiscuous mode [ 1921.350468][ T12] veth0_vlan: left promiscuous mode [ 1921.366196][T19631] usb 7-1: Product: syz [ 1921.374842][T19631] usb 7-1: Manufacturer: syz [ 1921.399975][T19631] usb 7-1: SerialNumber: syz [ 1921.651145][T19631] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 1921.881955][T19631] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1921.946138][T19631] dib0700: firmware download failed at 7 with -22 [ 1922.013178][T19631] usb 7-1: USB disconnect, device number 36 [ 1923.786878][ T5818] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1923.931529][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1924.005859][ T5818] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.021119][ T5818] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1924.063171][ T5818] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1924.082270][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.103896][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1924.120899][ T5818] usb 7-1: Product: syz [ 1924.125213][ T5818] usb 7-1: Manufacturer: syz [ 1924.146030][ T5818] usb 7-1: SerialNumber: syz [ 1924.224674][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1924.315176][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1924.384019][ T5818] usb 7-1: 0:2 : does not exist [ 1924.416323][ T5818] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1924.484327][ T5818] usb 7-1: USB disconnect, device number 37 [ 1924.554131][T18554] udevd[18554]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1925.259607][ T12] bond0 (unregistering): Released all slaves [ 1927.392577][T20448] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1927.471020][T20448] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1927.551901][T20448] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1927.617176][T20448] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1927.755460][ T12] IPVS: stop unused estimator thread 0... [ 1928.153174][T20448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1928.259738][T20448] 8021q: adding VLAN 0 to HW filter on device team0 [ 1928.384110][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1928.391330][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1928.538973][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.546204][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1929.788040][T20448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1931.488526][T20448] veth0_vlan: entered promiscuous mode [ 1931.577143][T20448] veth1_vlan: entered promiscuous mode [ 1931.793083][T20448] veth0_macvtap: entered promiscuous mode [ 1931.868252][T20448] veth1_macvtap: entered promiscuous mode [ 1932.004236][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1932.076940][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1932.166510][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1932.239584][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1932.309961][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1932.386458][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1932.456544][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1932.480312][T17840] Bluetooth: hci1: command 0x0406 tx timeout [ 1932.537552][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1932.612261][T20448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1932.713685][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1932.819881][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1932.875075][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1932.948713][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1933.018389][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1933.089902][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1933.162153][T20448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1933.227234][T20448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1933.312704][T20448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1933.416695][T20448] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.461020][T20448] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.526431][T20448] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.535161][T20448] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1933.915539][T20808] netlink: 'syz.6.4215': attribute type 29 has an invalid length. [ 1933.991807][T20808] netlink: 'syz.6.4215': attribute type 29 has an invalid length. [ 1934.051255][T20811] netlink: 'syz.6.4215': attribute type 29 has an invalid length. [ 1934.118282][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1934.147322][T20808] netlink: 'syz.6.4215': attribute type 29 has an invalid length. [ 1934.180471][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1934.197499][T20811] netlink: 'syz.6.4215': attribute type 29 has an invalid length. [ 1934.315068][T11342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1934.388317][T11342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1938.217620][T20902] binder: BINDER_SET_CONTEXT_MGR already set [ 1938.224698][T20902] binder: 20901:20902 ioctl 4018620d 200000000040 returned -16 [ 1939.383510][T20933] binder: BINDER_SET_CONTEXT_MGR already set [ 1939.409251][T20933] binder: 20932:20933 ioctl 4018620d 200000000040 returned -16 [ 1941.308132][T20976] fuse: Bad value for 'fd' [ 1943.387326][T21005] fuse: Bad value for 'fd' [ 1944.752289][T21016] binder: 21015:21016 ioctl c0306201 0 returned -14 [ 1946.496939][T21031] fuse: Bad value for 'fd' [ 1975.956443][T19479] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1976.306381][T19479] usb 7-1: Using ep0 maxpacket: 8 [ 1976.396830][T19479] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1976.432942][T19479] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1976.493066][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.499595][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.519803][T19479] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1976.570691][T19479] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1976.646564][T19479] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1976.736499][T19479] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1976.786577][T19479] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.952893][T21284] FAULT_INJECTION: forcing a failure. [ 1976.952893][T21284] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.387845][T21284] CPU: 0 PID: 21284 Comm: syz.2.4366 Not tainted syzkaller #0 [ 1977.395372][T21284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1977.405435][T21284] Call Trace: [ 1977.408720][T21284] [ 1977.411653][T21284] dump_stack_lvl+0x18c/0x250 [ 1977.416340][T21284] ? show_regs_print_info+0x20/0x20 [ 1977.421552][T21284] ? load_image+0x420/0x420 [ 1977.426131][T21284] ? __might_sleep+0xe0/0xe0 [ 1977.430751][T21284] ? __lock_acquire+0x7d80/0x7d80 [ 1977.435801][T21284] should_fail_ex+0x394/0x4c0 [ 1977.440502][T21284] should_failslab+0x9/0x20 [ 1977.445025][T21284] slab_pre_alloc_hook+0x59/0x300 [ 1977.450094][T21284] ? __request_module+0x2ed/0x600 [ 1977.455131][T21284] ? __request_module+0x2ed/0x600 [ 1977.460172][T21284] __kmem_cache_alloc_node+0x53/0x250 [ 1977.465599][T21284] ? __request_module+0x2ed/0x600 [ 1977.470642][T21284] __kmalloc_node_track_caller+0xa4/0x230 [ 1977.476395][T21284] kstrdup+0x3b/0x80 [ 1977.480308][T21284] __request_module+0x2ed/0x600 [ 1977.485181][T21284] ? module_enforce_rwx_sections+0x150/0x150 [ 1977.491169][T21284] ? __up_read+0x2b8/0x6b0 [ 1977.495611][T21284] ? up_read+0x20/0x20 [ 1977.499692][T21284] ? __asan_memset+0x22/0x40 [ 1977.504306][T21284] crypto_alg_mod_lookup+0xde/0x570 [ 1977.509519][T21284] crypto_has_alg+0x24/0x110 [ 1977.514128][T21284] xfrm_aead_get_byname+0x39d/0x420 [ 1977.519342][T21284] xfrm_add_sa+0x13c3/0x2ce0 [ 1977.523970][T21284] ? xfrm_user_rcv_msg+0x9b0/0x9b0 [ 1977.529112][T21284] ? __nla_parse+0x40/0x50 [ 1977.533544][T21284] xfrm_user_rcv_msg+0x6b8/0x9b0 [ 1977.538498][T21284] ? xfrm_netlink_rcv+0x90/0x90 [ 1977.543358][T21284] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1977.548763][T21284] ? __mutex_trylock_common+0x160/0x270 [ 1977.554336][T21284] netlink_rcv_skb+0x235/0x4c0 [ 1977.559133][T21284] ? xfrm_netlink_rcv+0x90/0x90 [ 1977.563996][T21284] ? netlink_ack+0x1160/0x1160 [ 1977.568782][T21284] ? netlink_deliver_tap+0x2e/0x1b0 [ 1977.574020][T21284] ? __lock_acquire+0x7d80/0x7d80 [ 1977.579062][T21284] xfrm_netlink_rcv+0x79/0x90 [ 1977.583753][T21284] netlink_unicast+0x7b1/0x930 [ 1977.588530][T21284] netlink_sendmsg+0x8d0/0xbf0 [ 1977.593321][T21284] ? netlink_getsockopt+0x590/0x590 [ 1977.598532][T21284] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1977.604082][T21284] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1977.609378][T21284] ? security_socket_sendmsg+0x80/0xa0 [ 1977.614840][T21284] ? netlink_getsockopt+0x590/0x590 [ 1977.620071][T21284] ____sys_sendmsg+0x61b/0x980 [ 1977.624852][T21284] ? __asan_memset+0x22/0x40 [ 1977.629457][T21284] ? __sys_sendmsg_sock+0x30/0x30 [ 1977.634489][T21284] ? __import_iovec+0x5f2/0x850 [ 1977.639365][T21284] ? import_iovec+0x73/0xa0 [ 1977.644005][T21284] ___sys_sendmsg+0x2a6/0x360 [ 1977.648712][T21284] ? __sys_sendmsg+0x2b0/0x2b0 [ 1977.653529][T21284] __se_sys_sendmsg+0x1d0/0x2c0 [ 1977.658419][T21284] ? __x64_sys_sendmsg+0x80/0x80 [ 1977.663389][T21284] ? lockdep_hardirqs_on+0x98/0x150 [ 1977.668609][T21284] do_syscall_64+0x55/0xb0 [ 1977.673044][T21284] ? clear_bhb_loop+0x40/0x90 [ 1977.677732][T21284] ? clear_bhb_loop+0x40/0x90 [ 1977.682442][T21284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1977.688348][T21284] RIP: 0033:0x7f7aead9e159 [ 1977.692776][T21284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1977.712478][T21284] RSP: 002b:00007f7aebd32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1977.720901][T21284] RAX: ffffffffffffffda RBX: 00007f7aeb025fa0 RCX: 00007f7aead9e159 [ 1977.728890][T21284] RDX: 0000000004000804 RSI: 0000200000000100 RDI: 0000000000000004 [ 1977.736954][T21284] RBP: 00007f7aeae35024 R08: 0000000000000000 R09: 0000000000000000 [ 1977.744950][T21284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1977.752946][T21284] R13: 00007f7aeb026038 R14: 00007f7aeb025fa0 R15: 00007ffd1770cac8 [ 1977.760943][T21284] [ 1978.038356][T19479] usb 7-1: usb_control_msg returned -71 [ 1978.043977][T19479] usbtmc 7-1:16.0: can't read capabilities [ 1978.237114][T21292] input: syz1 as /devices/virtual/input/input15 [ 1978.286526][T19479] usb 7-1: USB disconnect, device number 38 [ 1979.794142][T21300] loop6: detected capacity change from 0 to 32768 [ 1979.844636][T21300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.4369 (21300) [ 1979.909754][T21300] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1979.920683][T21300] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1979.929531][T21300] BTRFS info (device loop6): use zlib compression, level 3 [ 1979.936971][T21300] BTRFS info (device loop6): turning on sync discard [ 1979.943678][T21300] BTRFS info (device loop6): using free space tree [ 1980.108720][T21300] BTRFS info (device loop6): enabling ssd optimizations [ 1980.740298][T21300] syz.6.4369 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1980.750601][T21300] CPU: 0 PID: 21300 Comm: syz.6.4369 Not tainted syzkaller #0 [ 1980.758078][T21300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1980.768142][T21300] Call Trace: [ 1980.771455][T21300] [ 1980.774409][T21300] dump_stack_lvl+0x18c/0x250 [ 1980.779104][T21300] ? show_regs_print_info+0x20/0x20 [ 1980.784309][T21300] ? load_image+0x420/0x420 [ 1980.788823][T21300] ? ___ratelimit+0x478/0x610 [ 1980.793512][T21300] ? radix_tree_cpu_dead+0x160/0x160 [ 1980.798819][T21300] dump_header+0xd8/0x820 [ 1980.803163][T21300] oom_kill_process+0x390/0x580 [ 1980.808055][T21300] out_of_memory+0xe0e/0x1200 [ 1980.812753][T21300] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1980.818406][T21300] ? mutex_lock_nested+0x20/0x20 [ 1980.823404][T21300] ? unregister_oom_notifier+0x20/0x20 [ 1980.828931][T21300] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1980.834524][T21300] ? try_charge_memcg+0xc91/0x17c0 [ 1980.839646][T21300] ? drain_local_stock+0x630/0x630 [ 1980.844776][T21300] ? do_raw_spin_unlock+0x121/0x230 [ 1980.849991][T21300] try_charge_memcg+0xca1/0x17c0 [ 1980.854957][T21300] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1980.860788][T21300] ? folio_flags+0x120/0x120 [ 1980.865393][T21300] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1980.870539][T21300] ? percpu_ref_tryget+0x15/0x180 [ 1980.875574][T21300] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1980.881080][T21300] charge_memcg+0x11b/0x3b0 [ 1980.885592][T21300] ? __mem_cgroup_charge+0x80/0x80 [ 1980.890725][T21300] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1980.896207][T21300] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1980.901688][T21300] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1980.907255][T21300] __mem_cgroup_charge+0x25/0x80 [ 1980.912199][T21300] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1980.917749][T21300] ? xas_load+0x12b/0x140 [ 1980.922102][T21300] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1980.927231][T21300] shmem_get_folio_gfp+0x1037/0x2b40 [ 1980.932542][T21300] shmem_fault+0x1b8/0x820 [ 1980.936992][T21300] ? zero_pipe_buf_get+0x10/0x10 [ 1980.941952][T21300] ? handle_mm_fault+0xe6/0x4a50 [ 1980.946893][T21300] ? __lock_acquire+0x7d80/0x7d80 [ 1980.951933][T21300] __do_fault+0x13b/0x4d0 [ 1980.956269][T21300] ? handle_mm_fault+0x3929/0x4a50 [ 1980.961387][T21300] ? handle_mm_fault+0xe6/0x4a50 [ 1980.966331][T21300] handle_mm_fault+0x3945/0x4a50 [ 1980.971284][T21300] ? handle_mm_fault+0xe6/0x4a50 [ 1980.976234][T21300] ? numa_migrate_prep+0x350/0x350 [ 1980.981365][T21300] ? follow_page_pte+0x6dd/0x1ae0 [ 1980.986410][T21300] ? pmd_lock+0x60/0x60 [ 1980.990594][T21300] __get_user_pages+0x604/0x1580 [ 1980.995562][T21300] ? populate_vma_page_range+0x380/0x380 [ 1981.001227][T21300] populate_vma_page_range+0x2c1/0x380 [ 1981.006697][T21300] ? fixup_user_fault+0x750/0x750 [ 1981.011726][T21300] ? down_read+0x1ac/0x2e0 [ 1981.016152][T21300] __mm_populate+0x260/0x390 [ 1981.020756][T21300] ? faultin_page_range+0x8a0/0x8a0 [ 1981.025969][T21300] ? up_write+0x1be/0x410 [ 1981.030309][T21300] vm_mmap_pgoff+0x2da/0x3f0 [ 1981.034909][T21300] ? account_locked_vm+0x200/0x200 [ 1981.040048][T21300] ? ksys_mmap_pgoff+0xf3/0x720 [ 1981.044921][T21300] ? __x64_sys_mmap+0x7a/0x130 [ 1981.049704][T21300] do_syscall_64+0x55/0xb0 [ 1981.054132][T21300] ? clear_bhb_loop+0x40/0x90 [ 1981.058834][T21300] ? clear_bhb_loop+0x40/0x90 [ 1981.063540][T21300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1981.069460][T21300] RIP: 0033:0x7fa81279e159 [ 1981.073902][T21300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1981.093517][T21300] RSP: 002b:00007fa813702028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1981.101941][T21300] RAX: ffffffffffffffda RBX: 00007fa812a25fa0 RCX: 00007fa81279e159 [ 1981.109921][T21300] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1981.117900][T21300] RBP: 00007fa812835024 R08: ffffffffffffffff R09: 0000000000000000 [ 1981.125897][T21300] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1981.133894][T21300] R13: 00007fa812a26038 R14: 00007fa812a25fa0 R15: 00007ffe53edd2d8 [ 1981.141899][T21300] [ 1981.147043][T21300] memory: usage 307200kB, limit 307200kB, failcnt 10204 [ 1981.154049][T21300] memory+swap: usage 366100kB, limit 9007199254740988kB, failcnt 0 [ 1981.162285][T21300] kmem: usage 3120kB, limit 9007199254740988kB, failcnt 0 [ 1981.169461][T21300] Memory cgroup stats for /syz6: [ 1981.170156][T21300] cache 309833728 [ 1981.178814][T21300] rss 1527808 [ 1981.182136][T21300] rss_huge 0 [ 1981.185345][T21300] shmem 309796864 [ 1981.189063][T21300] mapped_file 46747648 [ 1981.193145][T21300] dirty 0 [ 1981.196097][T21300] writeback 0 [ 1981.200091][T21300] workingset_refault_anon 6 [ 1981.204626][T21300] workingset_refault_file 1 [ 1981.209179][T21300] swap 60313600 [ 1981.212658][T21300] pgpgin 945829 [ 1981.216117][T21300] pgpgout 869809 [ 1981.220171][T21300] pgfault 445745 [ 1981.223737][T21300] pgmajfault 10 [ 1981.227233][T21300] inactive_anon 120279040 [ 1981.231567][T21300] active_anon 190328832 [ 1981.237089][T21300] inactive_file 36864 [ 1981.241073][T21300] active_file 0 [ 1981.244551][T21300] unevictable 0 [ 1981.248190][T21300] hierarchical_memory_limit 314572800 [ 1981.253578][T21300] hierarchical_memsw_limit 9223372036854771712 [ 1981.259787][T21300] total_cache 309833728 [ 1981.263965][T21300] total_rss 1527808 [ 1981.267843][T21300] total_rss_huge 0 [ 1981.271566][T21300] total_shmem 309796864 [ 1981.275719][T21300] total_mapped_file 46747648 [ 1981.280604][T21300] total_dirty 0 [ 1981.284072][T21300] total_writeback 0 [ 1981.287905][T21300] total_workingset_refault_anon 6 [ 1981.292926][T21300] total_workingset_refault_file 1 [ 1981.297992][T21300] total_swap 60313600 [ 1981.301977][T21300] total_pgpgin 945829 [ 1981.306035][T21300] total_pgpgout 869809 [ 1981.310193][T21300] total_pgfault 445745 [ 1981.314281][T21300] total_pgmajfault 10 [ 1981.318336][T21300] total_inactive_anon 120279040 [ 1981.323191][T21300] total_active_anon 190328832 [ 1981.327913][T21300] total_inactive_file 36864 [ 1981.332420][T21300] total_active_file 0 [ 1981.337779][T21300] total_unevictable 0 [ 1981.341772][T21300] anon_cost 0 [ 1981.345056][T21300] file_cost 0 [ 1981.348399][T21300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4274,pid=20987,uid=0 [ 1981.364476][T21300] Memory cgroup out of memory: Killed process 20987 (syz.6.4274) total-vm:200684kB, anon-rss:1524kB, file-rss:20608kB, shmem-rss:45440kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1984.298303][ T30] oom_reaper: reaped process 20987 (syz.6.4274), now anon-rss:24kB, file-rss:20480kB, shmem-rss:45440kB [ 1986.293426][T21227] syz.7.4348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1986.640620][T19296] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1986.652023][T21227] CPU: 0 PID: 21227 Comm: syz.7.4348 Not tainted syzkaller #0 [ 1986.659512][T21227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1986.669584][T21227] Call Trace: [ 1986.672866][T21227] [ 1986.675801][T21227] dump_stack_lvl+0x18c/0x250 [ 1986.680489][T21227] ? show_regs_print_info+0x20/0x20 [ 1986.685696][T21227] ? load_image+0x420/0x420 [ 1986.690203][T21227] ? ___ratelimit+0x478/0x610 [ 1986.694895][T21227] ? radix_tree_cpu_dead+0x160/0x160 [ 1986.700216][T21227] dump_header+0xd8/0x820 [ 1986.704585][T21227] oom_kill_process+0x390/0x580 [ 1986.709555][T21227] out_of_memory+0xe0e/0x1200 [ 1986.714284][T21227] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1986.719935][T21227] ? mutex_lock_nested+0x20/0x20 [ 1986.725006][T21227] ? unregister_oom_notifier+0x20/0x20 [ 1986.730483][T21227] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1986.736061][T21227] ? try_charge_memcg+0xc91/0x17c0 [ 1986.741205][T21227] ? drain_local_stock+0x630/0x630 [ 1986.746347][T21227] ? do_raw_spin_unlock+0x121/0x230 [ 1986.751583][T21227] try_charge_memcg+0xca1/0x17c0 [ 1986.756544][T21227] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1986.762368][T21227] ? folio_flags+0x120/0x120 [ 1986.766974][T21227] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1986.772104][T21227] ? percpu_ref_tryget+0x15/0x180 [ 1986.777138][T21227] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1986.782604][T21227] charge_memcg+0x11b/0x3b0 [ 1986.787134][T21227] ? __mem_cgroup_charge+0x80/0x80 [ 1986.792252][T21227] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1986.797720][T21227] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1986.803188][T21227] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1986.808747][T21227] __mem_cgroup_charge+0x25/0x80 [ 1986.813699][T21227] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1986.819253][T21227] ? xas_load+0x12b/0x140 [ 1986.823609][T21227] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1986.828734][T21227] ? mark_lock+0x94/0x320 [ 1986.833071][T21227] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1986.839057][T21227] ? __lock_acquire+0x7d80/0x7d80 [ 1986.844090][T21227] ? lock_chain_count+0x20/0x20 [ 1986.848955][T21227] shmem_get_folio_gfp+0x1037/0x2b40 [ 1986.854266][T21227] shmem_write_begin+0xf2/0x430 [ 1986.859129][T21227] generic_perform_write+0x2fe/0x5c0 [ 1986.864437][T21227] ? generic_file_direct_write+0x3e0/0x3e0 [ 1986.870257][T21227] ? file_update_time+0x192/0x1a0 [ 1986.875294][T21227] shmem_file_write_iter+0xfb/0x120 [ 1986.880500][T21227] __kernel_write_iter+0x29f/0x6d0 [ 1986.885629][T21227] ? vfs_read+0x990/0x990 [ 1986.889971][T21227] ? get_dump_page+0x156/0x200 [ 1986.894749][T21227] ? __asan_memset+0x22/0x40 [ 1986.899351][T21227] ? iov_iter_bvec+0xd4/0x1b0 [ 1986.904044][T21227] dump_user_range+0x418/0x840 [ 1986.908834][T21227] ? dump_skip+0x40/0x40 [ 1986.913105][T21227] ? dump_emit+0x78/0xe0 [ 1986.917366][T21227] ? dump_emit+0xa6/0xe0 [ 1986.921616][T21227] ? elf_core_dump+0x2dbb/0x37c0 [ 1986.926572][T21227] elf_core_dump+0x320e/0x37c0 [ 1986.931366][T21227] ? load_elf_binary+0x2850/0x2850 [ 1986.936526][T21227] ? verify_lock_unused+0x140/0x140 [ 1986.941738][T21227] ? __lock_acquire+0x7d80/0x7d80 [ 1986.946775][T21227] ? mas_next_slot+0x94c/0x980 [ 1986.951578][T21227] ? rcu_read_lock_any_held+0xb4/0x140 [ 1986.957043][T21227] ? 0xffffffffff600000 [ 1986.961209][T21227] do_coredump+0x1791/0x24a0 [ 1986.965823][T21227] ? nfs_stat_to_errno+0x170/0x170 [ 1986.970966][T21227] ? lock_chain_count+0x20/0x20 [ 1986.975828][T21227] ? _raw_spin_unlock_irq+0x23/0x50 [ 1986.981031][T21227] ? lockdep_hardirqs_on+0x98/0x150 [ 1986.986265][T21227] get_signal+0x10da/0x1390 [ 1986.990895][T21227] arch_do_signal_or_restart+0xc2/0x7b0 [ 1986.996464][T21227] ? get_sigframe_size+0x20/0x20 [ 1987.001423][T21227] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1987.007429][T21227] ? exit_to_user_mode_loop+0x3b/0x110 [ 1987.012913][T21227] exit_to_user_mode_loop+0x70/0x110 [ 1987.018216][T21227] exit_to_user_mode_prepare+0xee/0x180 [ 1987.023796][T21227] irqentry_exit_to_user_mode+0x9/0x30 [ 1987.029268][T21227] exc_page_fault+0x8c/0x100 [ 1987.033868][T21227] asm_exc_page_fault+0x26/0x30 [ 1987.038741][T21227] RIP: 0033:0x7fd8d3253bd7 [ 1987.043163][T21227] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1987.062960][T21227] RSP: 002b:00007fd8d42c4120 EFLAGS: 00010202 [ 1987.069042][T21227] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd8d339e159 [ 1987.077020][T21227] RDX: 00007fd8d42c4140 RSI: 00007fd8d42c4270 RDI: 000000000000000b [ 1987.084995][T21227] RBP: 00007fd8d3435024 R08: 0000000000000000 R09: 0000000000000000 [ 1987.092971][T21227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1987.100947][T21227] R13: 00007fd8d3626038 R14: 00007fd8d3625fa0 R15: 00007fff24c9fc98 [ 1987.108943][T21227] [ 1988.242579][T21319] loop0: detected capacity change from 0 to 512 [ 1988.712155][T21319] EXT4-fs: Ignoring removed i_version option [ 1988.802621][T21319] ext4: Bad value for 'journal_ioprio' [ 1988.867216][T21227] memory: usage 307188kB, limit 307200kB, failcnt 5803 [ 1988.874139][T21227] memory+swap: usage 350804kB, limit 9007199254740988kB, failcnt 0 [ 1988.959139][T21227] kmem: usage 3152kB, limit 9007199254740988kB, failcnt 0 [ 1988.990583][T21227] Memory cgroup stats for /syz7: [ 1988.990950][T21227] cache 309538816 [ 1989.030955][T21227] rss 1794048 [ 1989.034381][T21227] rss_huge 0 [ 1989.067461][T21227] shmem 309538816 [ 1989.071142][T21227] mapped_file 57688064 [ 1989.075218][T21227] dirty 0 [ 1989.136468][T21227] writeback 0 [ 1989.139823][T21227] workingset_refault_anon 155 [ 1989.144542][T21227] workingset_refault_file 0 [ 1989.194270][T21227] swap 44662784 [ 1989.220842][T21227] pgpgin 744585 [ 1989.224353][T21227] pgpgout 669087 [ 1989.315234][T21227] pgfault 287083 [ 1989.341414][T21227] pgmajfault 125 [ 1989.345081][T21227] inactive_anon 184668160 [ 1989.408044][T21227] active_anon 126664704 [ 1989.412272][T21227] inactive_file 0 [ 1989.415911][T21227] active_file 0 [ 1989.452223][T21319] loop0: detected capacity change from 0 to 512 [ 1989.476761][T21227] unevictable 0 [ 1989.480266][T21227] hierarchical_memory_limit 314572800 [ 1989.485655][T21227] hierarchical_memsw_limit 9223372036854771712 [ 1989.557312][T21227] total_cache 309538816 [ 1989.561508][T21227] total_rss 1794048 [ 1989.565317][T21227] total_rss_huge 0 [ 1989.606401][T21227] total_shmem 309538816 [ 1989.610612][T21227] total_mapped_file 57688064 [ 1989.615210][T21227] total_dirty 0 [ 1989.696817][T21227] total_writeback 0 [ 1989.700689][T21227] total_workingset_refault_anon 155 [ 1989.705890][T21227] total_workingset_refault_file 0 [ 1989.766497][T21227] total_swap 44662784 [ 1989.770532][T21227] total_pgpgin 744585 [ 1989.774508][T21227] total_pgpgout 669087 [ 1989.796569][T21319] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1989.803401][T21319] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1989.880783][T21227] total_pgfault 287083 [ 1989.884908][T21227] total_pgmajfault 125 [ 1989.937750][T21227] total_inactive_anon 184668160 [ 1989.942680][T21227] total_active_anon 126664704 [ 1989.996463][T21227] total_inactive_file 0 [ 1990.000766][T21227] total_active_file 0 [ 1990.004749][T21227] total_unevictable 0 [ 1990.066569][T21227] anon_cost 0 [ 1990.069920][T21227] file_cost 0 [ 1990.116528][T21227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4271,pid=20978,uid=0 [ 1990.188591][T21227] Memory cgroup out of memory: Killed process 20978 (syz.7.4271) total-vm:200684kB, anon-rss:1524kB, file-rss:20608kB, shmem-rss:56320kB, UID:0 pgtables:212kB oom_score_adj:1000 [ 1990.341132][T21319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1990.593502][T21319] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 1992.478357][ T30] oom_reaper: reaped process 20978 (syz.7.4271), now anon-rss:28kB, file-rss:0kB, shmem-rss:0kB [ 1992.885453][T17840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1992.901463][T17840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1992.910826][T17840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1992.919391][T17840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1992.946536][T17840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1992.956650][T17840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1993.332244][T21332] syz.7.4370 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1993.648246][T21332] CPU: 0 PID: 21332 Comm: syz.7.4370 Not tainted syzkaller #0 [ 1993.655757][T21332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1993.665823][T21332] Call Trace: [ 1993.669107][T21332] [ 1993.672047][T21332] dump_stack_lvl+0x18c/0x250 [ 1993.676741][T21332] ? show_regs_print_info+0x20/0x20 [ 1993.681956][T21332] ? load_image+0x420/0x420 [ 1993.686483][T21332] ? ___ratelimit+0x478/0x610 [ 1993.691183][T21332] ? radix_tree_cpu_dead+0x160/0x160 [ 1993.696486][T21332] dump_header+0xd8/0x820 [ 1993.700835][T21332] oom_kill_process+0x390/0x580 [ 1993.705702][T21332] out_of_memory+0xe0e/0x1200 [ 1993.710390][T21332] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1993.716059][T21332] ? print_unlock_imbalance_bug+0x160/0x160 [ 1993.721966][T21332] ? mutex_lock_nested+0x20/0x20 [ 1993.726921][T21332] ? unregister_oom_notifier+0x20/0x20 [ 1993.732416][T21332] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1993.737975][T21332] ? try_charge_memcg+0xc91/0x17c0 [ 1993.743102][T21332] ? drain_local_stock+0x630/0x630 [ 1993.748233][T21332] ? do_raw_spin_unlock+0x121/0x230 [ 1993.753451][T21332] try_charge_memcg+0xca1/0x17c0 [ 1993.758407][T21332] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1993.764227][T21332] ? folio_flags+0x120/0x120 [ 1993.768827][T21332] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1993.773961][T21332] ? percpu_ref_tryget+0x15/0x180 [ 1993.778997][T21332] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1993.784466][T21332] charge_memcg+0x11b/0x3b0 [ 1993.788996][T21332] ? __mem_cgroup_charge+0x80/0x80 [ 1993.794119][T21332] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1993.799579][T21332] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1993.805042][T21332] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1993.810596][T21332] __mem_cgroup_charge+0x25/0x80 [ 1993.815559][T21332] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1993.821112][T21332] ? xas_load+0x12b/0x140 [ 1993.825460][T21332] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1993.830615][T21332] shmem_get_folio_gfp+0x1037/0x2b40 [ 1993.835944][T21332] shmem_write_begin+0xf2/0x430 [ 1993.840809][T21332] generic_perform_write+0x2fe/0x5c0 [ 1993.846117][T21332] ? generic_file_direct_write+0x3e0/0x3e0 [ 1993.851930][T21332] ? down_write+0x16e/0x200 [ 1993.856455][T21332] ? file_update_time+0x98/0x1a0 [ 1993.861406][T21332] shmem_file_write_iter+0xfb/0x120 [ 1993.866619][T21332] __kernel_write_iter+0x29f/0x6d0 [ 1993.871770][T21332] ? vfs_read+0x990/0x990 [ 1993.876111][T21332] ? get_dump_page+0x156/0x200 [ 1993.880907][T21332] ? __asan_memset+0x22/0x40 [ 1993.885510][T21332] ? iov_iter_bvec+0xd4/0x1b0 [ 1993.890202][T21332] dump_user_range+0x418/0x840 [ 1993.894987][T21332] ? dump_skip+0x40/0x40 [ 1993.899233][T21332] ? dump_emit+0x78/0xe0 [ 1993.903494][T21332] ? dump_emit+0xa6/0xe0 [ 1993.907740][T21332] ? elf_core_dump+0x2dbb/0x37c0 [ 1993.912700][T21332] elf_core_dump+0x320e/0x37c0 [ 1993.917507][T21332] ? load_elf_binary+0x2850/0x2850 [ 1993.922638][T21332] ? verify_lock_unused+0x140/0x140 [ 1993.927846][T21332] ? __lock_acquire+0x7d80/0x7d80 [ 1993.932878][T21332] ? mas_next_slot+0x94c/0x980 [ 1993.937682][T21332] ? rcu_read_lock_any_held+0xb4/0x140 [ 1993.943143][T21332] ? 0xffffffffff600000 [ 1993.947316][T21332] do_coredump+0x1791/0x24a0 [ 1993.951948][T21332] ? nfs_stat_to_errno+0x170/0x170 [ 1993.957084][T21332] ? lock_chain_count+0x20/0x20 [ 1993.961951][T21332] ? _raw_spin_unlock_irq+0x23/0x50 [ 1993.967156][T21332] ? lockdep_hardirqs_on+0x98/0x150 [ 1993.972387][T21332] get_signal+0x10da/0x1390 [ 1993.976915][T21332] arch_do_signal_or_restart+0xc2/0x7b0 [ 1993.982498][T21332] ? get_sigframe_size+0x20/0x20 [ 1993.987451][T21332] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1993.993453][T21332] ? exit_to_user_mode_loop+0x3b/0x110 [ 1993.999014][T21332] exit_to_user_mode_loop+0x70/0x110 [ 1994.004416][T21332] exit_to_user_mode_prepare+0xee/0x180 [ 1994.009976][T21332] irqentry_exit_to_user_mode+0x9/0x30 [ 1994.015459][T21332] exc_page_fault+0x8c/0x100 [ 1994.020068][T21332] asm_exc_page_fault+0x26/0x30 [ 1994.024929][T21332] RIP: 0033:0x7fd8d3253bd7 [ 1994.029370][T21332] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1994.048982][T21332] RSP: 002b:00007fd8d42c4120 EFLAGS: 00010202 [ 1994.055075][T21332] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd8d339e159 [ 1994.063059][T21332] RDX: 00007fd8d42c4140 RSI: 00007fd8d42c4270 RDI: 000000000000000b [ 1994.071049][T21332] RBP: 00007fd8d3435024 R08: 0000000000000000 R09: 0000000000000000 [ 1994.079039][T21332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1994.087024][T21332] R13: 00007fd8d3626038 R14: 00007fd8d3625fa0 R15: 00007fff24c9fc98 [ 1994.095013][T21332] [ 1995.038884][T21334] chnl_net:caif_netlink_parms(): no params data found [ 1995.376614][T17840] Bluetooth: hci4: command tx timeout [ 1995.998282][T21334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1996.005442][T21334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1996.096598][T21334] bridge_slave_0: entered allmulticast mode [ 1996.103587][T21334] bridge_slave_0: entered promiscuous mode [ 1996.177223][T21334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1996.185510][T21334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1996.266724][T21334] bridge_slave_1: entered allmulticast mode [ 1996.319176][T21334] bridge_slave_1: entered promiscuous mode [ 1996.415879][T21334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1996.530001][T21334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1996.811921][T21334] team0: Port device team_slave_0 added [ 1996.903603][T21334] team0: Port device team_slave_1 added [ 1997.436640][T17840] Bluetooth: hci4: command tx timeout [ 1999.522475][T17840] Bluetooth: hci4: command tx timeout [ 1999.634700][T13258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1999.652838][T13258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1999.661800][T13258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1999.686461][T13258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1999.694084][T13258] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1999.722213][T13258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2000.387463][T21334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2000.394488][T21334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2000.645452][T21334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2000.738316][T21334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2000.745322][T21334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2000.990709][T21334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2001.537554][T21334] hsr_slave_0: entered promiscuous mode [ 2001.596813][T13258] Bluetooth: hci4: command tx timeout [ 2001.792698][T21334] hsr_slave_1: entered promiscuous mode [ 2001.989817][T13258] Bluetooth: hci5: command tx timeout [ 2002.318318][T21334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2002.356356][T21334] Cannot create hsr debugfs directory [ 2003.997380][T13258] Bluetooth: hci5: command tx timeout [ 2005.284455][T21359] chnl_net:caif_netlink_parms(): no params data found [ 2005.562498][T21332] memory: usage 220904kB, limit 307200kB, failcnt 7282 [ 2005.741484][T21332] memory+swap: usage 240752kB, limit 9007199254740988kB, failcnt 0 [ 2005.936624][T21332] kmem: usage 1304kB, limit 9007199254740988kB, failcnt 0 [ 2006.082313][T13258] Bluetooth: hci5: command tx timeout [ 2006.181891][T21332] Memory cgroup stats for /syz7: [ 2006.182054][T21332] cache 200757248 [ 2006.332369][T21332] rss 233472 [ 2006.335637][T21332] rss_huge 0 [ 2008.189619][T13258] Bluetooth: hci5: command tx timeout [ 2008.418060][T21332] shmem 200757248 [ 2008.421810][T21332] mapped_file 0 [ 2008.425315][T21332] dirty 0 [ 2008.677130][T21332] writeback 0 [ 2008.680517][T21332] workingset_refault_anon 160 [ 2008.826394][T21332] workingset_refault_file 0 [ 2008.831012][T21332] swap 24838144 [ 2008.834519][T21332] pgpgin 747472 [ 2008.870331][T21379] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2009.086523][T21332] pgpgout 698898 [ 2009.090138][T21332] pgfault 287380 [ 2009.093687][T21332] pgmajfault 126 [ 2009.392708][T21332] inactive_anon 97673216 [ 2009.501297][T21332] active_anon 103378944 [ 2009.505519][T21332] inactive_file 0 [ 2009.666475][T21332] active_file 0 [ 2009.670018][T21332] unevictable 0 [ 2009.673482][T21332] hierarchical_memory_limit 314572800 [ 2009.869091][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.932093][T21332] hierarchical_memsw_limit 9223372036854771712 [ 2010.072172][T21332] total_cache 200757248 [ 2010.146625][T21332] total_rss 233472 [ 2010.150415][T21332] total_rss_huge 0 [ 2010.154141][T21332] total_shmem 200757248 [ 2010.418366][T21332] total_mapped_file 0 [ 2010.422410][T21332] total_dirty 0 [ 2010.626400][T21332] total_writeback 0 [ 2010.630355][T21332] total_workingset_refault_anon 160 [ 2010.635566][T21332] total_workingset_refault_file 0 [ 2010.886361][T21332] total_swap 24838144 [ 2010.890400][T21332] total_pgpgin 747472 [ 2010.894383][T21332] total_pgpgout 698898 [ 2011.091148][T21332] total_pgfault 287380 [ 2011.095269][T21332] total_pgmajfault 126 [ 2011.211061][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.305870][T21332] total_inactive_anon 97673216 [ 2011.371220][T21332] total_active_anon 103378944 [ 2011.375976][T21332] total_inactive_file 0 [ 2011.466655][T21359] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.473813][T21359] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.545645][T21359] bridge_slave_0: entered allmulticast mode [ 2011.587921][T21359] bridge_slave_0: entered promiscuous mode [ 2011.594876][T21332] total_active_file 0 [ 2011.627804][T21359] bridge0: port 2(bridge_slave_1) entered blocking state [ 2011.634954][T21359] bridge0: port 2(bridge_slave_1) entered disabled state [ 2011.701640][T21332] total_unevictable 0 [ 2011.705694][T21332] anon_cost 0 [ 2011.709812][T21359] bridge_slave_1: entered allmulticast mode [ 2011.752362][T21359] bridge_slave_1: entered promiscuous mode [ 2011.815137][T21332] file_cost 0 [ 2011.904029][T21332] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4271,pid=20982,uid=0 [ 2012.136535][T21332] Memory cgroup out of memory: OOM victim 20982 (syz.7.4271) is already exiting. Skip killing the task [ 2012.238938][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.519262][T21359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2012.589488][T21359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2012.712616][T21334] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2013.161709][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.398676][T21334] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2013.524450][T21359] team0: Port device team_slave_0 added [ 2013.538933][T21359] team0: Port device team_slave_1 added [ 2013.608142][T21334] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2013.708809][T21334] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2013.842289][T21359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2013.866379][T21359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2013.979975][T21359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2014.156797][T21359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2014.163799][T21359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2014.316814][T21359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2014.604250][T21359] hsr_slave_0: entered promiscuous mode [ 2014.649410][T21359] hsr_slave_1: entered promiscuous mode [ 2014.769340][T21359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2014.782308][T21359] Cannot create hsr debugfs directory [ 2016.273915][T21334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2016.406122][T21334] 8021q: adding VLAN 0 to HW filter on device team0 [ 2016.648006][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.655182][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2016.698326][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.705499][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2017.046581][T21359] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2017.079258][T21359] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2017.300975][T21334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2017.354848][T21359] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2017.397691][T21359] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2018.586125][T21334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2018.785375][ T49] hsr_slave_0: left promiscuous mode [ 2018.822792][ T49] hsr_slave_1: left promiscuous mode [ 2018.865354][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2018.885871][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2018.917516][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2018.924980][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2018.974464][ T49] bridge_slave_1: left allmulticast mode [ 2018.985928][ T49] bridge_slave_1: left promiscuous mode [ 2019.007454][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 2019.016196][ T49] bridge_slave_0: left allmulticast mode [ 2019.038105][ T49] bridge_slave_0: left promiscuous mode [ 2019.043869][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 2019.184034][ T49] veth1_macvtap: left promiscuous mode [ 2019.205469][ T49] veth0_macvtap: left promiscuous mode [ 2019.223302][ T49] veth1_vlan: left promiscuous mode [ 2019.242639][ T49] veth0_vlan: left promiscuous mode [ 2021.501627][ T49] team0 (unregistering): Port device team_slave_1 removed [ 2021.649652][ T49] team0 (unregistering): Port device team_slave_0 removed [ 2021.847321][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2022.012206][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2023.268231][ T49] bond0 (unregistering): Released all slaves [ 2023.749588][T21359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2023.844259][T21359] 8021q: adding VLAN 0 to HW filter on device team0 [ 2023.987693][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 2023.994898][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2024.109145][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 2024.116326][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2024.314428][T21359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2024.434478][T21359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2024.668294][T21334] veth0_vlan: entered promiscuous mode [ 2024.688840][ T49] IPVS: stop unused estimator thread 0... [ 2024.748770][T21334] veth1_vlan: entered promiscuous mode [ 2024.919311][T21334] veth0_macvtap: entered promiscuous mode [ 2024.969152][T21334] veth1_macvtap: entered promiscuous mode [ 2025.291352][ T1085] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2025.393226][T21334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2025.456237][T21334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.495374][T21334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2025.527152][T21334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.567072][T21334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2025.613353][T21334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.660574][T21334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2025.700612][T21334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.745405][T21334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2025.949075][ T1085] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.111131][ T1085] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.153523][T21359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2026.186104][T21334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2026.230887][T21334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.276423][T21334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2026.319539][T21334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.360017][T21334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2026.417796][T21334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.446825][T21334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2026.467146][T21334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2026.507812][T21334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2026.614098][ T1085] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2026.691942][T21334] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.747179][T21334] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.755922][T21334] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.818358][T21334] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.481415][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2027.536564][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2027.808654][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2027.867794][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2027.931851][T21359] veth0_vlan: entered promiscuous mode [ 2028.121473][T21359] veth1_vlan: entered promiscuous mode [ 2028.830751][T21359] veth0_macvtap: entered promiscuous mode [ 2029.040669][T21359] veth1_macvtap: entered promiscuous mode [ 2029.221853][T21359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.271192][T21359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.290476][T21359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.331338][T21359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.344225][T21359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.381610][T21359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.406445][T21359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.431950][T21359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.460967][T21359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.500697][T21359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.534312][T21359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2029.630393][T21359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2029.662081][T21359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.694266][T21359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2029.726430][T21359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.749039][T21359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2029.786495][T21359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.806359][T21359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2029.833778][T21359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.870546][T21359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2029.896434][T21359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.926806][T21359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2030.098623][T21359] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.131043][T21359] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.176380][T21359] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.216459][T21359] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.664867][T21164] syz.0.4329 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2030.689642][ T1085] hsr_slave_0: left promiscuous mode [ 2030.703806][ T1085] hsr_slave_1: left promiscuous mode [ 2030.741651][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2030.759309][T21164] CPU: 0 PID: 21164 Comm: syz.0.4329 Not tainted syzkaller #0 [ 2030.766795][T21164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2030.776852][T21164] Call Trace: [ 2030.780161][T21164] [ 2030.783099][T21164] dump_stack_lvl+0x18c/0x250 [ 2030.787786][T21164] ? show_regs_print_info+0x20/0x20 [ 2030.793012][T21164] ? load_image+0x420/0x420 [ 2030.797519][T21164] ? ___ratelimit+0x478/0x610 [ 2030.802210][T21164] ? radix_tree_cpu_dead+0x160/0x160 [ 2030.807518][T21164] dump_header+0xd8/0x820 [ 2030.811853][T21164] oom_kill_process+0x390/0x580 [ 2030.816718][T21164] out_of_memory+0xe0e/0x1200 [ 2030.821408][T21164] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 2030.827048][T21164] ? mutex_lock_nested+0x20/0x20 [ 2030.832006][T21164] ? unregister_oom_notifier+0x20/0x20 [ 2030.837484][T21164] mem_cgroup_out_of_memory+0x2c2/0x390 [ 2030.843035][T21164] ? try_charge_memcg+0xc91/0x17c0 [ 2030.848186][T21164] ? drain_local_stock+0x630/0x630 [ 2030.853312][T21164] ? do_raw_spin_unlock+0x121/0x230 [ 2030.858520][T21164] try_charge_memcg+0xca1/0x17c0 [ 2030.863475][T21164] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 2030.869321][T21164] ? folio_flags+0x120/0x120 [ 2030.873921][T21164] ? shmem_alloc_folio+0x1f4/0x2a0 [ 2030.879053][T21164] ? percpu_ref_tryget+0x15/0x180 [ 2030.884093][T21164] ? get_mem_cgroup_from_mm+0x38/0x290 [ 2030.889572][T21164] charge_memcg+0x11b/0x3b0 [ 2030.894103][T21164] ? __mem_cgroup_charge+0x80/0x80 [ 2030.899218][T21164] ? get_mem_cgroup_from_mm+0x38/0x290 [ 2030.904697][T21164] ? get_mem_cgroup_from_mm+0x38/0x290 [ 2030.910162][T21164] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 2030.915707][T21164] __mem_cgroup_charge+0x25/0x80 [ 2030.920650][T21164] shmem_add_to_page_cache+0x8d3/0x1b80 [ 2030.926199][T21164] ? xas_load+0x12b/0x140 [ 2030.930546][T21164] ? shmem_alloc_folio+0x2a0/0x2a0 [ 2030.935680][T21164] shmem_get_folio_gfp+0x1037/0x2b40 [ 2030.941010][T21164] shmem_fault+0x1b8/0x820 [ 2030.945449][T21164] ? zero_pipe_buf_get+0x10/0x10 [ 2030.950399][T21164] ? handle_mm_fault+0xe6/0x4a50 [ 2030.955340][T21164] ? __lock_acquire+0x7d80/0x7d80 [ 2030.960377][T21164] __do_fault+0x13b/0x4d0 [ 2030.964713][T21164] ? handle_mm_fault+0x3929/0x4a50 [ 2030.969837][T21164] ? handle_mm_fault+0xe6/0x4a50 [ 2030.974778][T21164] handle_mm_fault+0x3945/0x4a50 [ 2030.979723][T21164] ? handle_mm_fault+0xe6/0x4a50 [ 2030.984829][T21164] ? numa_migrate_prep+0x350/0x350 [ 2030.989973][T21164] ? follow_page_pte+0x6d0/0x1ae0 [ 2030.995057][T21164] ? pmd_lock+0x60/0x60 [ 2030.999253][T21164] __get_user_pages+0x604/0x1580 [ 2031.004246][T21164] ? file_update_time+0x98/0x1a0 [ 2031.009205][T21164] ? populate_vma_page_range+0x380/0x380 [ 2031.014873][T21164] ? get_dump_page+0xb6/0x200 [ 2031.019565][T21164] ? down_read_killable+0x1d0/0x340 [ 2031.024783][T21164] get_dump_page+0x10c/0x200 [ 2031.029389][T21164] ? fault_in_readable+0x150/0x150 [ 2031.034541][T21164] ? __asan_memset+0x22/0x40 [ 2031.039147][T21164] ? iov_iter_bvec+0xd4/0x1b0 [ 2031.043845][T21164] dump_user_range+0x127/0x840 [ 2031.048627][T21164] ? dump_skip+0x40/0x40 [ 2031.052875][T21164] ? dump_emit+0x78/0xe0 [ 2031.057140][T21164] ? dump_emit+0xa6/0xe0 [ 2031.061395][T21164] ? elf_core_dump+0x2dbb/0x37c0 [ 2031.066341][T21164] elf_core_dump+0x320e/0x37c0 [ 2031.071125][T21164] ? load_elf_binary+0x2850/0x2850 [ 2031.076253][T21164] ? verify_lock_unused+0x140/0x140 [ 2031.081460][T21164] ? __lock_acquire+0x7d80/0x7d80 [ 2031.086490][T21164] ? mas_next_slot+0x94c/0x980 [ 2031.091287][T21164] ? rcu_read_lock_any_held+0xb4/0x140 [ 2031.096755][T21164] ? 0xffffffffff600000 [ 2031.100919][T21164] do_coredump+0x1791/0x24a0 [ 2031.105561][T21164] ? nfs_stat_to_errno+0x170/0x170 [ 2031.110692][T21164] ? lock_chain_count+0x20/0x20 [ 2031.115550][T21164] ? _raw_spin_unlock_irq+0x23/0x50 [ 2031.120754][T21164] ? lockdep_hardirqs_on+0x98/0x150 [ 2031.125964][T21164] get_signal+0x10da/0x1390 [ 2031.130499][T21164] arch_do_signal_or_restart+0xc2/0x7b0 [ 2031.136067][T21164] ? get_sigframe_size+0x20/0x20 [ 2031.141017][T21164] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2031.147011][T21164] ? exit_to_user_mode_loop+0x3b/0x110 [ 2031.152482][T21164] exit_to_user_mode_loop+0x70/0x110 [ 2031.157778][T21164] exit_to_user_mode_prepare+0xee/0x180 [ 2031.163330][T21164] irqentry_exit_to_user_mode+0x9/0x30 [ 2031.168802][T21164] exc_page_fault+0x8c/0x100 [ 2031.173403][T21164] asm_exc_page_fault+0x26/0x30 [ 2031.178274][T21164] RIP: 0033:0x7fdd04653bd7 [ 2031.182700][T21164] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 2031.202317][T21164] RSP: 002b:00007fdd055a8120 EFLAGS: 00010202 [ 2031.208396][T21164] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fdd0479e159 [ 2031.216386][T21164] RDX: 00007fdd055a8140 RSI: 00007fdd055a8270 RDI: 000000000000000b [ 2031.224361][T21164] RBP: 00007fdd04835024 R08: 0000000000000000 R09: 0000000000000000 [ 2031.232339][T21164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2031.240314][T21164] R13: 00007fdd04a26038 R14: 00007fdd04a25fa0 R15: 00007fff272c4628 [ 2031.248297][T21164] [ 2031.266712][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2031.300437][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2031.312087][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2031.333253][ T1085] bridge_slave_1: left allmulticast mode [ 2031.339054][ T1085] bridge_slave_1: left promiscuous mode [ 2031.344762][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.418632][ T1085] bridge_slave_0: left allmulticast mode [ 2031.424314][ T1085] bridge_slave_0: left promiscuous mode [ 2031.433184][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 2031.534753][ T1085] veth1_macvtap: left promiscuous mode [ 2031.545434][ T1085] veth0_macvtap: left promiscuous mode [ 2031.551549][ T1085] veth1_vlan: left promiscuous mode [ 2031.561277][ T1085] veth0_vlan: left promiscuous mode [ 2031.651178][T21164] memory: usage 307200kB, limit 307200kB, failcnt 40903 [ 2031.691041][T21164] memory+swap: usage 432004kB, limit 9007199254740988kB, failcnt 0 [ 2031.721742][T21164] kmem: usage 3720kB, limit 9007199254740988kB, failcnt 0 [ 2031.757783][T21164] Memory cgroup stats for /syz0: [ 2031.758143][T21164] cache 310403072 [ 2031.800237][T21164] rss 319488 [ 2031.803493][T21164] rss_huge 0 [ 2031.824201][T21164] shmem 310333440 [ 2031.846790][T21164] mapped_file 153083904 [ 2031.850994][T21164] dirty 69632 [ 2031.854276][T21164] writeback 0 [ 2031.871032][T21164] workingset_refault_anon 87 [ 2031.875652][T21164] workingset_refault_file 0 [ 2031.897991][T21164] swap 127799296 [ 2031.901572][T21164] pgpgin 3092867 [ 2031.905119][T21164] pgpgout 3016997 [ 2031.935493][T21164] pgfault 918178 [ 2031.939843][T21164] pgmajfault 75 [ 2031.943314][T21164] inactive_anon 308187136 [ 2031.970999][T21164] active_anon 2506752 [ 2031.975027][T21164] inactive_file 0 [ 2031.996786][T21164] active_file 69632 [ 2032.000634][T21164] unevictable 0 [ 2032.004098][T21164] hierarchical_memory_limit 314572800 [ 2032.026010][T21164] hierarchical_memsw_limit 9223372036854771712 [ 2032.049623][T21164] total_cache 310403072 [ 2032.053838][T21164] total_rss 319488 [ 2032.068601][T21164] total_rss_huge 0 [ 2032.072344][T21164] total_shmem 310333440 [ 2032.090731][T21164] total_mapped_file 153083904 [ 2032.095426][T21164] total_dirty 69632 [ 2032.114811][T21164] total_writeback 0 [ 2032.118902][T21164] total_workingset_refault_anon 87 [ 2032.124041][T21164] total_workingset_refault_file 0 [ 2032.146002][T21164] total_swap 127799296 [ 2032.180585][T21164] total_pgpgin 3092867 [ 2032.184699][T21164] total_pgpgout 3016997 [ 2032.202107][T21164] total_pgfault 918178 [ 2032.206215][T21164] total_pgmajfault 75 [ 2032.216361][T21164] total_inactive_anon 308187136 [ 2032.221288][T21164] total_active_anon 2506752 [ 2032.225789][T21164] total_inactive_file 0 [ 2032.260619][T21164] total_active_file 69632 [ 2032.264998][T21164] total_unevictable 0 [ 2032.282591][T21164] anon_cost 0 [ 2032.285925][T21164] file_cost 0 [ 2032.302461][T21164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4329,pid=21164,uid=0 [ 2032.355188][T21164] Memory cgroup out of memory: Killed process 21164 (syz.0.4329) total-vm:207100kB, anon-rss:1408kB, file-rss:24704kB, shmem-rss:74624kB, UID:0 pgtables:312kB oom_score_adj:1000 [ 2033.613977][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 2033.822680][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 2033.973152][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2034.142539][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2035.449570][ T1085] bond0 (unregistering): Released all slaves [ 2035.808109][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2035.842714][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2035.914754][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2035.982536][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.936454][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.942815][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.365101][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.371673][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2116.801442][T13258] Bluetooth: hci4: command 0x0406 tx timeout [ 2121.936341][T13258] Bluetooth: hci5: command 0x0406 tx timeout [ 2160.816900][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.823269][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.243051][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.249997][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.691248][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.703872][ T1293] ieee802154 phy1 wpan1: encryption failed: -22