last executing test programs: 49.323135323s ago: executing program 1 (id=50): fsopen(&(0x7f0000000080)='bpf\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001c00)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001c80), 0x651, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001dc0)='./config\x00', &(0x7f0000001e00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001e40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001e80)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r3, &(0x7f0000001f40)="aa", 0x1) openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="4400000010004b0426bd70000000"], 0x44}}, 0x24) 47.783021431s ago: executing program 1 (id=54): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00f8403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a7364664b62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1cde2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3000000f9ffffffffffffff000000"], 0x9, 0x250, &(0x7f0000000300)="$eJzs3cFqE0EYB/DPJG1jL/YsHha8eArqyWuQCmJAiOSgJwPVSyvC9rJ62sfwGXwkH6On3lbaXZq2xl50M+3u7wdhPvgTZgZCJodvsh8ffTk8+Hr8ufr1I8bjLEYRZVVF7MUghlG714yD83o7LisDALhr5vPlNPUaaFeeT5dbEbHzR7L4mWRBAAAAAAAAAAAA/LN1/f9xqv8fALpM/38XDG9M83y63G1+v12l/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABI57SqHlQ3vFKvDwD4/5z/ANA/zn8A6B/nPwD0z7v3H95MZ7P9eZaNI07KYlEs6rHOX72e7T/Nzu2t3nVSFIvhRf6szrOr+VbsNvnztfl2PHlc52fZy7eza/lOHLS/fQAAAAAAAAAAAAAAAAAAALgVJtmFtff7J5O/5XV16f8Brt3fH8XD0ca2AQAAAAAAAAAAAAAAAAAAAHfa8bfvh8ujo0+5ojNFvGh9ikHz8bktWz4rIjY+6f1IMOmGisRfTAAAAAAAAAAAAAAAAAAA0EOrS7+pVwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6aye/99eERFlVUu9XQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDfgcAAP//wzuVuw==") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c", 0x5, 0x840, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c850, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) 47.473586072s ago: executing program 1 (id=58): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000017c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000002800)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002840)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000028c0), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002a80)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002ac0)='./proc\x00', &(0x7f0000002b00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002b40)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) write(r5, &(0x7f0000002b80)='3', 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000002bc0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000002c00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002cc0)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000002d40)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 46.554491546s ago: executing program 1 (id=60): syz_mount_image$hfsplus(&(0x7f0000004540), &(0x7f0000004580)='./file0\x00', 0x0, &(0x7f00000045c0)={[{}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'iso8859-6'}}]}, 0x1, 0x5f0, &(0x7f0000004600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x9, 0x12) mknod(&(0x7f0000000280)='./bus\x00', 0xc000, 0x2000008) 44.398252516s ago: executing program 1 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000540), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRES8, @ANYBLOB="83abe9471781cbdec54018e960"], 0x1, 0x105f2, &(0x7f0000012f40)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10) fallocate(r0, 0x0, 0x0, 0x8800000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) 43.274918501s ago: executing program 1 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) 43.036681315s ago: executing program 32 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) 8.554919676s ago: executing program 4 (id=215): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$char_usb(r2, &(0x7f0000000040)=""/134, 0x86) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)="2318") 7.674369926s ago: executing program 5 (id=219): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2a0471a, &(0x7f0000000080), 0x82, 0x4a8, &(0x7f00000000c0)="$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") chdir(&(0x7f0000000580)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000005ec0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000005f00)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000005f40)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) rename(&(0x7f0000005f80)='./bus\x00', &(0x7f0000005fc0)='./file0\x00') 6.731401672s ago: executing program 5 (id=222): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000230300000000000000000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a000000000000000100000000000000000000000001000000000000020000e6230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000cc0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d00)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 6.509144765s ago: executing program 2 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0xa7c, r0}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x480, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x0, 0xfff3}, {0x10, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x450, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x4, 0x5, 0x44a, {0xd, 0x1, 0x6, 0x3, 0xffff, 0x7}, {0x1, 0x1, 0x0, 0x4451, 0x4, 0x6}, 0x6, 0x38000000, 0x44d}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x5c, 0x3, 0x8, 0xcdd, 0x1, 0x7, 0xffffffaa, 0x881, 0x9, 0x9, 0x177, 0xfffffffd, 0xfffffffd, 0x80000000, 0xff, 0xffff, 0x40, 0x8, 0xce2a, 0x1, 0x7, 0x5, 0xffff, 0xd75, 0x6, 0x80000001, 0x5, 0x9, 0x5, 0x60000, 0x66a, 0x0, 0x9, 0x2, 0x5, 0x5, 0x81, 0xffffff1f, 0x3, 0x2, 0xfffffff8, 0x3, 0x1, 0x3, 0x0, 0x400, 0x6, 0x40, 0x6, 0xfb6, 0x37a, 0x5, 0x7fff, 0x4, 0x1, 0x0, 0x8, 0x8000, 0x8, 0xd180, 0xf, 0x2, 0x4, 0x9, 0x5, 0x0, 0x7, 0x7, 0x5, 0x8, 0x7, 0x100, 0xfffffc01, 0x4, 0x5, 0x7, 0x7f, 0x8, 0x7, 0x9, 0x4, 0x401, 0x4, 0x8, 0x2, 0x3, 0xe542, 0xfffffeb5, 0x1b, 0xa, 0x4, 0x6, 0x8, 0x4, 0x101, 0x8001, 0xfffffff9, 0x8, 0x51b, 0x0, 0x434d, 0xfffffff7, 0x80, 0x5, 0x0, 0x5, 0x7, 0x1, 0x7, 0x9, 0x9, 0xd, 0x2, 0x5, 0x8000, 0x7fff, 0xdf65, 0x6, 0x8, 0xfffffff9, 0x5, 0x10000, 0x9, 0xffffffc0, 0x3, 0x354, 0x3, 0x2, 0x6, 0x7f, 0x6d1, 0x8, 0x6, 0xfffffffb, 0x9, 0xfff, 0x8, 0x8, 0x1, 0x7, 0x4, 0x81a, 0x9d2b, 0xf, 0x2, 0x7, 0x5cd3, 0x6, 0x6, 0x7, 0x6, 0x2, 0xffffffff, 0x7, 0x6, 0x0, 0xa1, 0xd4, 0x1, 0x9, 0x9, 0x40ea, 0x5, 0x5, 0x4, 0xfffffffb, 0x7, 0x5, 0xd4, 0x2, 0x3, 0x5, 0x2, 0x7, 0x8, 0x0, 0x8, 0xfdd, 0x3, 0x5, 0x0, 0x8, 0x3, 0x0, 0x5, 0x6567, 0xd8fd, 0x8001, 0x7, 0xe, 0x1, 0x7, 0xaf, 0x100, 0x2, 0x402, 0x800, 0x8, 0x2, 0x2, 0x100, 0x9, 0x7, 0x9, 0xe9f, 0x4, 0xffffffff, 0x8000, 0x0, 0x0, 0x8, 0x3, 0x2, 0x7, 0x0, 0x6, 0xfffffffa, 0x5, 0x7fffffff, 0x1, 0x9, 0x7, 0x8, 0xfffffffa, 0x0, 0x1ff, 0xc97, 0x40, 0x9, 0x101, 0x7079, 0xee, 0x200, 0x5, 0x4ad, 0x401, 0xa28c, 0x4, 0x3, 0x2, 0x6, 0x1ff, 0x0, 0x0, 0x4b1, 0x5, 0x75a5, 0x0, 0x0, 0x4, 0x5, 0x0, 0x93, 0x7, 0x2]}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='mtd0\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/fillfile\x00', 0x42, 0x9f) write(r1, &(0x7f0000000580)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 6.326976574s ago: executing program 5 (id=225): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0105b08, &(0x7f0000000080)={0x1, 0x2, 0x3cf3, 0x202000, 0x110001, 0x9}) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000040"], 0x0) 6.25980742s ago: executing program 2 (id=226): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000d80)={'veth0_virt_wifi\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xa00000, &(0x7f0000000200)=ANY=[@ANYBLOB='anchor=0\x00000000000000000001,\x00'], 0x1, 0xc90, &(0x7f0000000e00)="$eJzs3V9sXfddAPDv7/g6vkkZ8dYSurFut4BGmjUl/1ZnDWpvqGuYlKbRHO9tkm9iJ1zVsS3bgbQa4PHCAw9ICPGwJ0sQkIaYKoYmHkDyoEjbSyXQnniyQK0mxINBkwZIyNM593fj6z9p3Thx/vTzaZ3vPef+fuf8/lyfk1j+nl8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/+srZY8fTNm/03YfGAAB74vzol4+d2O7+DwA8si7e7t//AAAAAAAAAAAAAADAgyJFEY9Hitnzq2m82u6on2v3X78xNjyyfbX9qarZV5Uvv+rHT5w89YXnh05347n29PvUv9s+Fa+NXjzbeHnm2uzc5Pz85ERjbLp9eWZicsdH2G39zY5UA9C49vr1iStX5hsnnju54e0bg+8NPHZo8MzQM0ef6pYdGx4ZGV0vUu8tX7vjhnRsl+HxuxGxL4o4Gime/dYPUysiitj9WNT3du4321914kjVibHhkaojU+3W9EL55oXuQBQRjZ5Kze4YbT8XUevf0z5sVtx61YxYLHeUDT5Sdm90tjXXujQ12bjQmltoL7Rnpi+kTmvL/jSiiNMpYikiVga2Hrg/iqhFim8cXE2X8lM/qnH4fJUYvJMW3RdlOxv9EUvFAztnD4WBKOLVSPGjtw/H5Xydqa41n4t4tYzfibhZxhcjUvnBOBXx7jafIx5OtSjiD8r5/7uPpYnqetC9rpz7SuNL01dmesp2rysf8v6w5Upxj+8Pn73N/v2b4t54wK9N9SiiVV3xV9OmCdzyVw7f9gAAAAAAAAAAAAAAAAB7Z38U8clI8cq//GaVVxxVXvrBM0O/Nvix3pzxJz/gOGXZ5yJisdhZTu6+nBh4IV1I6T7nEn+U1aOI3875f1+/340BAAAAAAAAAAAAAAAAAAD4SCviB5HihXcOp6XoXVO8PX21cbF1aaqzKmx37d/umulra2trjdSJzRzHc1zMcSnH5RxXcowi18+xmeN4jos5LuW4nONKjtGX6+fYzHE8x8Ucl3JcznElx6jl+jk2cxzvrgyct5dyXM5xJcd4QNbuBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4lBRRRH93I0VEMwZisLO5PHAfGwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3DKQivh2pGj8evPWvlpEpOr/jsPlH6eiua+Mn4jmUBlfjObZHFtVrDW/fh/az+70pyK+HykG6m/dmvA8//2drVsfg7j5tfWtT9U6sa/75uB7A48dOnhmaOQzT97uddquAUfOtaev32iMDY/EaM/uWj77J3r2DebzFnen60TE/Btvvt6ampqcu/MX5UdgF9Ufohepduc9vYsD/lF+Ud/Tk0Ztx4XX+h6x74KN14n6fbg2ce+V9/93I8Uvv/Ov3Rt+5/5fj5/qbN26w8ePf2f9/v/C5gN90P3/paju/7XN9fL9v7ynb3f/f7xn3wv5byP9tYj6wrXZ/kMR9fk33jzavta6Onl1cvrUsWNfHBr64slj/fsi6lfaU5M9r+7KcAEAAAAAAAAAAAAAAADsnVTES5Gi9f3V1IiIG1W+1uCZoWeOPtUXfVW+1Ya87ddGL55tvDxzbXZucn5+cqIxNt2+PDMxudPT1at0r7HhkXvSmQ/y5P573P799ZdnZt+Ya1/9jYVt3z9QP3tpfmGudbnz9v4t9aOIaPbuOVI1eGx4pGr0VLs1XVW9UE3K7jPh+1MR/xYpLp9qpKfzvpz/vznDf0P+/+LmA+0u/782Njwy0s3/+8yB9fy/j/cULc+ZUhE/jhS/9EdPxtNVOw/EljHL5f4sUhw5/elcLvaV5bpt6DxXoJMZWJb9r0jx1/+/sWw3H/Lx9bLHP9TgPgTK+T8YKb79+9+Mn8/7Nj7/Yfv5P7D5QLt//sPIdvmfT/TsO7AhfX7XXSfP/9FI8eLjb8UvVHv+732f/9G94hzuFF5/Psc9mv+f6dk3mM/7i3er8wAAAAAAAAAAAA+x/lTEX0SK747U0vN5305+/29i84Hu0e9/DfTsm9ij5XN2PagAAAAA8IDoT0X8IFJcXXjrVg71xvzv7k/tirj5Kzn/83/W1tbSxnc7P+f76eq5AXfz53+9BiNiOEWM36W+AwAAAAAAAAAAAAAAAAAAwIMipSKez+upj1f5/BO3XU99OVK88h/P5nLpUFmuuw78YPVn/fzM9NGzU1Mz9VhoXZqabIzOti5PlnWfiBSrf/rpXLeo1ld/Oho9Z1hfi30uUoz8ZbdsZy327trkT6yXPV6W/Xik+Pe/2lg2L02d146uyp4oy/5JpPjq325f9tB62ZNl2W9Giu99tdEte6As230+6s+ul33u8szu1+AHAAAAAAAAAAAAAAAAAACA/lTE70WK/7y2dCuXP6//39+zWbn5tZ71/je5Ua3zP1it/3+713ey/n/1XIHF250VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTSmKeDNSzJ5fTcsD5XZH/Vx7+vqNseGRiOjbWm1/qmr2VeXLr/rxEydPfeH5odPd2FN/D3wyXhu9eLbx8sy12bnJ+fnJicbYdPvyzMTkjo+wtf7/rq2t7bz+ZkeqAWhce/36xJUr840Tz53cMJI3Bt8beOzQ4JmhZ44+1S07NjwyMtpziFr/HZ99i3Sb/fuiiD+OFM9+64fpuwMRRWw7Fh9qLOt7O/eb7a86caTqxNjwSNWRqXZreqEc/QvdgSgiGj2Vmt0x2oO52JVmxGLZ/LLBR8rujc625lqXpiYbF1pzC+2F9sz0hdRpbdmfRhRxOkUsRcTKwNbD9UcRr0eKbxxcTf8w0PmEVuPw+fOjXz524vbtKO5hH3egbGejP2KpeAjm7AE2EEX8TaT40duH4x8HImrR+YrPRbxaxu9E3IzOfKfyg3Eq4t1tPkc8nGpRxH+X839mNb09UF4PuteVc19pfGn6ykxP2e515f3uD/t2cM77fn/YSz3Xps/27C5H8s9f2tOWbKseRXyvuuKvpn/yfQ0AAAAAAAAAAAAAAADwACni5yLFC+8cTlV+8K2c4vb01cbF1qWpTtp3N/evmzO9tra21kid2MxxPMfFHJdyXM5xJccocv0cm2Wsr62N5+3FHJdyXM5xJcfoy/VzbPbFP/99ef68vZjjUo7LOa7kGLVcP8dmjuM5Lua4lONyjis5hrxiAAAAAAAAAAAAAAAAAADgHiiq/1L84W+tprWBzvrS49GJy9YDfeT9JAAA///uQvQG") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f00000026c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002700), 0x8, 0x10, &(0x7f0000002740), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002780)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.539118424s ago: executing program 2 (id=227): fsopen(&(0x7f0000000080)='bpf\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000e80)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001b80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001c00)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001c80), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001cc0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001dc0)='./config\x00', &(0x7f0000001e00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001e40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001e80)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001ec0)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r6, &(0x7f0000001f40)="aa", 0x1) symlinkat(&(0x7f0000001f80)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f0000001fc0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r7, &(0x7f0000002040)='dummy_udc.0', 0xb) sendmsg$nl_route(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="4400000010004b0426bd70000000"], 0x44}}, 0x24) 3.4228189s ago: executing program 4 (id=233): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000480)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000580)={0xa, 0x4e24, 0x8004, @loopback, 0x6}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)="d5", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e21, 0xfffffff7, @empty, 0x1800}}, 0xd, 0x29, 0xfffffffc, 0x9, 0x8a, 0xc9}, 0x9c) 3.370023055s ago: executing program 0 (id=234): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d80)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001e00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001e40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001e80)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001ec0)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r0, &(0x7f0000001f40)="aa", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000002040)='dummy_udc.0', 0xb) 3.220262061s ago: executing program 0 (id=236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[], 0x0) 3.073101096s ago: executing program 2 (id=238): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2942, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000140)='7', 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0xffffdf004002, 0xffffdf004000, 0x0, &(0x7f0000ffc000/0x1000)=nil) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x87000000) 2.970847527s ago: executing program 0 (id=239): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002e40)={0x2, &(0x7f0000002e80)=[{0x20, 0x0, 0x0, 0xc8e}, {0x16, 0x3}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002ec0)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{&(0x7f0000002f80)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000002fc0)="e8", 0x6200, 0x88050000, 0x0, 0x0) 2.756680628s ago: executing program 3 (id=240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000340)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.728586241s ago: executing program 2 (id=241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/crypto\x00', 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000580)={0x18, 0x0, {0x4, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x4) r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0xdc, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x841fa08}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6367c294}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x559555a}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5df5844d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28427dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2364a464}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x337073}]}, {0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43701d60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b747a8d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}]}, 0xdc}}, 0x20000000) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="c7a429bd7000fbdbdf250100000004000180100002800c00018008"], 0x28}, 0x1, 0x0, 0x0, 0x4c010}, 0x40440cc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000680), 0xfffffecc) splice(r10, 0x0, r9, 0x0, 0x3ffffffffd, 0x3) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) r12 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@netrom, @remote, @null, @null, @netrom, @netrom, @rose, @rose]}, &(0x7f0000000140)=0x48) sendmsg$sock(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000013000500000000000000000006010000100002007664706173696d5f6e6574000a000400766470793000", 0x2e}], 0x1}, 0x0) 2.675388066s ago: executing program 4 (id=242): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a0f5}], 0x1}, 0x80d1) 2.674178657s ago: executing program 0 (id=243): setns(0xc9, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2.468639587s ago: executing program 0 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x6, 0x200}) fcntl$lock(r0, 0x25, &(0x7f0000000200)={0x0, 0x0, 0x76, 0x6031}) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000780)={0x3, 0x1, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000006c0)=""/35, 0x23}], &(0x7f0000000740)=[0x800, 0x80000001]}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) syz_mount_image$ocfs2(&(0x7f0000000280), &(0x7f0000000480)='./file0\x00', 0x8c0, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f00000007c0)="$eJzs3T9sFNkdAOA3YyfYBIhNKIgUKSsFJVESWTYViZFijMHY4BCRQJFmWdsLOFl7kb2OUlA4SoOUKlKKKAW6k65zhdxdxTUnXXnNlVyNdFdcc9JJiD3t7qy9M+vFe9wuPtD3SXh23n/8m3n7phi/OFG5t7KRW9nIFdZy5aU7G2dzfy+XNleLIc76sC2lJ7run0PVjziJ/eG5fvHyn26dDeGD5U+eVavVaqgZDPuaaPn85RcPllqPTXHryb8a7e7fWq/8JYRwqm1cNQMhhKHk84XkOJ0ch0MIJ0IIUQjh1oN/3871aDSPnxbP558vPNyZPDO//Win8/89CuH/pR//5u7qZz8bmPz0Vz3qHgAAAAAAAAAAAAAAAACAN9zsjes3/zg+EZ5EYXA7an9fdzY5dno/ttozP+04xl69mwsAAAAAAAAAAAAAAAAAAADfVXvv/+eik/u8/z+THKc61K/+vrt+fv4tx0l/zP3h+syl8Ylk//eoLf9ckvT5hYEw2txf/aPO+79fyNTff//39n5eVXN8zX5HQhSPpc7jeGwshHeTjd9PR0fjUnmj8us75c215Z4N442Vjn9j9/5UdJIN/VPxf8n+/9OZ9vu///+P2q6m2vnt3l1ib7V0/Ac6lnvvn9FL4v/93XIXM/VeR/x5den4D9bThlsLTDUmgFr8/zN48P0/k2m/X/E/EULIRbWx5lIzQG0NU0vvtF4hLR3/79XTUlNn8ovsdP9/lYn/pUz7hzX/b2W/iNhXOv6NeXwoVWLv/h+ND77/L2faP4z418a/5fu/K+n4H2kkDqaK1H+T3c7/s5n2s/F/Ua1WezHum3EyzhNR6grYjhrp/mZcd9LxH2rL33v+i7ta/1/J1H9dz3/NfpvPf83p/5dR4/mP/e3Gfyc8q1aHO5br9v6fy9Tr9/w/VV//tTl3qp+dvkXS9//Relp67TxS/9kp/tVM/Ocz7b9C/N/v/BS6p74qGWrGf28+eXGkkf6O9V9X0vH/QSMxbi2xVf9ZX/9FB6//r2baP4z1X238W3F/e31bpON/rGO5Wvw/7uL7/1qmXv/jH8J48wJoX75wgHT8j3csV7//hw6O/0KmXr/j/4t+Ng4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwBphOjiMhisdS53E8NhbCxeT8dDgaLRaW84ul8tLfNkKYSdJz4WR0t1ReLJTyK2vl5WK+UCqVl0K4lOSfCkPRRqlcya8W7l/ebWs4ulcsrFcWi4VKCGE2Sf9JON5sa3Glslq4H0K4spv3w7i8fv9eYS2/vLL+u/Hx8fEwtzuG0aj4j0pxrdLovZEbwvxu3ZGoZXD17Ku7YzkW/bW8ub5WKNXTr7XUKZWXCqWWOgtJ3n/DaFRZ31xbKlSK+VL5brO/wzSVHGfmbvz5xrWJtvzbUeM4/XqHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA39GTyt/8LIQw2zuIQQi5KPkTJv5THT4vn888XHu5MnpnffrTzbL8yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXTpGiRiIwgD8ZlJo6TGsQtLZRhTRwojgCfQYHkaP4iW8g4WFrcWysDuBkGwgzW71fc2D+Zl5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsN7dc//y1LQRKc43ZxFfb98/4/yh1I/rw/erE8zI8dw/9je3TVv+Pc3yq3L02+Vd+v/3/lqVGqM6+JzsyXSf9uZ9ppb2bWm+oe9FpFxHRFfyy5RzXa97CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC07cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL8CAAD//4VrJTc=") syz_open_procfs$namespace(0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1ef) mount(0x0, &(0x7f0000004c40)='./tracing\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000004c80), &(0x7f0000004cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000004dc0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000004f80)='./file1\x00', 0xc4042, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004fc0), 0x6200, 0x0) sendfile(r5, r6, 0x0, 0x20fffe82) 2.429255882s ago: executing program 3 (id=245): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ptrace(0x4206, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$write2(0x11, &(0x7f0000000180)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000001640)=""/4101, 0xffffffffffffffd6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c0200000000000000"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000100)={0x36, 0x70, 0x20000}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea) 2.417733933s ago: executing program 4 (id=246): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000007c0)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000980)='hybla', 0x5) recvfrom$inet(r0, &(0x7f00000009c0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.962563439s ago: executing program 5 (id=247): getpid() sched_setaffinity(0x0, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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") chdir(&(0x7f0000000140)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) 1.938246882s ago: executing program 3 (id=248): r0 = socket$packet(0x11, 0x3, 0x300) r1 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='27', 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000900)={0xa0000001}) 1.544910642s ago: executing program 2 (id=249): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) 1.290869678s ago: executing program 3 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xbf24}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x22900}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}]}}}]}, 0x38}}, 0x4040000) 1.146544503s ago: executing program 3 (id=251): r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1}}], 0x1, 0x20008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 693.723759ms ago: executing program 4 (id=252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="d53785542c0017d03d53cf719e5e1d3b894735f910cdf2063d252551fdf57f24c42cc97b23d65c971851c0f99a93e30bf0f72b10a79990f5d9e46cb85cd601f22bc2ddbb12206817a9b972a741b5cba4d3d132581b5ec026409db1d804", 0xffb1}], 0x1}}], 0x1, 0x20000000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10001, 0xc) 668.412032ms ago: executing program 5 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) ioctl$KVM_RUN(r2, 0xae80, 0x0) 405.764268ms ago: executing program 3 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000a40)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000ac0)='27', 0x2) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) 247.052225ms ago: executing program 5 (id=255): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004380)=@deltfilter={0x1df0, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1db8, 0x2, [@TCA_CGROUP_ACT={0x1db4, 0x1, [@m_connmark={0xc4, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x1cec, 0x1, 0x0, 0x0, {{0xa}, {0x1cc0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x4, 0x96e, 0x20000000, 0x6, 0x2}, 0x8, 0x3, [{0xffffffff, 0x5bb, 0xe8fe, 0x7, 0x4, 0x6}, {0x6c3, 0x9518, 0x3, 0x2, 0x9f0b1fcf, 0x2}, {0x8001, 0x800, 0x58f7, 0x1, 0x6, 0x8}]}, [{0x1, 0x1, 0x80000000, 0x5, 0x6a9853a2, 0x480000}, {0x0, 0x8, 0x8000, 0x10, 0xffffffff, 0x8001}, {0x9, 0x2e, 0x6, 0x7b, 0x0, 0x7}, {0x1, 0x2, 0x3, 0x4, 0x4, 0x1}, {0x8001, 0x8000, 0x9, 0x6, 0xcad, 0x7}, {0x5, 0x90d, 0x7, 0x1000, 0x40}, {0x6, 0x9, 0xfffffffe, 0x7ff, 0x0, 0x800}, {0xc7, 0x80000001, 0x0, 0x5, 0x1000}, {0x2, 0x6, 0xffffffff, 0x100, 0x7ff, 0x2}, {0x76, 0x475e, 0x3, 0x7, 0x8, 0x5}, {0x5, 0x6, 0x3, 0x800000, 0x7, 0x9}, {0x1, 0x9, 0xfffff801, 0x7, 0x2, 0x5ada}, {0x9, 0x8, 0xf954, 0x8a5d, 0x10000, 0x80008000}, {0x3, 0x10000, 0x1, 0xc00000, 0x2, 0x5}, {0x950e, 0x25df, 0x5f, 0x81, 0xe, 0x80000001}, {0x1, 0x3, 0x1, 0x9, 0x7, 0x7f}, {0x6, 0x60, 0x8, 0x9, 0x1, 0x8}, {0x0, 0xfffffff8, 0x6, 0x4, 0x2, 0x82}, {0x2c, 0x1000, 0x1f95, 0x6, 0x4d83, 0x7}, {0x7, 0x9, 0x0, 0x1, 0x40, 0x2}, {0x7, 0x3, 0x6, 0x6, 0x8, 0xffffffff}, {0x3ff, 0xe, 0x9, 0xe6, 0xc245, 0xb6d}, {0x1, 0x0, 0x7, 0xc8b, 0xe, 0x3903}, {0x9, 0xfffffbde, 0x4, 0x1, 0x2}, {0xe, 0x10, 0x6, 0x743, 0x1, 0x5000}, {0xd9, 0x8, 0x5, 0x3, 0x3, 0x4}, {0xa0d, 0xfffffff8, 0x7, 0x8001, 0x81, 0xd}, {0x1, 0x698, 0x1, 0xfffffff1, 0x7982, 0x2fa}, {0xa9c, 0xfe, 0x81, 0x7ff, 0xc798, 0x7}, {0x6e7c584a, 0x1000, 0x2, 0x10, 0x7, 0x9}, {0xb, 0x8, 0x9f, 0x5, 0x8, 0x81}, {0x9, 0x2, 0x5d, 0x8000, 0x81, 0x8}, {0xd, 0xa, 0x1, 0x7, 0x3, 0xffffffff}, {0x5, 0x751, 0x6, 0x6, 0x9, 0x9}, {0x0, 0x66, 0x2, 0x4, 0x7, 0xfffffffc}, {0xd9, 0x8, 0x3, 0x9, 0x2, 0x34}, {0x2, 0x5, 0x3, 0x2, 0x353, 0xfa}, {0xffffff8f, 0x401, 0x200, 0x8, 0x46, 0x5}, {0x9, 0x6, 0x5, 0x19, 0x7, 0xc}, {0x2, 0x9, 0x4, 0x1, 0x1, 0x6}, {0x526, 0x401, 0x4f, 0x4, 0xffffffff, 0xc}, {0x0, 0x4, 0xf, 0x2, 0x9, 0x6}, {0x6, 0x6, 0x8, 0x1000, 0x7, 0xffffffff}, {0x9, 0x7ff, 0x3, 0x3, 0x7fff, 0x4}, {0xf, 0x8000, 0xfb1, 0x89b8, 0x3, 0xffffffe9}, {0x8, 0x0, 0x2, 0x1, 0x9, 0x5}, {0xfffffffa, 0x3, 0xb, 0xff, 0xb, 0x9}, {0x1, 0x7, 0x6, 0x10, 0x2, 0x71b}, {0xffff, 0x7f, 0x9, 0x9, 0x1ff, 0x5}, {0x81, 0x8, 0x5e860d83, 0x8, 0x7, 0x2}, {0x100, 0x6c, 0x1000, 0x400, 0x7, 0x401}, {0x9, 0x8, 0xa, 0x4, 0x1, 0x9}, {0x7, 0x800, 0x0, 0x3, 0x10, 0x9ee}, {0x800, 0x9, 0x3576, 0x7, 0x12000000, 0x55a1}, {0x4, 0xc, 0x3, 0x2, 0x0, 0x5}, {0x200, 0x5, 0x3, 0x7, 0x1, 0xa}, {0x6, 0xdde, 0x8, 0x3fe, 0xc2, 0x2}, {0x5, 0xfffffff8, 0x10001, 0x3d3, 0x9, 0x6}, {0xcd5, 0x3, 0x8001, 0x3, 0x3f5f, 0x8}, {0x3216, 0x7, 0x101, 0x7, 0xfffffffa, 0x4}, {0x7, 0x0, 0x4, 0x81, 0x8, 0x9}, {0x6, 0x1, 0xb, 0x5, 0x8, 0x7}, {0x4, 0x6, 0x2972, 0x183, 0x2, 0x401}, {0x0, 0x8000, 0x3, 0x80000001, 0x9, 0x7}, {0x6, 0x8, 0x4, 0x95, 0xffffffff, 0x3}, {0x2, 0xe, 0xe4, 0x3, 0xc47e, 0x7}, {0x9, 0x6, 0x5e, 0x6, 0x8, 0x2}, {0x2, 0xf53, 0xff, 0x8, 0x9, 0x5}, {0xed8f, 0x6, 0x6, 0xedb, 0xc6c, 0x7}, {0x5, 0x9, 0x4, 0x90a, 0xfff, 0x6}, {0x3, 0xfffffffc, 0x2, 0x93073e5, 0xfffff081, 0x84}, {0x9, 0x2, 0x8, 0x4, 0x81, 0x3}, {0x7, 0x3, 0x7, 0xf30, 0xe, 0x9}, {0x2, 0x0, 0x5, 0x8, 0x101}, {0x0, 0x2, 0x78256710, 0x4, 0x15, 0x1}, {0x9, 0x1, 0x7ff, 0x3, 0xe, 0x8000}, {0x8, 0x217d21c6, 0xd, 0x0, 0x7, 0x5}, {0x2, 0x7, 0x5, 0x8, 0x40, 0x2}, {0xd962, 0x6, 0x7, 0xff, 0x7, 0x5f6c}, {0x80000000, 0x7, 0x6, 0x8, 0x1, 0x101}, {0x1, 0x4, 0x4, 0x2, 0x796f, 0xffff}, {0x8843, 0x0, 0x4, 0x9, 0xb1, 0x4}, {0x5, 0x593, 0x1, 0xffffffff, 0x3, 0x3ff}, {0x4, 0x0, 0xffff, 0x2800, 0xe645, 0x599}, {0xee23, 0x101, 0x4, 0x19c2, 0x6, 0x1d7}, {0x7fffffff, 0x4, 0xc, 0x58a7, 0x4, 0x7}, {0x8, 0x1403, 0x3, 0x8, 0x9, 0x2}, {0xffff, 0x6, 0x7, 0x5, 0x8e6d, 0x2}, {0x3, 0x10, 0x6, 0x2, 0x1ff, 0x7fff}, {0x7, 0x10001, 0x8, 0xe38e, 0xcec, 0x3}, {0x1, 0x3, 0x4de1, 0x6, 0x65ca, 0xffffff01}, {0x2, 0x23bc, 0x7, 0x4, 0x2, 0x5}, {0x1, 0x200, 0x3, 0x2, 0x7f, 0x9f7}, {0x800, 0xe8eb, 0x7f, 0x10001, 0x6, 0x2}, {0xf, 0x4, 0x7, 0xffff, 0xcfe, 0x7f}, {0x7, 0x0, 0x4, 0xd, 0x5, 0xef397ef2}, {0x5, 0xf, 0x3, 0x6, 0x8, 0x400}, {0x6, 0x8f9, 0x5, 0x9, 0x0, 0x1}, {0x40, 0x0, 0xd, 0x6, 0x100, 0x10000}, {0xbf, 0x7fff, 0xf87a, 0x7, 0x2, 0x6f}, {0x0, 0xd, 0x3, 0x4061, 0x5, 0x42}, {0x5, 0xfffffff7, 0x80000001, 0x3, 0x3, 0x4}, {0x9288, 0x42, 0xaa3b, 0xf3, 0xc, 0x1}, {0xd, 0xe, 0xe7, 0x6dad, 0x2, 0x8}, {0x2, 0x7fffffff, 0x400, 0x7, 0x0, 0x5}, {0xffff, 0x2, 0x9, 0x1, 0x2, 0x7}, {0x7e67, 0x6, 0x9, 0x9, 0x10001, 0xa}, {0x8, 0x4, 0x3, 0xe, 0x7, 0x8}, {0x2, 0x0, 0x7, 0x9, 0x3ff, 0x6}, {0x9, 0x3, 0x5, 0x2, 0xfffffff7}, {0x3, 0xfffffff9, 0x6, 0x5, 0x28, 0x6}, {0x2, 0x3, 0x80000001, 0x1, 0x5, 0x2}, {0x9, 0x4bb4, 0x1, 0x5, 0x8, 0x4}, {0x1, 0x7d28, 0x0, 0x3d1, 0x7, 0x1}, {0x2a, 0x2, 0x800, 0x0, 0x6, 0x9}, {0x7, 0x58, 0x0, 0x8, 0x4, 0xffff8000}, {0x6, 0xc8d4, 0x0, 0xdc, 0xfff, 0x2}, {0x1, 0x0, 0xd5, 0x8, 0x9, 0x81}, {0x6, 0x1, 0x2, 0x7, 0x0, 0x6}, {0x40, 0x7, 0x3, 0x101, 0x5, 0x1}, {0x9, 0xff, 0x6, 0x5, 0x1aa0aa62, 0xfffffffb}, {0x3, 0x67, 0xe2b2, 0xffffffff, 0x5, 0x4970530}, {0x4, 0x1, 0x5, 0x3e, 0xa4, 0x200}, {0x40b, 0x8, 0x0, 0x1, 0x5, 0xfffffffd}, {0x7f, 0x7ff, 0x0, 0x5, 0x5, 0x5}, {0x5, 0x7, 0x405, 0xbde6, 0x7, 0x70a}, {0x5, 0xfffffff8, 0xb8c, 0x1, 0x0, 0xffff}, {0x5, 0x8, 0x7f, 0x1, 0x6dd3}], [{0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xb16e4b0bce20fd3d}, {0x3, 0x1}, {0x3, 0xd22044d9698804e9}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3ea20db82e8e6d5e}, {0x0, 0x93cd093a66bad76a}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x6, 0x1}, {}, {0x5}, {0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x4}, {0x2}, {0x4}, {0x2}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4}, {0xf204d2403a3fae6f, 0x1}, {0x4}, {0x3, 0x639d733c0565119f}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x3}, {0x548af95a49bea3fd, 0x1}, {0x2759c1da1d108f2f}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x42, 0x5, 0x8, 0xe, 0x1000}, 0x7, 0x3, [{0x5, 0x3, 0x9, 0x6, 0x6, 0xd69}, {0x200, 0xffff, 0x9, 0x4, 0x53, 0xea}]}, [{0x789, 0x5, 0x6, 0x7e8b, 0x4617, 0x9}, {0x6, 0x1ff, 0x9, 0x4db, 0x80000001, 0x1}, {0x6, 0x5, 0x975a, 0x1, 0x5, 0x2}, {0x20000000, 0x1000, 0x7, 0x5, 0xfffffffe, 0x2}, {0xffffffff, 0xc, 0x4, 0x0, 0xd9d, 0x4}, {0x3ff, 0xc, 0x277, 0x6, 0x9, 0xa1a1}, {0x7, 0x7, 0x6, 0x9c5, 0x9, 0x4}, {0xa43d, 0x9, 0xffffffff, 0xac649e7, 0xb44, 0x3}, {0xfffffffe, 0x2, 0x4e5, 0x0, 0xb64, 0xe451}, {0x1, 0x9, 0x3, 0x10001, 0x3, 0x6}, {0x8, 0xb2b, 0xffffe4ac, 0x8, 0x3, 0x7fff}, {0x8, 0x3, 0x2, 0x5, 0xfffffffb, 0x5}, {0x7ff, 0x9df, 0x0, 0x2a72, 0x5f, 0x3}, {0x576294ac, 0x9, 0x8000, 0x0, 0x8, 0x4}, {0x400, 0x3, 0x3, 0x1c41711b, 0x1, 0x4}, {0x100, 0x9, 0xffffffd6, 0x466, 0x9, 0xa}, {0x8000, 0xffffffff, 0x10000, 0x3ff, 0x7fffffff, 0x80000001}, {0x8ed9, 0x9, 0x5, 0xcbb, 0x6, 0x9}, {0x4, 0x9, 0x3, 0x8, 0x80000001, 0x79a5}, {0x3, 0x82, 0x1, 0x80000001, 0x800, 0x8000}, {0x3ff, 0x3, 0x8, 0xc, 0x6, 0x401}, {0x4, 0xaa7, 0x1, 0x3, 0x2}, {0x7, 0x8, 0x7, 0x1, 0x80000000, 0x46a}, {0x99f6, 0xa1ad, 0xfffffff8, 0x5, 0x1000, 0x1}, {0x6, 0x6, 0x2, 0x80, 0x8, 0x3}, {0xffff16c6, 0x17, 0x4, 0x4, 0xe000, 0x3}, {0x7, 0x1, 0x5, 0x2, 0x80, 0x8001}, {0x8, 0xfffffffe, 0x6, 0xfffffffc, 0x7, 0x6}, {0x6, 0x8, 0x5, 0x9, 0x2, 0x4}, {0x101, 0x2, 0x1, 0xffff, 0x0, 0x9}, {0x2, 0xe2, 0x6, 0x800, 0xdd, 0x56a}, {0x9, 0xa62, 0x1, 0x7fffffff, 0x3, 0x8}, {0x5, 0x0, 0x7ff, 0x9, 0x9, 0x6}, {0x1ff, 0x0, 0x7, 0x2, 0x2, 0x100}, {0x5, 0x9, 0x7, 0x40, 0xa5, 0x9}, {0x3, 0xfa68e37, 0xffffffff, 0x3, 0x3, 0x1}, {0x9, 0x7, 0x6, 0xff, 0xd, 0x8}, {0x7ea60633, 0x7, 0x5, 0x6, 0x1, 0x9}, {0x2, 0x8001, 0x561a, 0x8, 0x200, 0x5}, {0x2, 0xaef, 0x938f, 0x4, 0x6, 0x7}, {0x6, 0x5, 0x7, 0x400, 0x10, 0x4}, {0x7f, 0x5, 0x9, 0xe, 0x0, 0x3}, {0x7, 0x7, 0x2a, 0x7fff, 0x7, 0x8}, {0x2, 0x2, 0x80, 0x5, 0x9, 0x8}, {0x5, 0x9, 0x3, 0xfffffffc, 0x93, 0x8000}, {0x2, 0xfff, 0xffffbab6, 0x8, 0x800, 0x8001}, {0xe, 0x1, 0x7fffffff, 0x0, 0x3, 0x401}, {0x6, 0x2, 0x4, 0x7, 0x4c, 0x8}, {0x8, 0x3, 0x5, 0x9, 0x9, 0xf}, {0x8, 0x1ff, 0x3ff, 0x9a82, 0x10000, 0xbfd3}, {0x2, 0x6, 0x7, 0xeed8, 0x7}, {0x80, 0x3, 0x9, 0xfffffffe, 0x6, 0x7}, {0x5, 0x2, 0xa02, 0x4, 0x9, 0xc07}, {0xfffffff1, 0x2b1e, 0x50, 0xfff, 0x2, 0x6}, {0xc, 0x40, 0x3, 0x8001, 0x8001, 0xc}, {0x6, 0x2, 0x9, 0x7, 0x9, 0x7}, {0xff, 0xc59, 0x8001, 0x1, 0x3fa4, 0x1}, {0x3, 0xfff, 0x7a9, 0x4, 0xfffffff9, 0x3}, {0x8, 0x2, 0x5, 0x40, 0x7fff, 0x80}, {0xa00, 0x7, 0xb98d822, 0xba, 0xd8, 0x3}, {0xc6bb, 0x1, 0x7, 0xf, 0x7f, 0x7}, {0x73e2, 0x7ff, 0x2, 0x101, 0x7fffffff, 0x8}, {0x8ee, 0x3, 0x1, 0x2, 0xa4ad, 0x7fffffff}, {0x3, 0x8, 0x6, 0x41b23dc6, 0x7, 0xfffffffa}, {0x6, 0x8, 0x5, 0x13, 0x4, 0x2}, {0x4, 0x2, 0x3, 0x2, 0x9, 0xfffffff9}, {0x1000, 0x1ce00000, 0x0, 0x8, 0x5, 0x1}, {0x6, 0x4, 0x2, 0x2195e754, 0x7, 0x1}, {0x8, 0xfff, 0x4, 0x7fffffff, 0x9, 0xfb}, {0x800, 0x6, 0x8, 0xffff, 0x80, 0xd757}, {0x401, 0x692a, 0x9, 0x9, 0xf07, 0x9}, {0x1, 0x2, 0x80000001, 0x8, 0x9, 0x6501}, {0x5, 0x6, 0xb2bb, 0x6, 0xfffffff2, 0x8}, {0x6, 0x7fff, 0x100, 0x8001, 0x789, 0x3}, {0x200, 0x5, 0x3, 0x0, 0x0, 0x4}, {0xd, 0x3, 0x7, 0x1, 0x21c4, 0xe0}, {0xb, 0x5, 0x8, 0x4000, 0x80000000, 0x4}, {0xbc6, 0x6, 0x5, 0x1, 0x10001, 0x1000}, {0x19409ba7, 0x325d, 0x8, 0x3, 0x80000001, 0x1}, {0x9, 0x4, 0x9, 0x7fffffff, 0x81, 0x1675d6a8}, {0x6, 0x5, 0x9, 0x1, 0x180, 0x4}, {0xeec, 0x8, 0x200, 0x8, 0x0, 0x2}, {0x1, 0x6, 0xfffffff9, 0x7, 0x1, 0x1}, {0xc000000, 0x1, 0xf, 0x2, 0x1ed8c651, 0x8}, {0xff, 0x4, 0x8, 0x5, 0xc, 0x7}, {0x8, 0x0, 0x3, 0x534, 0x0, 0x7}, {0x3, 0x3, 0x8, 0x4, 0x9, 0xff}, {0x6, 0x400, 0x40, 0x3, 0x6ccc, 0x4}, {0x229, 0x2, 0xfb13, 0xfffffffc, 0xef3b, 0xa7}, {0x2, 0x3, 0x7, 0x8, 0x7, 0x8000}, {0x2b, 0x7ff, 0x80000001, 0xc, 0x3, 0xfffffffd}, {0x0, 0x155, 0x3, 0x6, 0x3, 0x1}, {0xfffffff7, 0x5, 0xb0f, 0x3, 0x8, 0x3}, {0x8, 0xa4c5bd, 0x200, 0x2, 0x117, 0x5}, {0x5, 0x1000, 0xe, 0x2, 0xd2, 0x6}, {0x81, 0x2, 0x8, 0x0, 0xffffffff, 0xffff6a89}, {0x2, 0x100, 0x0, 0x89e, 0x3b8, 0xd}, {0x101, 0x1, 0x0, 0x0, 0x3, 0x4}, {0xe51ba739, 0x0, 0x1, 0x800, 0x4, 0x1}, {0x0, 0x3, 0xf52d, 0x9, 0x8, 0x101}, {0xbd, 0x1, 0x0, 0x5, 0x10000, 0xf}, {0x2, 0x3, 0x100, 0xfffff8ec, 0x2}, {0x8b9a, 0x80, 0x400, 0x2, 0x3, 0x2}, {0x7ff, 0x100, 0x28c9, 0x0, 0x0, 0x1ff}, {0xffffffff, 0x7, 0xfffff75b, 0x42d, 0x4b20, 0x3}, {0x1, 0x7fff, 0x10, 0x5, 0x7fffffff, 0x100}, {0x101, 0x800000, 0x9, 0xa, 0x1, 0x7122bc46}, {0x4, 0x3ff, 0xfff, 0x965, 0x9}, {0x1, 0xfffffffa, 0x4d9, 0x7, 0x2, 0x5}, {0xf0a, 0xbc, 0x3, 0x9, 0x9, 0x81}, {0x4, 0x2, 0x7, 0x7, 0xd2, 0x4}, {0x1, 0x10, 0x5, 0xff, 0x7f}, {0x6a56, 0x7, 0x5ded, 0x3, 0x9, 0x101}, {0x7, 0x0, 0x0, 0x1a0a000, 0x9, 0xfffffffd}, {0x27d, 0x6, 0x81, 0x5, 0x96, 0xb}, {0x4030, 0x4a5, 0x9, 0x4, 0x9, 0x7fffffff}, {0x7, 0xfcd, 0x5, 0xde, 0xfff, 0x4}, {0xfffff2d1, 0x5, 0x3f99e0a3, 0xb, 0xffffffff, 0x6}, {0x8, 0x4, 0x2, 0x19b, 0x488, 0x8}, {0x2, 0x8, 0x3, 0x5, 0x6, 0xbf31}, {0x80, 0x9, 0x80, 0x8, 0x3b400000, 0xb}, {0xc0, 0x5, 0x4, 0x6, 0x3, 0xffff}, {0x8, 0x1, 0x5, 0x3, 0xe64b, 0x8}, {0x20, 0x7, 0x80000000, 0x7, 0xa, 0xb}, {0x1, 0x1, 0x9, 0x2, 0x9}, {0xff, 0x7, 0x8001, 0xd, 0x6d, 0x4f9}, {0x3, 0x400, 0x9, 0x4, 0x100, 0x2}, {0x1, 0x0, 0xd, 0x8000, 0xa0bc, 0x7e91}], [{0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x1}, {0x4}, {0x4}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x3}, {}, {0x6, 0x1}, {}, {0x4}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0xd, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x141f4cc097f2fdb}, {0x1, 0x1}, {0x3, 0x5e27899ab34b3207}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}}]}, 0x1df0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe5, 0x40, 0x3, 0x0, 0x30, 0x19}, {0xeeeb1000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x5, 0xab, 0x5, 0x81}, {0x9000, 0x8000000, 0xc, 0xa, 0x4, 0x43, 0x3, 0xfb, 0x80, 0x5, 0xe}, {0x0, 0x9000, 0xc, 0x1, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0xc, 0xd, 0x88, 0x12, 0x4, 0xfd}, {0x54000, 0x54000, 0x4, 0x5, 0x7, 0x2, 0xb, 0x40, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x0, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x2000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) 14.484628ms ago: executing program 4 (id=256): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='test,0x8000000000000000,0x1000\x00', 0x1e) 0s ago: executing program 0 (id=257): r0 = io_uring_setup(0x54fe, &(0x7f0000000080)={0x0, 0x4178, 0x2, 0x3, 0xd1}) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000003c0)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x110) r2 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000500)={0x1, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.715904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.725958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.735826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.745161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.755795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.776549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.785835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.809432][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.818901][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.828003][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.837507][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.851946][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.862359][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.871084][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.882347][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.893600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.909321][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.918188][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.940030][ T4202] device veth1_macvtap entered promiscuous mode [ 70.001194][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.016278][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.026880][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.037693][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.048218][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.058966][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.070569][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.083623][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.094385][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.104577][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.115292][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.125475][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.135988][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.147740][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.177230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.189743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.199095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.207830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.217895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.227426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.237357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.246810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.261667][ T4200] device veth0_vlan entered promiscuous mode [ 70.271865][ T4202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.283704][ T4202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.293085][ T4202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.301908][ T4202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.369517][ T4200] device veth1_vlan entered promiscuous mode [ 70.395395][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.408350][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.429738][ T3100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.441986][ T3100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.470506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.484820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.494328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.502726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.536513][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.545879][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.561057][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.589357][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.598805][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.608897][ T3100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.618437][ T4200] device veth0_macvtap entered promiscuous mode [ 70.625015][ T3100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.647117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.656803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.692660][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.706119][ T4200] device veth1_macvtap entered promiscuous mode [ 70.713803][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.734942][ T3100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.751974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.761739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.766833][ T3100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.791454][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.810394][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.820589][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.831801][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.843367][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.854089][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.864052][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.874985][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.891882][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.900179][ T3100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.910004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.917409][ T3100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.929723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.939142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.948315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.978919][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.998193][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.008808][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.019354][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.029849][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.043452][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.054546][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.070438][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.087649][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.113503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.129738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.142633][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.150492][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.170868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.181961][ T4200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.192321][ T4200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.201082][ T4200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.211858][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.218469][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.229553][ T4200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.289249][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 71.363318][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 71.446408][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 71.463127][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 71.489143][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 72.384696][ T4312] loop1: detected capacity change from 0 to 32768 [ 72.423596][ T4312] ======================================================= [ 72.423596][ T4312] WARNING: The mand mount option has been deprecated and [ 72.423596][ T4312] and is ignored by this kernel. Remove the mand [ 72.423596][ T4312] option from the mount to silence this warning. [ 72.423596][ T4312] ======================================================= [ 72.544025][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.553216][ T4312] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 72.562246][ T26] audit: type=1800 audit(1793139984.160:2): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="c_chmask" dev="configfs" ino=32378 res=0 errno=0 [ 72.566952][ T4311] Config c/1 of g1 needs at least one function. [ 72.593562][ T4311] udc dummy_udc.0: failed to start g1: -22 [ 72.597659][ T4312] JBD2: Ignoring recovery information on journal [ 72.622231][ T4269] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.653010][ T4312] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 72.669812][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.775285][ T26] audit: type=1800 audit(1793139984.160:3): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="UDC" dev="configfs" ino=32379 res=0 errno=0 [ 72.795123][ T26] audit: type=1800 audit(1793139984.320:4): pid=4309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 72.818342][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.920630][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.929171][ T4269] usb 5-1: Using ep0 maxpacket: 32 [ 72.950530][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.975902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.012954][ T4309] syz.1.6 (4309) used greatest stack depth: 18752 bytes left [ 73.082815][ T4269] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 73.092852][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.112882][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 73.141729][ T4269] usb 5-1: config 0 descriptor?? [ 73.237543][ T4269] as10x_usb: device has been detected [ 73.255868][ T4269] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 73.320984][ T4269] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 73.338283][ T4332] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.424653][ T4269] as10x_usb: error during firmware upload part1 [ 73.440648][ T4269] Registered device nBox DVB-T Dongle [ 73.470043][ T4269] usb 5-1: USB disconnect, device number 2 [ 73.561809][ T4269] Unregistered device nBox DVB-T Dongle [ 73.601620][ T4269] as10x_usb: device has been disconnected [ 74.789520][ T4329] loop1: detected capacity change from 0 to 32768 [ 74.990296][ T4329] (syz.1.8,4329,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 75.099576][ T4329] (syz.1.8,4329,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 75.162238][ T4329] (syz.1.8,4329,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 75.246980][ T4329] (syz.1.8,4329,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0x976825fb. Applying ECC. [ 75.277967][ T4329] (syz.1.8,4329,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0x976825fb [ 75.311506][ T4329] (syz.1.8,4329,1):ocfs2_validate_inode_block:1412 ERROR: Checksum failed for dinode 25 [ 75.348908][ T4329] (syz.1.8,4329,1):ocfs2_read_locked_inode:554 ERROR: status = -5 [ 75.374177][ T4329] (syz.1.8,4329,1):_ocfs2_get_system_file_inode:141 ERROR: status = -5 [ 75.400160][ T4329] (syz.1.8,4329,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 75.437614][ T4329] (syz.1.8,4329,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 75.437657][ T4329] (syz.1.8,4329,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 75.462380][ T4352] loop4: detected capacity change from 0 to 32768 [ 75.519617][ T4329] (syz.1.8,4329,1):ocfs2_initialize_super:2279 ERROR: status = -22 [ 75.550019][ T4329] (syz.1.8,4329,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 75.597592][ T4352] XFS (loop4): Mounting V5 Filesystem [ 75.910048][ T4352] XFS (loop4): Ending clean mount [ 76.050771][ T4371] loop5: detected capacity change from 0 to 1839 [ 76.058863][ T4352] XFS (loop4): User initiated shutdown received. [ 76.086901][ T4352] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 76.121567][ T4352] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 76.142273][ T4372] loop5: detected capacity change from 1839 to 5943 [ 76.159334][ T4370] loop3: detected capacity change from 0 to 2048 [ 76.318317][ T4189] XFS (loop4): Unmounting Filesystem [ 77.232170][ T4265] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.277187][ T4377] loop1: detected capacity change from 0 to 32768 [ 77.333895][ T4380] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.393815][ T4377] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 77.416185][ T4377] JBD2: Ignoring recovery information on journal [ 77.583849][ T4377] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 77.633413][ T26] audit: type=1800 audit(1793139989.240:5): pid=4376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 77.708964][ T4391] FAULT_INJECTION: forcing a failure. [ 77.708964][ T4391] name failslab, interval 1, probability 0, space 0, times 1 [ 77.802904][ T4391] CPU: 0 PID: 4391 Comm: syz.2.20 Not tainted syzkaller #0 [ 77.810166][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.820274][ T4391] Call Trace: [ 77.823586][ T4391] [ 77.826548][ T4391] dump_stack_lvl+0x188/0x250 [ 77.831287][ T4391] ? show_regs_print_info+0x20/0x20 [ 77.836529][ T4391] ? load_image+0x410/0x410 [ 77.841071][ T4391] ? __might_sleep+0xf0/0xf0 [ 77.845694][ T4391] ? __lock_acquire+0x7d40/0x7d40 [ 77.850767][ T4391] should_fail+0x383/0x4b0 [ 77.855221][ T4391] should_failslab+0x5/0x20 [ 77.859792][ T4391] slab_pre_alloc_hook+0x51/0xc0 [ 77.864771][ T4391] __kmalloc_node+0x6d/0x3a0 [ 77.869401][ T4391] ? kvmalloc_node+0x84/0x130 [ 77.874123][ T4391] kvmalloc_node+0x84/0x130 [ 77.878677][ T4391] bpf_int_jit_compile+0x3df/0xc4d0 [ 77.883913][ T4391] ? bpf_convert_filter+0x5048/0x51e0 [ 77.889320][ T4391] ? kfree+0xef/0x2a0 [ 77.893339][ T4391] ? bpf_convert_filter+0x507b/0x51e0 [ 77.898761][ T4391] ? stack_trace_snprint+0xe0/0xe0 [ 77.903940][ T4391] ? emit_bpf_dispatcher+0x1050/0x1050 [ 77.909479][ T4391] ? sk_filter_release_rcu+0x110/0x110 [ 77.915010][ T4391] bpf_prog_select_runtime+0x46f/0x7b0 [ 77.920507][ T4391] ? bpf_prog_realloc+0x142/0x1c0 [ 77.925569][ T4391] bpf_prepare_filter+0x100e/0x11b0 [ 77.930824][ T4391] ? seccomp_attach_filter+0xbb0/0xbb0 [ 77.936324][ T4391] ? bpf_prog_create+0x1f0/0x1f0 [ 77.941335][ T4391] ? kmemdup+0x3d/0x50 [ 77.945439][ T4391] ? memcpy+0x3c/0x60 [ 77.949469][ T4391] bpf_prog_create_from_user+0x2cc/0x420 [ 77.955180][ T4391] ? seccomp_attach_filter+0xbb0/0xbb0 [ 77.960685][ T4391] do_seccomp+0x808/0x16a0 [ 77.965146][ T4391] ? __lock_acquire+0x7d40/0x7d40 [ 77.970214][ T4391] ? prctl_set_seccomp+0x60/0x60 [ 77.975190][ T4391] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.981222][ T4391] ? lockdep_hardirqs_on+0x94/0x140 [ 77.986472][ T4391] do_syscall_64+0x4c/0xa0 [ 77.990919][ T4391] ? clear_bhb_loop+0x30/0x80 [ 77.995636][ T4391] ? clear_bhb_loop+0x30/0x80 [ 78.000356][ T4391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.006312][ T4391] RIP: 0033:0x7fb686d78559 [ 78.010759][ T4391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.030400][ T4391] RSP: 002b:00007fb684fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 78.038900][ T4391] RAX: ffffffffffffffda RBX: 00007fb686ffefa0 RCX: 00007fb686d78559 [ 78.046958][ T4391] RDX: 00002000000001c0 RSI: 0000000000000008 RDI: 0000000000000001 [ 78.054963][ T4391] RBP: 00007fb686e0fb20 R08: 0000000000000000 R09: 0000000000000000 [ 78.062964][ T4391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.070965][ T4391] R13: 00007fb686fff038 R14: 00007fb686ffefa0 R15: 00007ffe367f10c8 [ 78.079013][ T4391] [ 78.208756][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 78.226567][ T4396] loop0: detected capacity change from 0 to 256 [ 78.393980][ T4396] FAT-fs (loop0): Directory bread(block 64) failed [ 78.424181][ T4396] FAT-fs (loop0): Directory bread(block 65) failed [ 78.430873][ T4396] FAT-fs (loop0): Directory bread(block 66) failed [ 78.493343][ T4396] FAT-fs (loop0): Directory bread(block 67) failed [ 78.503058][ T26] audit: type=1800 audit(1793139990.110:6): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18" name="c_chmask" dev="configfs" ino=33555 res=0 errno=0 [ 78.525711][ T4396] FAT-fs (loop0): Directory bread(block 68) failed [ 78.525976][ T4406] Config c/1 of g1 needs at least one function. [ 78.547668][ T4396] FAT-fs (loop0): Directory bread(block 69) failed [ 78.560045][ T26] audit: type=1800 audit(1793139990.130:7): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18" name="UDC" dev="configfs" ino=33556 res=0 errno=0 [ 78.582605][ T4406] udc dummy_udc.0: failed to start g1: -22 [ 78.599975][ T4396] FAT-fs (loop0): Directory bread(block 70) failed [ 78.612459][ T4396] FAT-fs (loop0): Directory bread(block 71) failed [ 78.619131][ T4396] FAT-fs (loop0): Directory bread(block 72) failed [ 78.645472][ T4396] FAT-fs (loop0): Directory bread(block 73) failed [ 79.090702][ T4423] FAULT_INJECTION: forcing a failure. [ 79.090702][ T4423] name failslab, interval 1, probability 0, space 0, times 0 [ 79.110240][ T4423] CPU: 0 PID: 4423 Comm: syz.2.27 Not tainted syzkaller #0 [ 79.117505][ T4423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.127596][ T4423] Call Trace: [ 79.130909][ T4423] [ 79.133875][ T4423] dump_stack_lvl+0x188/0x250 [ 79.138614][ T4423] ? show_regs_print_info+0x20/0x20 [ 79.143859][ T4423] ? load_image+0x410/0x410 [ 79.148408][ T4423] ? __might_sleep+0xf0/0xf0 [ 79.153049][ T4423] ? __lock_acquire+0x7d40/0x7d40 [ 79.158133][ T4423] should_fail+0x383/0x4b0 [ 79.162608][ T4423] should_failslab+0x5/0x20 [ 79.167159][ T4423] slab_pre_alloc_hook+0x51/0xc0 [ 79.172152][ T4423] __kmalloc+0x6b/0x340 [ 79.176354][ T4423] ? mpi_alloc+0x73/0x130 [ 79.180739][ T4423] mpi_alloc+0x73/0x130 [ 79.184941][ T4423] mpi_read_raw_data+0x13f/0x970 [ 79.189938][ T4423] ? x509_key_preparse+0x60/0x5d0 [ 79.195022][ T4423] ? asymmetric_key_preparse+0xa5/0x140 [ 79.200658][ T4423] ? __se_sys_add_key+0x34b/0x410 [ 79.205951][ T4423] rsa_set_pub_key+0x18f/0x360 [ 79.210791][ T4423] ? rsa_dec+0x3c0/0x3c0 [ 79.215114][ T4423] pkcs1pad_set_pub_key+0xc0/0x1b0 [ 79.220309][ T4423] public_key_verify_signature+0x56d/0xd40 [ 79.226210][ T4423] ? public_key_free+0x80/0x80 [ 79.231069][ T4423] ? asymmetric_key_id_same+0x63/0xe0 [ 79.236500][ T4423] x509_check_for_self_signed+0x317/0x420 [ 79.242288][ T4423] x509_cert_parse+0x59c/0x7a0 [ 79.247146][ T4423] x509_key_preparse+0x60/0x5d0 [ 79.252056][ T4423] ? down_read+0x1aa/0x2e0 [ 79.256536][ T4423] asymmetric_key_preparse+0xa5/0x140 [ 79.261979][ T4423] key_create_or_update+0x432/0xa40 [ 79.267406][ T4423] ? security_key_permission+0x7c/0xa0 [ 79.272935][ T4423] ? key_type_put+0x20/0x20 [ 79.277503][ T4423] ? lookup_user_key_possessed+0x40/0x40 [ 79.283216][ T4423] ? __might_fault+0xb3/0x110 [ 79.287964][ T4423] __se_sys_add_key+0x34b/0x410 [ 79.292866][ T4423] ? __x64_sys_add_key+0xc0/0xc0 [ 79.297976][ T4423] ? lockdep_hardirqs_on+0x94/0x140 [ 79.303314][ T4423] ? __x64_sys_add_key+0x1c/0xc0 [ 79.308299][ T4423] do_syscall_64+0x4c/0xa0 [ 79.312756][ T4423] ? clear_bhb_loop+0x30/0x80 [ 79.317477][ T4423] ? clear_bhb_loop+0x30/0x80 [ 79.322212][ T4423] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.328153][ T4423] RIP: 0033:0x7fb686d78559 [ 79.332618][ T4423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.352267][ T4423] RSP: 002b:00007fb684fcf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 79.360738][ T4423] RAX: ffffffffffffffda RBX: 00007fb686ffefa0 RCX: 00007fb686d78559 [ 79.368764][ T4423] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 79.376787][ T4423] RBP: 00007fb686e0fb20 R08: ffffffffffffffff R09: 0000000000000000 [ 79.384809][ T4423] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 79.392828][ T4423] R13: 00007fb686fff038 R14: 00007fb686ffefa0 R15: 00007ffe367f10c8 [ 79.400880][ T4423] [ 79.646605][ T4432] FAULT_INJECTION: forcing a failure. [ 79.646605][ T4432] name fail_futex, interval 1, probability 0, space 0, times 1 [ 79.692488][ T4432] CPU: 1 PID: 4432 Comm: syz.0.29 Not tainted syzkaller #0 [ 79.699751][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.709839][ T4432] Call Trace: [ 79.713155][ T4432] [ 79.716117][ T4432] dump_stack_lvl+0x188/0x250 [ 79.720833][ T4432] ? __kasan_kmalloc+0xaf/0xe0 [ 79.725637][ T4432] ? show_regs_print_info+0x20/0x20 [ 79.730992][ T4432] ? load_image+0x410/0x410 [ 79.735557][ T4432] should_fail+0x383/0x4b0 [ 79.740017][ T4432] get_futex_key+0x1a1/0x12d0 [ 79.744747][ T4432] ? futex_wait_restart+0x250/0x250 [ 79.750014][ T4432] futex_lock_pi+0x239/0xbf0 [ 79.754649][ T4432] ? _raw_spin_unlock+0x40/0x40 [ 79.759536][ T4432] ? futex_requeue+0x1920/0x1920 [ 79.764522][ T4432] ? __lock_acquire+0x13b3/0x7d40 [ 79.769613][ T4432] ? futex_wait+0x680/0x680 [ 79.774155][ T4432] ? verify_lock_unused+0x140/0x140 [ 79.779396][ T4432] ? verify_lock_unused+0x140/0x140 [ 79.780352][ T4401] loop1: detected capacity change from 0 to 32768 [ 79.784635][ T4432] do_futex+0xdda/0x12b0 [ 79.784665][ T4432] ? vfs_write+0xaa6/0xd70 [ 79.784701][ T4432] ? futex_exit_release+0x1c0/0x1c0 [ 79.805019][ T4432] ? __context_tracking_exit+0x4c/0x80 [ 79.810539][ T4432] __se_sys_futex+0x389/0x420 [ 79.815262][ T4432] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.821290][ T4432] ? __x64_sys_futex+0xf0/0xf0 [ 79.826110][ T4432] ? __x64_sys_futex+0x1d/0xf0 [ 79.830934][ T4432] do_syscall_64+0x4c/0xa0 [ 79.835385][ T4432] ? clear_bhb_loop+0x30/0x80 [ 79.840095][ T4432] ? clear_bhb_loop+0x30/0x80 [ 79.844809][ T4432] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.850739][ T4432] RIP: 0033:0x7fbfbff38559 [ 79.855213][ T4432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.874857][ T4432] RSP: 002b:00007fbfbe18f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 79.883403][ T4432] RAX: ffffffffffffffda RBX: 00007fbfc01befa0 RCX: 00007fbfbff38559 [ 79.891410][ T4432] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000000 [ 79.899416][ T4432] RBP: 00007fbfbffcfb20 R08: 0000000000000000 R09: 0000000000000002 [ 79.907424][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.915429][ T4432] R13: 00007fbfc01bf038 R14: 00007fbfc01befa0 R15: 00007fff62003ab8 [ 79.923491][ T4432] [ 80.016831][ T4442] kvm [4435]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0x0 [ 80.109496][ T4401] XFS (loop1): Mounting V5 Filesystem [ 80.246269][ T4401] XFS (loop1): Ending clean mount [ 80.283072][ T4459] input: syz0 as /devices/virtual/input/input5 [ 80.352526][ T4190] XFS (loop1): Unmounting Filesystem [ 80.644630][ T4471] configfs-gadget gadget: afunc_bind:1164 Error! [ 80.651336][ T4471] udc dummy_udc.0: failed to start g1: -19 [ 80.658205][ T4471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37'. [ 80.713132][ T26] audit: type=1800 audit(1793139992.240:8): pid=4471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.37" name="c_chmask" dev="configfs" ino=33729 res=0 errno=0 [ 81.214696][ T26] audit: type=1800 audit(1793139992.250:9): pid=4471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.37" name="UDC" dev="configfs" ino=33731 res=0 errno=0 [ 81.612167][ T4264] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 81.700733][ T4484] FAULT_INJECTION: forcing a failure. [ 81.700733][ T4484] name failslab, interval 1, probability 0, space 0, times 0 [ 81.737756][ T4484] CPU: 0 PID: 4484 Comm: syz.2.40 Not tainted syzkaller #0 [ 81.745015][ T4484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.755082][ T4484] Call Trace: [ 81.758368][ T4484] [ 81.761302][ T4484] dump_stack_lvl+0x188/0x250 [ 81.765988][ T4484] ? show_regs_print_info+0x20/0x20 [ 81.771210][ T4484] ? load_image+0x410/0x410 [ 81.775749][ T4484] ? __lock_acquire+0x7d40/0x7d40 [ 81.780812][ T4484] should_fail+0x383/0x4b0 [ 81.785257][ T4484] should_failslab+0x5/0x20 [ 81.789812][ T4484] slab_pre_alloc_hook+0x51/0xc0 [ 81.794855][ T4484] kmem_cache_alloc_trace+0x47/0x290 [ 81.800153][ T4484] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 81.806235][ T4484] fanotify_alloc_overflow_event+0x4a/0x140 [ 81.812448][ T4484] __se_sys_fanotify_init+0x417/0x7b0 [ 81.817833][ T4484] do_syscall_64+0x4c/0xa0 [ 81.822261][ T4484] ? clear_bhb_loop+0x30/0x80 [ 81.827012][ T4484] ? clear_bhb_loop+0x30/0x80 [ 81.831712][ T4484] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.837609][ T4484] RIP: 0033:0x7fb686d78559 [ 81.842028][ T4484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.861661][ T4484] RSP: 002b:00007fb684fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 81.870098][ T4484] RAX: ffffffffffffffda RBX: 00007fb686ffefa0 RCX: 00007fb686d78559 [ 81.878083][ T4484] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000200 [ 81.886061][ T4484] RBP: 00007fb686e0fb20 R08: 0000000000000000 R09: 0000000000000000 [ 81.894036][ T4484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.902014][ T4484] R13: 00007fb686fff038 R14: 00007fb686ffefa0 R15: 00007ffe367f10c8 [ 81.910138][ T4484] [ 81.972413][ T4264] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 82.002644][ T4264] usb 4-1: config 0 has no interface number 0 [ 82.023145][ T4264] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 82.162973][ T4264] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 82.186061][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 82.205110][ T4264] usb 4-1: Manufacturer: syz [ 82.218181][ T4264] usb 4-1: SerialNumber: syz [ 82.260181][ T4264] usb 4-1: config 0 descriptor?? [ 83.440870][ T4500] block device autoloading is deprecated and will be removed. [ 83.476851][ T4264] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 83.501546][ T4264] usb 4-1: USB disconnect, device number 2 [ 83.590372][ T4505] FAULT_INJECTION: forcing a failure. [ 83.590372][ T4505] name failslab, interval 1, probability 0, space 0, times 0 [ 83.602948][ T4503] FAULT_INJECTION: forcing a failure. [ 83.602948][ T4503] name failslab, interval 1, probability 0, space 0, times 0 [ 83.605994][ T4505] CPU: 1 PID: 4505 Comm: syz.2.47 Not tainted syzkaller #0 [ 83.623179][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.633265][ T4505] Call Trace: [ 83.636573][ T4505] [ 83.639531][ T4505] dump_stack_lvl+0x188/0x250 [ 83.644250][ T4505] ? show_regs_print_info+0x20/0x20 [ 83.649472][ T4505] ? load_image+0x410/0x410 [ 83.653997][ T4505] ? __might_sleep+0xf0/0xf0 [ 83.658606][ T4505] ? __lock_acquire+0x7d40/0x7d40 [ 83.663655][ T4505] should_fail+0x383/0x4b0 [ 83.668094][ T4505] should_failslab+0x5/0x20 [ 83.672614][ T4505] slab_pre_alloc_hook+0x51/0xc0 [ 83.677573][ T4505] ? __request_module+0x31c/0x980 [ 83.682612][ T4505] __kmalloc_track_caller+0x69/0x330 [ 83.687912][ T4505] ? __request_module+0x31c/0x980 [ 83.692954][ T4505] kstrdup+0x32/0x70 [ 83.696865][ T4505] __request_module+0x31c/0x980 [ 83.701747][ T4505] ? umd_cleanup+0x110/0x110 [ 83.706376][ T4505] ? crypto_alg_lookup+0x186/0x1d0 [ 83.711527][ T4505] ? __up_read+0x2b4/0x6b0 [ 83.715975][ T4505] ? up_read+0x20/0x20 [ 83.720062][ T4505] ? __crypto_alg_lookup+0x48a/0x4c0 [ 83.725374][ T4505] crypto_alg_mod_lookup+0x96/0x6d0 [ 83.730597][ T4505] crypto_alloc_tfm_node+0x14e/0x360 [ 83.735927][ T4505] sctp_inet_listen+0x5b0/0xa90 [ 83.740831][ T4505] ? sctp_sock_migrate+0xf70/0xf70 [ 83.745963][ T4505] ? aa_sk_perm+0x7dc/0x910 [ 83.750491][ T4505] ? aa_af_perm+0x340/0x340 [ 83.755021][ T4505] ? bpf_lsm_socket_listen+0x5/0x10 [ 83.760240][ T4505] __sys_listen+0x19d/0x220 [ 83.764761][ T4505] __x64_sys_listen+0x56/0x60 [ 83.769454][ T4505] do_syscall_64+0x4c/0xa0 [ 83.773883][ T4505] ? clear_bhb_loop+0x30/0x80 [ 83.778573][ T4505] ? clear_bhb_loop+0x30/0x80 [ 83.783268][ T4505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.789192][ T4505] RIP: 0033:0x7fb686d78559 [ 83.793636][ T4505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.813265][ T4505] RSP: 002b:00007fb684fcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 83.821706][ T4505] RAX: ffffffffffffffda RBX: 00007fb686ffefa0 RCX: 00007fb686d78559 [ 83.829706][ T4505] RDX: 0000000000000000 RSI: 00000000fffffff8 RDI: 0000000000000003 [ 83.837709][ T4505] RBP: 00007fb686e0fb20 R08: 0000000000000000 R09: 0000000000000000 [ 83.845717][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.853708][ T4505] R13: 00007fb686fff038 R14: 00007fb686ffefa0 R15: 00007ffe367f10c8 [ 83.861715][ T4505] [ 83.870719][ T4503] CPU: 1 PID: 4503 Comm: syz.1.46 Not tainted syzkaller #0 [ 83.877978][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.888064][ T4503] Call Trace: [ 83.891403][ T4503] [ 83.894368][ T4503] dump_stack_lvl+0x188/0x250 [ 83.899094][ T4503] ? show_regs_print_info+0x20/0x20 [ 83.904343][ T4503] ? load_image+0x410/0x410 [ 83.908892][ T4503] ? __might_sleep+0xf0/0xf0 [ 83.913522][ T4503] ? __lock_acquire+0x7d40/0x7d40 [ 83.918624][ T4503] should_fail+0x383/0x4b0 [ 83.923104][ T4503] should_failslab+0x5/0x20 [ 83.927644][ T4503] slab_pre_alloc_hook+0x51/0xc0 [ 83.932629][ T4503] kmem_cache_alloc_node+0x47/0x2c0 [ 83.937867][ T4503] ? __alloc_skb+0xf4/0x750 [ 83.942417][ T4503] __alloc_skb+0xf4/0x750 [ 83.946812][ T4503] tc_ctl_action+0x785/0xba0 [ 83.951456][ T4503] ? tcf_free_cookie_rcu+0x40/0x40 [ 83.956607][ T4503] ? do_raw_spin_unlock+0x11d/0x230 [ 83.961886][ T4503] ? tcf_free_cookie_rcu+0x40/0x40 [ 83.967029][ T4503] rtnetlink_rcv_msg+0x7f1/0xf10 [ 83.972013][ T4503] ? lock_chain_count+0x20/0x20 [ 83.976909][ T4503] ? rtnetlink_bind+0x80/0x80 [ 83.981651][ T4503] ? __local_bh_enable_ip+0x136/0x1c0 [ 83.987063][ T4503] ? lockdep_hardirqs_on+0x94/0x140 [ 83.992303][ T4503] ? __local_bh_enable_ip+0x136/0x1c0 [ 83.997720][ T4503] ? _local_bh_enable+0xa0/0xa0 [ 84.002637][ T4503] ? __dev_queue_xmit+0x1b64/0x2e50 [ 84.007899][ T4503] ? dev_queue_xmit+0x20/0x20 [ 84.012620][ T4503] ? memcpy+0x3c/0x60 [ 84.016632][ T4503] ? __copy_skb_header+0x3ba/0x4f0 [ 84.021797][ T4503] netlink_rcv_skb+0x1e9/0x430 [ 84.026734][ T4503] ? rtnetlink_bind+0x80/0x80 [ 84.031457][ T4503] ? netlink_ack+0xb10/0xb10 [ 84.036102][ T4503] netlink_unicast+0x78f/0x940 [ 84.040915][ T4503] netlink_sendmsg+0x8ba/0xbe0 [ 84.045727][ T4503] ? netlink_getsockopt+0x570/0x570 [ 84.050970][ T4503] ? aa_sock_msg_perm+0x94/0x150 [ 84.055954][ T4503] ? apparmor_socket_sendmsg+0x88/0x230 [ 84.061546][ T4503] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 84.066872][ T4503] ? security_socket_sendmsg+0x7c/0xa0 [ 84.072374][ T4503] ? netlink_getsockopt+0x570/0x570 [ 84.077610][ T4503] ____sys_sendmsg+0x5be/0x8f0 [ 84.082425][ T4503] ? __sys_sendmsg_sock+0x30/0x30 [ 84.087502][ T4503] ? import_iovec+0x6f/0xa0 [ 84.092050][ T4503] ___sys_sendmsg+0x236/0x2e0 [ 84.096780][ T4503] ? __sys_sendmsg+0x290/0x290 [ 84.101623][ T4503] __se_sys_sendmsg+0x1b7/0x2a0 [ 84.106516][ T4503] ? __x64_sys_sendmsg+0x80/0x80 [ 84.111489][ T4503] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 84.117520][ T4503] ? lockdep_hardirqs_on+0x94/0x140 [ 84.122805][ T4503] do_syscall_64+0x4c/0xa0 [ 84.127264][ T4503] ? clear_bhb_loop+0x30/0x80 [ 84.131984][ T4503] ? clear_bhb_loop+0x30/0x80 [ 84.136705][ T4503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.142644][ T4503] RIP: 0033:0x7f4bd3286559 [ 84.147097][ T4503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.166740][ T4503] RSP: 002b:00007f4bd14dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.175239][ T4503] RAX: ffffffffffffffda RBX: 00007f4bd350cfa0 RCX: 00007f4bd3286559 [ 84.183252][ T4503] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000004 [ 84.191280][ T4503] RBP: 00007f4bd331db20 R08: 0000000000000000 R09: 0000000000000000 [ 84.199286][ T4503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.207294][ T4503] R13: 00007f4bd350d038 R14: 00007f4bd350cfa0 R15: 00007fff9f2743c8 [ 84.215318][ T4503] [ 84.386494][ T4510] FAULT_INJECTION: forcing a failure. [ 84.386494][ T4510] name failslab, interval 1, probability 0, space 0, times 0 [ 84.440709][ T4510] CPU: 0 PID: 4510 Comm: syz.3.48 Not tainted syzkaller #0 [ 84.447982][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.458069][ T4510] Call Trace: [ 84.461378][ T4510] [ 84.464330][ T4510] dump_stack_lvl+0x188/0x250 [ 84.469080][ T4510] ? show_regs_print_info+0x20/0x20 [ 84.474316][ T4510] ? load_image+0x410/0x410 [ 84.478861][ T4510] ? __might_sleep+0xf0/0xf0 [ 84.483485][ T4510] ? __lock_acquire+0x7d40/0x7d40 [ 84.488551][ T4510] should_fail+0x383/0x4b0 [ 84.493016][ T4510] should_failslab+0x5/0x20 [ 84.497549][ T4510] slab_pre_alloc_hook+0x51/0xc0 [ 84.502518][ T4510] kmem_cache_alloc_trace+0x47/0x290 [ 84.507837][ T4510] ? kstrdup_quotable_cmdline+0x55/0x1f0 [ 84.513508][ T4510] kstrdup_quotable_cmdline+0x55/0x1f0 [ 84.518995][ T4510] ? _raw_spin_lock_irq+0xb7/0xf0 [ 84.524057][ T4510] __report_access+0x45/0x300 [ 84.528775][ T4510] ? lockdep_hardirqs_on+0x94/0x140 [ 84.534012][ T4510] task_work_run+0x125/0x1a0 [ 84.538649][ T4510] exit_to_user_mode_loop+0x10f/0x130 [ 84.544052][ T4510] exit_to_user_mode_prepare+0xee/0x180 [ 84.549629][ T4510] syscall_exit_to_user_mode+0x16/0x40 [ 84.555122][ T4510] do_syscall_64+0x58/0xa0 [ 84.559573][ T4510] ? clear_bhb_loop+0x30/0x80 [ 84.564284][ T4510] ? clear_bhb_loop+0x30/0x80 [ 84.569000][ T4510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.574928][ T4510] RIP: 0033:0x7f10c1a0d559 [ 84.579376][ T4510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.599036][ T4510] RSP: 002b:00007f10bfc64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 84.607490][ T4510] RAX: ffffffffffffffff RBX: 00007f10c1c93fa0 RCX: 00007f10c1a0d559 [ 84.615494][ T4510] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010 [ 84.623488][ T4510] RBP: 00007f10c1aa4b20 R08: 0000000000000000 R09: 0000000000000000 [ 84.631490][ T4510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.639660][ T4510] R13: 00007f10c1c94038 R14: 00007f10c1c93fa0 R15: 00007ffdfb41c0a8 [ 84.647687][ T4510] [ 84.747354][ T4510] ptrace attach of "(null)"[4202] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4510] [ 84.782849][ T26] audit: type=1800 audit(1793139996.380:10): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.50" name="c_chmask" dev="configfs" ino=33867 res=0 errno=0 [ 85.664535][ T4525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.50'. [ 85.682185][ T26] audit: type=1800 audit(1793139997.270:11): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.50" name="UDC" dev="configfs" ino=33868 res=0 errno=0 [ 85.721588][ T4522] loop2: detected capacity change from 0 to 32768 [ 85.760807][ T4522] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 85.771654][ T4522] JBD2: Ignoring recovery information on journal [ 85.802300][ T4522] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 85.830281][ T26] audit: type=1800 audit(1793139997.430:12): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.49" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 86.015784][ T4529] loop1: detected capacity change from 0 to 512 [ 86.228586][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 86.423083][ T4542] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 86.581514][ T23] cfg80211: failed to load regulatory.db [ 86.713524][ T4547] Set syz1 is full, maxelem 1029 reached [ 87.229911][ T4518] loop4: detected capacity change from 0 to 32768 [ 87.352753][ T4518] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.51 (4518) [ 87.411673][ T4554] loop1: detected capacity change from 0 to 1024 [ 87.440013][ T4518] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 87.463039][ T4518] BTRFS info (device loop4): using free space tree [ 87.478989][ T4560] netlink: 'syz.0.64': attribute type 12 has an invalid length. [ 87.484485][ T4518] BTRFS info (device loop4): has skinny extents [ 87.496965][ T4560] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 87.576078][ T4560] netlink: 148 bytes leftover after parsing attributes in process `syz.0.64'. [ 87.637077][ T4560] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 87.656197][ T4560] netlink: 'syz.0.64': attribute type 2 has an invalid length. [ 87.673275][ T4560] netlink: 11 bytes leftover after parsing attributes in process `syz.0.64'. [ 87.693325][ T4554] hfsplus: invalid length 1280 has been corrected to 255 [ 87.719791][ T26] audit: type=1800 audit(1793139999.320:13): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.65" name="c_chmask" dev="configfs" ino=34909 res=0 errno=0 [ 87.758747][ T4568] netlink: 'syz.0.64': attribute type 12 has an invalid length. [ 87.770939][ T4568] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 87.779605][ T4568] netlink: 148 bytes leftover after parsing attributes in process `syz.0.64'. [ 87.794576][ T4568] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 87.805877][ T4568] netlink: 'syz.0.64': attribute type 2 has an invalid length. [ 87.815947][ T4568] netlink: 11 bytes leftover after parsing attributes in process `syz.0.64'. [ 87.828873][ T4578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.65'. [ 87.840333][ T4568] Zero length message leads to an empty skb [ 87.866021][ T4554] FAULT_INJECTION: forcing a failure. [ 87.866021][ T4554] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 87.882595][ T26] audit: type=1800 audit(1793139999.360:14): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.65" name="UDC" dev="configfs" ino=34910 res=0 errno=0 [ 88.072253][ T4554] CPU: 0 PID: 4554 Comm: syz.1.60 Not tainted syzkaller #0 [ 88.079527][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 88.089610][ T4554] Call Trace: [ 88.092925][ T4554] [ 88.095908][ T4554] dump_stack_lvl+0x188/0x250 [ 88.100640][ T4554] ? show_regs_print_info+0x20/0x20 [ 88.105910][ T4554] ? load_image+0x410/0x410 [ 88.110457][ T4554] ? verify_lock_unused+0x140/0x140 [ 88.115730][ T4554] should_fail+0x383/0x4b0 [ 88.120196][ T4554] prepare_alloc_pages+0x1e3/0x5b0 [ 88.125352][ T4554] __alloc_pages+0x11b/0x480 [ 88.129988][ T4554] ? zone_statistics+0x170/0x170 [ 88.134979][ T4554] ? alloc_pages+0x452/0x560 [ 88.139619][ T4554] new_slab+0xc0/0x4b0 [ 88.143727][ T4554] ___slab_alloc+0x807/0xdd0 [ 88.148356][ T4554] ? hfsplus_alloc_inode+0x16/0x30 [ 88.153509][ T4554] ? hfsplus_alloc_inode+0x16/0x30 [ 88.158655][ T4554] kmem_cache_alloc+0xf0/0x280 [ 88.163458][ T4554] ? hfsplus_mark_inode_dirty+0x30/0x30 [ 88.169045][ T4554] hfsplus_alloc_inode+0x16/0x30 [ 88.174019][ T4554] new_inode_pseudo+0x5f/0x210 [ 88.178826][ T4554] new_inode+0x25/0x1d0 [ 88.183026][ T4554] ? from_kgid+0x14f/0x6a0 [ 88.187478][ T4554] hfsplus_new_inode+0x51/0x6b0 [ 88.192368][ T4554] ? apparmor_path_mknod+0x1b6/0x230 [ 88.197705][ T4554] hfsplus_mknod+0x99/0x270 [ 88.202259][ T4554] vfs_mknod+0x430/0x4c0 [ 88.206552][ T4554] do_mknodat+0x453/0x630 [ 88.210935][ T4554] ? may_open+0x400/0x400 [ 88.215310][ T4554] __x64_sys_mknod+0x8a/0xa0 [ 88.219972][ T4554] do_syscall_64+0x4c/0xa0 [ 88.224620][ T4554] ? clear_bhb_loop+0x30/0x80 [ 88.229334][ T4554] ? clear_bhb_loop+0x30/0x80 [ 88.234051][ T4554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.239987][ T4554] RIP: 0033:0x7f4bd3286559 [ 88.244439][ T4554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.264078][ T4554] RSP: 002b:00007f4bd14dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 88.272536][ T4554] RAX: ffffffffffffffda RBX: 00007f4bd350cfa0 RCX: 00007f4bd3286559 [ 88.280544][ T4554] RDX: 0000000002000008 RSI: 000000000000c000 RDI: 0000200000000280 [ 88.288558][ T4554] RBP: 00007f4bd331db20 R08: 0000000000000000 R09: 0000000000000000 [ 88.296566][ T4554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.304576][ T4554] R13: 00007f4bd350d038 R14: 00007f4bd350cfa0 R15: 00007fff9f2743c8 [ 88.312607][ T4554] [ 88.348755][ T4518] BTRFS error (device loop4): open_ctree failed: -12 [ 89.278960][ T4594] loop0: detected capacity change from 0 to 32768 [ 89.359362][ T4190] hfsplus: invalid length 1280 has been corrected to 255 [ 89.431594][ T4594] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 89.451442][ T4594] JBD2: Ignoring recovery information on journal [ 89.487968][ T4594] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 89.518790][ T26] audit: type=1800 audit(1793140001.120:15): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.66" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 89.870581][ T4605] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 89.940351][ T4200] ocfs2: Unmounting device (7,0) on (node local) [ 90.159326][ T26] audit: type=1800 audit(1793140001.760:16): pid=4614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.71" name="c_chmask" dev="configfs" ino=34944 res=0 errno=0 [ 90.301563][ T4350] hfsplus: invalid length 1280 has been corrected to 255 [ 90.430970][ T4289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.600317][ T4289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.722413][ T4266] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.743961][ T4289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.011865][ T4289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.034850][ T4612] loop4: detected capacity change from 0 to 40427 [ 91.102202][ T4266] usb 1-1: Using ep0 maxpacket: 16 [ 91.151600][ T4612] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.176432][ T4612] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.211639][ T26] audit: type=1800 audit(1793140002.810:17): pid=4630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.75" name="c_chmask" dev="configfs" ino=34145 res=0 errno=0 [ 91.243428][ T4630] udc-core: couldn't find an available UDC or it's busy [ 91.252422][ T4266] usb 1-1: config 0 interface 0 altsetting 37 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 91.270637][ T4630] netlink: 36 bytes leftover after parsing attributes in process `syz.2.75'. [ 91.280575][ T26] audit: type=1800 audit(1793140002.850:18): pid=4630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.75" name="UDC" dev="configfs" ino=34151 res=0 errno=0 [ 91.300431][ T4266] usb 1-1: config 0 interface 0 altsetting 37 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.350479][ T4612] F2FS-fs (loop4): invalid crc value [ 91.357317][ T4266] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.364180][ T4266] usb 1-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00 [ 91.373447][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.391468][ T4266] usb 1-1: config 0 descriptor?? [ 91.453411][ T4633] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.461597][ T4612] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.657568][ T4612] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 91.686655][ T4612] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.897976][ T4266] apple 0003:05AC:0250.0001: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 91.953297][ T4266] input: HID 05ac:0250 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:0250.0001/input/input7 [ 92.096044][ T4266] apple 0003:05AC:0250.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:0250] on usb-dummy_hcd.0-1/input0 [ 92.174027][ T4633] chnl_net:caif_netlink_parms(): no params data found [ 92.404350][ T4659] loop3: detected capacity change from 0 to 64 [ 92.580915][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.610214][ T4633] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.640684][ T4633] device bridge_slave_0 entered promiscuous mode [ 92.664781][ T4633] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.682138][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.698175][ T4633] device bridge_slave_1 entered promiscuous mode [ 92.793475][ T4633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.812637][ T4663] loop3: detected capacity change from 0 to 1024 [ 92.839433][ T4633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.884561][ T4319] usb 1-1: USB disconnect, device number 2 [ 92.900796][ T4663] EXT4-fs (loop3): inline encryption not supported [ 92.939422][ T4663] EXT4-fs (loop3): inline encryption not supported [ 93.000166][ T4663] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 93.019172][ T4663] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.024527][ T4633] team0: Port device team_slave_0 added [ 93.123094][ T4633] team0: Port device team_slave_1 added [ 93.242394][ T4633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.251883][ T4663] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,inlinecrypt,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 93.292186][ T4633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.318764][ T4663] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.359318][ T4633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.370471][ T4319] Bluetooth: hci1: command 0x0409 tx timeout [ 93.503775][ T4475] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm kworker/u4:11: lblock 0 mapped to illegal pblock 0 (length 1) [ 93.536563][ T4633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.562519][ T4633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.568229][ T4475] EXT4-fs (loop3): Remounting filesystem read-only [ 93.684908][ T4633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.928829][ T4633] device hsr_slave_0 entered promiscuous mode [ 93.960685][ T4633] device hsr_slave_1 entered promiscuous mode [ 94.052417][ T4633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.105288][ T4633] Cannot create hsr debugfs directory [ 95.019640][ T4689] loop3: detected capacity change from 0 to 32768 [ 95.069832][ T4665] loop4: detected capacity change from 0 to 40427 [ 95.076742][ T4689] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 95.091227][ T4689] JBD2: Ignoring recovery information on journal [ 95.131539][ T4689] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.169428][ T26] audit: type=1800 audit(1793140006.770:19): pid=4688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.82" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 95.232233][ T4665] F2FS-fs (loop4): invalid crc value [ 95.330499][ T4665] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.475407][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 95.517896][ T4202] ocfs2: Unmounting device (7,3) on (node local) [ 95.540734][ T4678] loop0: detected capacity change from 0 to 32768 [ 95.586357][ T4665] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 95.616177][ T4665] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 95.658334][ T4665] attempt to access beyond end of device [ 95.658334][ T4665] loop4: rw=2049, want=40968, limit=40427 [ 95.702465][ T4678] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.83 (4678) [ 95.829390][ T4678] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 95.849343][ T4678] BTRFS info (device loop0): setting nodatacow, compression disabled [ 95.902523][ T4678] BTRFS info (device loop0): disabling tree log [ 95.908835][ T4678] BTRFS info (device loop0): turning on async discard [ 95.956615][ T4678] BTRFS info (device loop0): max_inline at 0 [ 95.997908][ T4678] BTRFS info (device loop0): using free space tree [ 96.025567][ T4678] BTRFS info (device loop0): has skinny extents [ 96.154497][ T4633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.222979][ T4633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.302779][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.313019][ T4633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.384700][ T4633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.572450][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 96.693238][ T23] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 96.713546][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 96.769531][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.795101][ T4633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.806614][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 96.820646][ T4750] loop4: detected capacity change from 0 to 512 [ 96.907430][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 96.934199][ T4633] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.941686][ T4750] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 96.972149][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.992608][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.014255][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.019621][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.050052][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.063550][ T4750] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 97.115252][ T4721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4721) [ 97.159185][ T4289] device hsr_slave_0 left promiscuous mode [ 97.178026][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 97.190537][ T4289] device hsr_slave_1 left promiscuous mode [ 97.222408][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.240195][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.293890][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.314715][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.356082][ T4762] loop2: detected capacity change from 0 to 4096 [ 97.362804][ T4289] device bridge_slave_1 left promiscuous mode [ 97.363608][ T23] usb 4-1: usb_control_msg returned -32 [ 97.374481][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.402832][ T23] usbtmc 4-1:16.0: can't read capabilities [ 97.488699][ T4762] ntfs3: loop2: Failed to load $Extend. [ 97.494974][ T4289] device bridge_slave_0 left promiscuous mode [ 97.501225][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.523260][ T4595] Bluetooth: hci1: command 0x040f tx timeout [ 97.627399][ T4289] device veth1_macvtap left promiscuous mode [ 97.642881][ T4289] device veth0_macvtap left promiscuous mode [ 97.669165][ T4289] device veth1_vlan left promiscuous mode [ 97.672984][ T4265] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.690353][ T4289] device veth0_vlan left promiscuous mode [ 97.762284][ T4770] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 97.773660][ T21] usb 4-1: USB disconnect, device number 3 [ 97.932420][ T4265] usb 5-1: Using ep0 maxpacket: 8 [ 98.043443][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 98.053169][ T4265] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 98.061961][ T4265] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.097313][ T4265] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.108405][ T4265] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.119877][ T4265] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.133514][ T4265] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.142884][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.199096][ T4195] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 98.207667][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 98.281289][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 98.337138][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 98.369268][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.390338][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.412930][ T4783] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 98.442391][ T4265] usb 5-1: usb_control_msg returned -32 [ 98.448014][ T4265] usbtmc 5-1:16.0: can't read capabilities [ 98.536906][ T4289] bond0 (unregistering): Released all slaves [ 98.626682][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.660303][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.680630][ T3100] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.687814][ T3100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.708442][ T3100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.740194][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.754811][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.771975][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.779161][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.817111][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.854314][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.870655][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.884570][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.922843][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.943634][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.963492][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.978903][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.990589][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.048614][ T23] usb 5-1: USB disconnect, device number 3 [ 99.062347][ T4793] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 99.078420][ T4633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.107227][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.120711][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.133835][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.330969][ T4808] FAULT_INJECTION: forcing a failure. [ 99.330969][ T4808] name failslab, interval 1, probability 0, space 0, times 0 [ 99.358746][ T4808] CPU: 0 PID: 4808 Comm: syz.2.108 Not tainted syzkaller #0 [ 99.366098][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.376184][ T4808] Call Trace: [ 99.379499][ T4808] [ 99.382460][ T4808] dump_stack_lvl+0x188/0x250 [ 99.387181][ T4808] ? show_regs_print_info+0x20/0x20 [ 99.392419][ T4808] ? load_image+0x410/0x410 [ 99.396960][ T4808] ? __might_sleep+0xf0/0xf0 [ 99.401595][ T4808] ? __lock_acquire+0x7d40/0x7d40 [ 99.406757][ T4808] should_fail+0x383/0x4b0 [ 99.411213][ T4808] should_failslab+0x5/0x20 [ 99.415754][ T4808] slab_pre_alloc_hook+0x51/0xc0 [ 99.420747][ T4808] kmem_cache_alloc_trace+0x47/0x290 [ 99.426078][ T4808] ? sctp_association_new+0x86/0x2400 [ 99.431494][ T4808] sctp_association_new+0x86/0x2400 [ 99.436742][ T4808] sctp_connect_new_asoc+0x2da/0x6a0 [ 99.442068][ T4808] ? __sctp_connect+0xd80/0xd80 [ 99.446961][ T4808] ? sctp_get_af_specific+0x25/0x70 [ 99.452199][ T4808] ? sctp_endpoint_lookup_assoc+0xab/0x230 [ 99.458052][ T4808] __sctp_connect+0x5b3/0xd80 [ 99.462783][ T4808] ? sctp_send_asconf+0x170/0x170 [ 99.467854][ T4808] ? __local_bh_enable_ip+0x136/0x1c0 [ 99.473261][ T4808] ? lockdep_hardirqs_on+0x94/0x140 [ 99.478495][ T4808] ? __local_bh_enable_ip+0x136/0x1c0 [ 99.483897][ T4808] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 99.489479][ T4808] ? security_sctp_bind_connect+0x85/0xb0 [ 99.495241][ T4808] sctp_setsockopt_connectx+0x101/0x1a0 [ 99.500850][ T4808] sctp_setsockopt+0x8eb/0xf80 [ 99.505648][ T4808] ? sock_common_recvmsg+0x1c0/0x1c0 [ 99.510978][ T4808] __sys_setsockopt+0x2bf/0x3d0 [ 99.515872][ T4808] __x64_sys_setsockopt+0xb1/0xc0 [ 99.520946][ T4808] do_syscall_64+0x4c/0xa0 [ 99.525403][ T4808] ? clear_bhb_loop+0x30/0x80 [ 99.530120][ T4808] ? clear_bhb_loop+0x30/0x80 [ 99.534861][ T4808] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.540789][ T4808] RIP: 0033:0x7fb686d78559 [ 99.545232][ T4808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.564887][ T4808] RSP: 002b:00007fb684fcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.573340][ T4808] RAX: ffffffffffffffda RBX: 00007fb686ffefa0 RCX: 00007fb686d78559 [ 99.581341][ T4808] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 99.589347][ T4808] RBP: 00007fb686e0fb20 R08: 000000000000001c R09: 0000000000000000 [ 99.597351][ T4808] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 99.605353][ T4808] R13: 00007fb686fff038 R14: 00007fb686ffefa0 R15: 00007ffe367f10c8 [ 99.613390][ T4808] [ 99.634133][ T4758] Bluetooth: hci1: command 0x0419 tx timeout [ 99.723850][ T4811] loop3: detected capacity change from 0 to 8192 [ 100.071553][ T4811] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 100.288276][ T4811] REISERFS (device loop3): using ordered data mode [ 100.430565][ T4811] reiserfs: using flush barriers [ 100.654467][ T4811] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.746578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.762386][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.772609][ T4633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.792981][ T4811] REISERFS (device loop3): checking transaction log (loop3) [ 100.865658][ T4811] REISERFS (device loop3): Using rupasov hash to sort names [ 100.902617][ T4811] REISERFS (device loop3): using 3.5.x disk format [ 100.931793][ T4811] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 100.976131][ T4811] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.018329][ T4811] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.080583][ T4811] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 101.132518][ T4755] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.143203][ T4811] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 101.242294][ T4758] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.257845][ T4811] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.302719][ T4811] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.335446][ T4811] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.398294][ T4811] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.421112][ T4804] loop0: detected capacity change from 0 to 32768 [ 101.428527][ T4811] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.453068][ T4811] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.485411][ T4811] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 101.508464][ T4804] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 101.533181][ T4804] BTRFS info (device loop0): setting nodatasum [ 101.552318][ T4758] usb 3-1: Using ep0 maxpacket: 8 [ 101.557670][ T4755] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 101.572368][ T4804] BTRFS info (device loop0): force zlib compression, level 3 [ 101.579201][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.593098][ T4838] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.606590][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.613245][ T4804] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 101.647859][ T4838] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.662252][ T4804] BTRFS info (device loop0): use lzo compression, level 0 [ 101.669437][ T4804] BTRFS info (device loop0): turning on flush-on-commit [ 101.683379][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.693173][ T4758] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 101.709155][ T4758] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.718604][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.721765][ T4804] BTRFS info (device loop0): enabling auto defrag [ 101.734246][ T4838] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.754309][ T4633] device veth0_vlan entered promiscuous mode [ 101.756450][ T4758] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.771121][ T4755] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 101.779430][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.791705][ T4838] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 101.806641][ T4804] BTRFS info (device loop0): max_inline at 4096 [ 101.813553][ T4755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.813665][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.821948][ T4804] BTRFS info (device loop0): using free space tree [ 101.842124][ T4755] usb 5-1: Product: syz [ 101.846476][ T4758] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.862198][ T4755] usb 5-1: Manufacturer: syz [ 101.866845][ T4755] usb 5-1: SerialNumber: syz [ 101.890820][ T4804] BTRFS info (device loop0): has skinny extents [ 101.897741][ T4758] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.925623][ T4633] device veth1_vlan entered promiscuous mode [ 101.933630][ T4758] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.943212][ T4758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.105031][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.120377][ T4804] BTRFS info (device loop0): enabling ssd optimizations [ 102.128737][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.183079][ T4755] usb 5-1: Limiting number of CPorts to U8_MAX [ 102.202585][ T4755] usb 5-1: Unknown endpoint type found, address 0x03 [ 102.225759][ T4633] device veth0_macvtap entered promiscuous mode [ 102.232612][ T4758] usb 3-1: usb_control_msg returned -32 [ 102.238225][ T4758] usbtmc 3-1:16.0: can't read capabilities [ 102.275304][ T4755] usb 5-1: Not enough endpoints found in device, aborting! [ 102.284671][ T4633] device veth1_macvtap entered promiscuous mode [ 102.372906][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.396615][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.461780][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.482154][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.502132][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.522106][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.531966][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.583107][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.632420][ T4633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.641761][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.668195][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.683423][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.721172][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.771874][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.802642][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.845811][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.872621][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.884267][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.895071][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.905928][ T4633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.927638][ T4633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.949807][ T4633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.992449][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.021261][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.045182][ T4633] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.072333][ T4633] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.103271][ T4633] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.112450][ T4880] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 103.132275][ T4633] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.249142][ T4473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.269522][ T4473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.287934][ T4758] usb 3-1: USB disconnect, device number 2 [ 103.320592][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.355163][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.370634][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.401490][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.500480][ T4721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4721) [ 103.980347][ T4909] loop3: detected capacity change from 0 to 7 [ 104.032990][ T4909] Dev loop3: unable to read RDB block 7 [ 104.057451][ T4909] loop3: unable to read partition table [ 104.075423][ T4909] loop3: partition table beyond EOD, truncated [ 104.099379][ T4909] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 104.411129][ T4755] usb 5-1: USB disconnect, device number 4 [ 104.663220][ T4890] loop3: detected capacity change from 0 to 32768 [ 104.800535][ T4932] loop4: detected capacity change from 0 to 4096 [ 104.862210][ T4348] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 104.873776][ T4932] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 105.022176][ T4756] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.044916][ T4936] FAULT_INJECTION: forcing a failure. [ 105.044916][ T4936] name failslab, interval 1, probability 0, space 0, times 0 [ 105.078584][ T26] audit: type=1800 audit(1793140016.680:20): pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.121" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 105.142049][ T4932] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 105.167796][ T4936] CPU: 1 PID: 4936 Comm: syz.3.124 Not tainted syzkaller #0 [ 105.175145][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.185236][ T4936] Call Trace: [ 105.188547][ T4936] [ 105.191502][ T4936] dump_stack_lvl+0x188/0x250 [ 105.196190][ T4936] ? show_regs_print_info+0x20/0x20 [ 105.201698][ T4936] ? load_image+0x410/0x410 [ 105.206511][ T4936] ? __might_sleep+0xf0/0xf0 [ 105.211131][ T4936] ? __lock_acquire+0x7d40/0x7d40 [ 105.216173][ T4936] should_fail+0x383/0x4b0 [ 105.220611][ T4936] should_failslab+0x5/0x20 [ 105.225131][ T4936] slab_pre_alloc_hook+0x51/0xc0 [ 105.230203][ T4936] kmem_cache_alloc_trace+0x47/0x290 [ 105.235542][ T4936] ? snd_pcm_oss_change_params_locked+0x14d/0x3cf0 [ 105.242092][ T4936] snd_pcm_oss_change_params_locked+0x14d/0x3cf0 [ 105.248482][ T4936] ? rcu_lock_release+0x20/0x20 [ 105.253358][ T4936] ? kasan_save_stack+0x4b/0x60 [ 105.258224][ T4936] ? kasan_save_stack+0x35/0x60 [ 105.263119][ T4936] ? kasan_record_aux_stack+0xb8/0x100 [ 105.268694][ T4936] ? task_work_add+0x2f/0x1d0 [ 105.273400][ T4936] ? snd_pcm_oss_sync+0x2b5/0xb10 [ 105.278440][ T4936] ? __x64_sys_close+0x34/0x70 [ 105.283239][ T4936] ? do_syscall_64+0x4c/0xa0 [ 105.287873][ T4936] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 105.293001][ T4936] ? mutex_lock_io_nested+0x60/0x60 [ 105.298216][ T4936] ? __fsnotify_parent+0x72a/0x820 [ 105.303573][ T4936] snd_pcm_oss_sync+0x370/0xb10 [ 105.308468][ T4936] snd_pcm_oss_release+0xfe/0x240 [ 105.313515][ T4936] ? snd_pcm_oss_open+0x1e60/0x1e60 [ 105.318728][ T4936] __fput+0x212/0x8c0 [ 105.322842][ T4936] task_work_run+0x125/0x1a0 [ 105.327468][ T4936] exit_to_user_mode_loop+0x10f/0x130 [ 105.332854][ T4936] exit_to_user_mode_prepare+0xee/0x180 [ 105.338415][ T4936] syscall_exit_to_user_mode+0x16/0x40 [ 105.343906][ T4936] do_syscall_64+0x58/0xa0 [ 105.348356][ T4936] ? clear_bhb_loop+0x30/0x80 [ 105.353048][ T4936] ? clear_bhb_loop+0x30/0x80 [ 105.357731][ T4936] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.363651][ T4936] RIP: 0033:0x7f10c1a0d559 [ 105.368092][ T4936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.387703][ T4936] RSP: 002b:00007f10bfc64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 105.396150][ T4936] RAX: 0000000000000000 RBX: 00007f10c1c93fa0 RCX: 00007f10c1a0d559 [ 105.404138][ T4936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 105.412132][ T4936] RBP: 00007f10c1aa4b20 R08: 0000000000000000 R09: 0000000000000000 [ 105.420118][ T4936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.428118][ T4936] R13: 00007f10c1c94038 R14: 00007f10c1c93fa0 R15: 00007ffdfb41c0a8 [ 105.436113][ T4936] [ 105.492411][ T4348] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 105.510786][ T4348] usb 6-1: config 0 has no interface number 0 [ 105.540053][ T4348] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.552565][ T4756] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.606306][ T4756] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.616311][ T4550] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 105.635685][ T4189] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 105.642028][ T4189] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 105.687784][ T4189] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 105.708643][ T4550] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 105.722532][ T4348] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 105.742491][ T4189] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 105.758290][ T4189] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 105.772315][ T4348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.802175][ T4348] usb 6-1: Product: syz [ 105.813245][ T4348] usb 6-1: Manufacturer: syz [ 105.827873][ T4348] usb 6-1: SerialNumber: syz [ 105.883729][ T4348] usb 6-1: config 0 descriptor?? [ 105.908096][ T4756] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 105.929992][ T4756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.941432][ T4348] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 105.979451][ T4756] usb 1-1: Product: syz [ 105.994606][ T4953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.125'. [ 106.012393][ T4756] usb 1-1: Manufacturer: syz [ 106.027268][ T4756] usb 1-1: SerialNumber: syz [ 106.126517][ T4958] syz.2.128 uses obsolete (PF_INET,SOCK_PACKET) [ 106.147739][ T4883] usb 6-1: USB disconnect, device number 2 [ 106.166621][ T4883] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 106.183143][ T4958] device syzkaller1 entered promiscuous mode [ 106.335569][ T4756] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 106.398178][ T4969] loop4: detected capacity change from 0 to 2048 [ 106.461029][ T4969] NILFS (loop4): invalid segment: Magic number mismatch [ 106.485985][ T4969] NILFS (loop4): trying rollback from an earlier position [ 106.500524][ T4972] loop2: detected capacity change from 0 to 512 [ 106.524466][ T4969] NILFS (loop4): recovery complete [ 106.554088][ T4974] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.574070][ T4883] usb 1-1: USB disconnect, device number 3 [ 106.582738][ C1] usblp0: nonzero read bulk status received: -108 [ 106.720173][ T4972] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.758265][ T4972] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.793302][ T4927] usblp0: removed [ 106.829863][ T4972] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.131: corrupted inode contents [ 106.900860][ T4972] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #2: comm syz.2.131: mark_inode_dirty error [ 106.918785][ T4972] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.131: corrupted inode contents [ 106.977243][ T4972] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.131: mark_inode_dirty error [ 107.387515][ T4977] loop3: detected capacity change from 0 to 32768 [ 107.567294][ T4977] XFS (loop3): Mounting V5 Filesystem [ 107.825237][ T4977] XFS (loop3): Ending clean mount [ 108.999087][ T5034] loop4: detected capacity change from 0 to 2048 [ 109.028717][ T4202] XFS (loop3): Unmounting Filesystem [ 109.128290][ T5039] loop2: detected capacity change from 0 to 2048 [ 109.199136][ T5034] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 109.315432][ T5034] EXT4-fs (loop4): shut down requested (0) [ 109.439100][ T5039] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.513024][ T5022] loop5: detected capacity change from 0 to 32768 [ 109.524055][ T5039] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.700464][ T5022] XFS (loop5): Mounting V5 Filesystem [ 109.795405][ T5039] fs-verity: sha512 using implementation "sha512-avx2" [ 109.921381][ T5022] XFS (loop5): Ending clean mount [ 109.981755][ T5064] jffs2: notice: (5064) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.005441][ T5022] XFS (loop5): Quotacheck needed: Please wait. [ 110.142968][ T26] audit: type=1800 audit(1793140021.750:21): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.144" name="c_chmask" dev="configfs" ino=36047 res=0 errno=0 [ 110.153291][ T5071] configfs-gadget gadget: afunc_bind:1164 Error! [ 110.187606][ T5022] XFS (loop5): Quotacheck: Done. [ 110.232492][ T5071] udc dummy_udc.0: failed to start g1: -19 [ 110.258758][ T26] audit: type=1800 audit(1793140021.750:22): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.144" name="UDC" dev="configfs" ino=36048 res=0 errno=0 [ 110.397986][ T5079] FAULT_INJECTION: forcing a failure. [ 110.397986][ T5079] name failslab, interval 1, probability 0, space 0, times 0 [ 110.418337][ T5079] CPU: 1 PID: 5079 Comm: syz.4.148 Not tainted syzkaller #0 [ 110.425770][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.435864][ T5079] Call Trace: [ 110.439175][ T5079] [ 110.442137][ T5079] dump_stack_lvl+0x188/0x250 [ 110.446862][ T5079] ? show_regs_print_info+0x20/0x20 [ 110.452105][ T5079] ? load_image+0x410/0x410 [ 110.456649][ T5079] ? __might_sleep+0xf0/0xf0 [ 110.461312][ T5079] ? __lock_acquire+0x7d40/0x7d40 [ 110.466373][ T5079] ? account_kernel_stack+0x1b1/0x390 [ 110.471779][ T5079] ? lockdep_hardirqs_on+0x94/0x140 [ 110.477014][ T5079] should_fail+0x383/0x4b0 [ 110.481475][ T5079] should_failslab+0x5/0x20 [ 110.486009][ T5079] slab_pre_alloc_hook+0x51/0xc0 [ 110.490982][ T5079] ? prepare_creds+0x3c/0x610 [ 110.495722][ T5079] kmem_cache_alloc+0x3d/0x280 [ 110.500556][ T5079] prepare_creds+0x3c/0x610 [ 110.505102][ T5079] copy_creds+0x146/0xce0 [ 110.509475][ T5079] copy_process+0x8d7/0x3e70 [ 110.514129][ T5079] ? __pidfd_prepare+0x140/0x140 [ 110.519101][ T5079] ? userfaultfd_unmap_complete+0x28f/0x310 [ 110.525052][ T5079] ? verify_lock_unused+0x140/0x140 [ 110.530296][ T5079] kernel_clone+0x23f/0x990 [ 110.534842][ T5079] ? create_io_thread+0x180/0x180 [ 110.539953][ T5079] __x64_sys_clone+0x19a/0x210 [ 110.544770][ T5079] ? __ia32_sys_vfork+0x130/0x130 [ 110.549849][ T5079] ? lockdep_hardirqs_on+0x94/0x140 [ 110.555101][ T5079] do_syscall_64+0x4c/0xa0 [ 110.559556][ T5079] ? clear_bhb_loop+0x30/0x80 [ 110.564271][ T5079] ? clear_bhb_loop+0x30/0x80 [ 110.568984][ T5079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.574925][ T5079] RIP: 0033:0x7f1e025ef559 [ 110.579377][ T5079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.599008][ T5079] RSP: 002b:00007f1e00845fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 110.607463][ T5079] RAX: ffffffffffffffda RBX: 00007f1e02875fa0 RCX: 00007f1e025ef559 [ 110.615466][ T5079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 110.623490][ T5079] RBP: 00007f1e02686b20 R08: 0000000000000000 R09: 0000000000000000 [ 110.631494][ T5079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 110.639510][ T5079] R13: 00007f1e02876038 R14: 00007f1e02875fa0 R15: 00007fff7b75b2a8 [ 110.647531][ T5079] [ 110.784309][ T4633] XFS (loop5): Unmounting Filesystem [ 110.824407][ T4884] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.075929][ T5098] loop4: detected capacity change from 0 to 32768 [ 112.079353][ T4884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.093628][ T4756] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 112.142919][ T4884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.163875][ T4884] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 112.179022][ T4884] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.189591][ T4884] usb 3-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 112.223330][ T4884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.231867][ T5098] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 112.254550][ T5098] JBD2: Ignoring recovery information on journal [ 112.282695][ T5080] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.290687][ T5080] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.572026][ T4884] usb 3-1: USB disconnect, device number 3 [ 112.745370][ T5117] Cannot find add_set index 0 as target [ 112.816363][ T5098] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 112.854028][ T26] audit: type=1800 audit(1793140024.460:23): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.151" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 113.144974][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 113.162218][ T4756] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.182122][ T4756] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.191917][ T4756] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.220751][ T4756] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.238975][ T4756] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 113.250216][ T4756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.260752][ T4756] usb 1-1: config 0 descriptor?? [ 113.494784][ T26] audit: type=1800 audit(1793140025.100:24): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.157" name="c_chmask" dev="configfs" ino=35806 res=0 errno=0 [ 113.544441][ T5132] loop4: detected capacity change from 0 to 1024 [ 113.708346][ T5124] loop3: detected capacity change from 0 to 32768 [ 113.741304][ T5132] hfsplus: request for non-existent node 1280 in B*Tree [ 113.771437][ T5132] hfsplus: request for non-existent node 1280 in B*Tree [ 113.787248][ T4756] input: HID 17ef:6047 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:6047.0002/input/input10 [ 113.804835][ T4721] Dev loop3 SGI disklabel: csum bad, label corrupted [ 113.824564][ T5124] Dev loop3 SGI disklabel: csum bad, label corrupted [ 113.901661][ T4756] lenovo 0003:17EF:6047.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 114.016626][ T26] audit: type=1800 audit(1793140025.620:25): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.159" name="UDC" dev="configfs" ino=36113 res=0 errno=0 [ 114.043366][ T5136] udc-core: couldn't find an available UDC or it's busy [ 114.299972][ T5128] loop5: detected capacity change from 0 to 32768 [ 114.564929][ T5149] input: syz0 as /devices/virtual/input/input11 [ 114.934068][ T5143] loop3: detected capacity change from 0 to 32768 [ 114.982159][ T4268] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 115.075246][ T5143] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 115.118239][ T5143] capability: warning: `syz.3.161' uses deprecated v2 capabilities in a way that may be insecure [ 115.154483][ T4202] ocfs2: Unmounting device (7,3) on (node local) [ 116.072255][ T4268] usb 6-1: Using ep0 maxpacket: 8 [ 116.079302][ T5157] loop2: detected capacity change from 0 to 32768 [ 116.152505][ T5157] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 116.163484][ T5157] JBD2: Ignoring recovery information on journal [ 116.194862][ T4268] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 116.222149][ T4268] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.297951][ T5157] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.347573][ T4268] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.350471][ T26] audit: type=1800 audit(1793140027.950:26): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.165" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 116.426400][ T4268] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.517489][ T4268] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.660183][ T21] usb 1-1: USB disconnect, device number 4 [ 116.673769][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 116.676220][ T4268] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.690007][ T4268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.837422][ T26] audit: type=1800 audit(1793140028.440:27): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.171" name="c_chmask" dev="configfs" ino=36937 res=0 errno=0 [ 116.853952][ T5185] configfs-gadget gadget: afunc_bind:1164 Error! [ 116.884690][ T5177] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.894815][ T5185] udc dummy_udc.0: failed to start g1: -19 [ 116.904168][ T26] audit: type=1800 audit(1793140028.450:28): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.171" name="UDC" dev="configfs" ino=36938 res=0 errno=0 [ 116.982318][ T4268] usb 6-1: GET_CAPABILITIES returned 0 [ 116.989469][ T4268] usbtmc 6-1:16.0: can't read capabilities [ 117.202440][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.212152][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.221294][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.230397][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.239513][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.248625][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.257727][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.266842][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.275955][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.285077][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.294202][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.303313][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.312413][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.321509][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.330613][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.339718][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.355670][ T4265] usb 6-1: USB disconnect, device number 3 [ 117.565278][ T5208] loop2: detected capacity change from 0 to 128 [ 117.646094][ T5208] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.693047][ T5212] loop4: detected capacity change from 0 to 4096 [ 117.702860][ T5208] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.717953][ T5212] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 117.813521][ T26] audit: type=1800 audit(1793140029.420:29): pid=5215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="c_chmask" dev="configfs" ino=37018 res=0 errno=0 [ 117.845579][ T5215] configfs-gadget gadget: afunc_bind:1164 Error! [ 117.853823][ T5212] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 117.859881][ T26] audit: type=1800 audit(1793140029.450:30): pid=5215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="UDC" dev="configfs" ino=37019 res=0 errno=0 [ 117.898266][ T5212] ntfs3: loop4: Failed to load $Extend. [ 117.955582][ T5215] udc dummy_udc.0: failed to start g1: -19 [ 119.508574][ T5252] loop4: detected capacity change from 0 to 32768 [ 119.615988][ T5252] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 119.630717][ T5252] JBD2: Ignoring recovery information on journal [ 119.687864][ T5252] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.719337][ T26] audit: type=1800 audit(1793140031.320:31): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.181" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 119.759959][ T5225] loop5: detected capacity change from 0 to 32768 [ 119.838316][ T4595] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 120.066319][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 120.302418][ T4595] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.542430][ T4595] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 120.571942][ T4595] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 120.602621][ T4595] usb 1-1: Product: syz [ 120.618570][ T4595] usb 1-1: Manufacturer: syz [ 120.651646][ T4595] usb 1-1: SerialNumber: syz [ 120.679420][ T4595] usb 1-1: config 0 descriptor?? [ 120.719149][ T5274] FAULT_INJECTION: forcing a failure. [ 120.719149][ T5274] name failslab, interval 1, probability 0, space 0, times 0 [ 120.743650][ T4595] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 120.762517][ T4595] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 120.770473][ T5274] CPU: 0 PID: 5274 Comm: syz.5.188 Not tainted syzkaller #0 [ 120.777799][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.787890][ T5274] Call Trace: [ 120.791201][ T5274] [ 120.794155][ T5274] dump_stack_lvl+0x188/0x250 [ 120.798869][ T5274] ? show_regs_print_info+0x20/0x20 [ 120.804108][ T5274] ? load_image+0x410/0x410 [ 120.808654][ T5274] ? __might_sleep+0xf0/0xf0 [ 120.813285][ T5274] ? __lock_acquire+0x7d40/0x7d40 [ 120.818355][ T5274] should_fail+0x383/0x4b0 [ 120.822811][ T5274] should_failslab+0x5/0x20 [ 120.827347][ T5274] slab_pre_alloc_hook+0x51/0xc0 [ 120.832326][ T5274] kmem_cache_alloc_trace+0x47/0x290 [ 120.837653][ T5274] ? futex_lock_pi+0xa31/0xbf0 [ 120.842461][ T5274] futex_lock_pi+0xa31/0xbf0 [ 120.847099][ T5274] ? futex_requeue+0x1920/0x1920 [ 120.852082][ T5274] ? __lock_acquire+0x13b3/0x7d40 [ 120.857172][ T5274] ? verify_lock_unused+0x140/0x140 [ 120.862408][ T5274] ? verify_lock_unused+0x140/0x140 [ 120.867651][ T5274] do_futex+0xdda/0x12b0 [ 120.871932][ T5274] ? vfs_write+0xaa6/0xd70 [ 120.876395][ T5274] ? futex_exit_release+0x1c0/0x1c0 [ 120.881655][ T5274] ? __context_tracking_exit+0x4c/0x80 [ 120.887157][ T5274] __se_sys_futex+0x389/0x420 [ 120.891871][ T5274] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.897898][ T5274] ? __x64_sys_futex+0xf0/0xf0 [ 120.902725][ T5274] ? __x64_sys_futex+0x1d/0xf0 [ 120.907560][ T5274] do_syscall_64+0x4c/0xa0 [ 120.912027][ T5274] ? clear_bhb_loop+0x30/0x80 [ 120.916743][ T5274] ? clear_bhb_loop+0x30/0x80 [ 120.921464][ T5274] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.927388][ T5274] RIP: 0033:0x7fa19e743559 [ 120.931837][ T5274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.951476][ T5274] RSP: 002b:00007fa19c99a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.959934][ T5274] RAX: ffffffffffffffda RBX: 00007fa19e9c9fa0 RCX: 00007fa19e743559 [ 120.967964][ T5274] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000000 [ 120.975980][ T5274] RBP: 00007fa19e7dab20 R08: 0000000000000000 R09: 0000000000000002 [ 120.983998][ T5274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.992002][ T5274] R13: 00007fa19e9ca038 R14: 00007fa19e9c9fa0 R15: 00007fff7578f8b8 [ 121.000029][ T5274] [ 121.014654][ T4595] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 121.024703][ T4595] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 121.035453][ T4595] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 121.046826][ T4595] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 121.056539][ T4595] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 121.070826][ T4595] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 121.088999][ T4595] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 121.099331][ T4595] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 121.110639][ T4595] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 121.157875][ T4595] usb 1-1: USB disconnect, device number 5 [ 121.192691][ T4595] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 121.235987][ T4595] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 121.274764][ T4595] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 121.294304][ T4595] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 121.314609][ T4595] keyspan 1-1:0.0: device disconnected [ 121.408655][ T5289] loop3: detected capacity change from 0 to 256 [ 121.480311][ T5289] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 121.662185][ T26] audit: type=1800 audit(1793140033.260:32): pid=5289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.190" name="file1" dev="loop3" ino=1048636 res=0 errno=0 [ 121.691060][ T5289] attempt to access beyond end of device [ 121.691060][ T5289] loop3: rw=0, want=4285, limit=256 [ 122.276807][ T5315] loop3: detected capacity change from 0 to 32768 [ 122.505448][ T5316] loop4: detected capacity change from 0 to 32768 [ 122.819873][ T5316] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 122.830950][ T5316] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 122.868178][ T5316] JBD2: Ignoring recovery information on journal [ 123.006096][ T5315] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 123.144080][ T5316] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 123.179433][ T26] audit: type=1800 audit(1793140034.780:33): pid=5311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.197" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 123.474861][ T5324] FAULT_INJECTION: forcing a failure. [ 123.474861][ T5324] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.596350][ T5324] CPU: 0 PID: 5324 Comm: syz.5.202 Not tainted syzkaller #0 [ 123.603710][ T5324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 123.613810][ T5324] Call Trace: [ 123.617119][ T5324] [ 123.620075][ T5324] dump_stack_lvl+0x188/0x250 [ 123.624930][ T5324] ? show_regs_print_info+0x20/0x20 [ 123.630172][ T5324] ? load_image+0x410/0x410 [ 123.634723][ T5324] ? __lock_acquire+0x7d40/0x7d40 [ 123.639792][ T5324] should_fail+0x383/0x4b0 [ 123.644252][ T5324] _copy_to_user+0x2e/0x130 [ 123.648788][ T5324] ucma_create_id+0x2ce/0x370 [ 123.653503][ T5324] ? __lock_acquire+0x7d40/0x7d40 [ 123.658569][ T5324] ? ucma_close+0x170/0x170 [ 123.663151][ T5324] ? __might_fault+0xb3/0x110 [ 123.667869][ T5324] ? _copy_from_user+0x111/0x170 [ 123.672850][ T5324] ucma_write+0x24e/0x2f0 [ 123.677224][ T5324] ? ucma_get_global_nl_info+0x70/0x70 [ 123.682717][ T5324] ? common_file_perm+0x171/0x1c0 [ 123.687781][ T5324] ? fsnotify_perm+0x5d/0x560 [ 123.692490][ T5324] ? security_file_permission+0x75/0xa0 [ 123.698077][ T5324] ? ucma_get_global_nl_info+0x70/0x70 [ 123.703585][ T5324] vfs_write+0x304/0xd70 [ 123.707878][ T5324] ? file_end_write+0x250/0x250 [ 123.712780][ T5324] ? __fget_files+0x402/0x470 [ 123.717509][ T5324] ? __fdget_pos+0x1e2/0x370 [ 123.722137][ T5324] ? ksys_write+0x70/0x260 [ 123.726597][ T5324] ksys_write+0x153/0x260 [ 123.730968][ T5324] ? __ia32_sys_read+0x80/0x80 [ 123.735769][ T5324] ? lockdep_hardirqs_on+0x94/0x140 [ 123.741036][ T5324] do_syscall_64+0x4c/0xa0 [ 123.745499][ T5324] ? clear_bhb_loop+0x30/0x80 [ 123.750209][ T5324] ? clear_bhb_loop+0x30/0x80 [ 123.754928][ T5324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.760854][ T5324] RIP: 0033:0x7fa19e743559 [ 123.765305][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.784946][ T5324] RSP: 002b:00007fa19c99a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.793400][ T5324] RAX: ffffffffffffffda RBX: 00007fa19e9c9fa0 RCX: 00007fa19e743559 [ 123.801409][ T5324] RDX: 0000000000000020 RSI: 0000200000000500 RDI: 0000000000000003 [ 123.809420][ T5324] RBP: 00007fa19e7dab20 R08: 0000000000000000 R09: 0000000000000000 [ 123.817421][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.825427][ T5324] R13: 00007fa19e9ca038 R14: 00007fa19e9c9fa0 R15: 00007fff7578f8b8 [ 123.833459][ T5324] [ 123.869677][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 124.227779][ T26] audit: type=1800 audit(1793140035.830:34): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.201" name="c_chmask" dev="configfs" ino=37206 res=0 errno=0 [ 124.283906][ T5335] configfs-gadget gadget: afunc_bind:1164 Error! [ 124.331274][ T26] audit: type=1800 audit(1793140035.870:35): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.201" name="UDC" dev="configfs" ino=37207 res=0 errno=0 [ 124.354996][ T5335] udc dummy_udc.0: failed to start g1: -19 [ 124.573801][ T5346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.201'. [ 125.532361][ T4319] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.562902][ T5387] loop5: detected capacity change from 0 to 512 [ 125.601017][ T5387] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.686238][ T5387] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.770068][ T5387] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.217: invalid indirect mapped block 9 (level 0) [ 125.811679][ T5387] EXT4-fs (loop5): 1 truncate cleaned up [ 125.818824][ T5387] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 125.891866][ T5387] syz.5.217 (pid 5387) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 125.942216][ T4268] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.972510][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.000288][ T4319] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 126.012118][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.075988][ T4319] usb 5-1: config 0 descriptor?? [ 126.196570][ T4268] usb 1-1: Using ep0 maxpacket: 8 [ 126.219868][ T5399] loop5: detected capacity change from 0 to 512 [ 126.304884][ T5399] EXT4-fs (loop5): 1 truncate cleaned up [ 126.310583][ T5399] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.328508][ T4268] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 126.362306][ T4268] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.422313][ T4319] usbhid 5-1:0.0: can't add hid device: -71 [ 126.428383][ T4319] usbhid: probe of 5-1:0.0 failed with error -71 [ 126.434156][ T4268] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.444864][ T26] audit: type=1804 audit(1793140038.040:36): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.219" name="/newroot/22/file0/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 126.486295][ T4319] usb 5-1: USB disconnect, device number 5 [ 126.522265][ T4268] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.547696][ T5405] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.219: bg 0: block 465: padding at end of block bitmap is not set [ 126.581099][ T4268] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.622215][ T4268] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.653687][ T5407] netlink: 1152 bytes leftover after parsing attributes in process `syz.2.220'. [ 126.678645][ T5405] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 126.679951][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.746450][ T5405] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.219: invalid indirect mapped block 234881024 (level 0) [ 126.922382][ T4319] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.022238][ T4268] usb 1-1: usb_control_msg returned -32 [ 127.029065][ T4268] usbtmc 1-1:16.0: can't read capabilities [ 127.068898][ T5416] syz.2.221 (5416) used greatest stack depth: 18608 bytes left [ 127.222228][ T4319] usb 5-1: Using ep0 maxpacket: 32 [ 127.319542][ T5429] jffs2: notice: (5429) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.368139][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.389375][ T4319] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 127.410396][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.426029][ T4319] usb 5-1: config 0 descriptor?? [ 127.479474][ T4319] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 127.509832][ T4319] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 127.613324][ T5442] loop2: detected capacity change from 0 to 2048 [ 127.627233][ T4319] usb 1-1: USB disconnect, device number 6 [ 127.657286][ T5434] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -71 [ 127.667250][ T5442] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=4096, location=4096 [ 127.685053][ T4202] ocfs2: Unmounting device (7,3) on (node local) [ 127.700429][ T5442] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 127.724199][ T5442] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 127.734773][ T4265] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 127.742724][ T5442] UDF-fs: Scanning with blocksize 512 failed [ 127.761527][ T5442] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 127.771935][ T5442] UDF-fs: Scanning with blocksize 1024 failed [ 127.820390][ T5442] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 127.874014][ T5442] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 127.881913][ T5442] UDF-fs: Scanning with blocksize 2048 failed [ 127.919073][ T5442] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 127.944577][ T5442] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 127.986599][ T5442] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 127.994463][ T4265] usb 6-1: Using ep0 maxpacket: 8 [ 128.002376][ T5442] UDF-fs: Scanning with blocksize 4096 failed [ 128.018934][ T5442] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 128.118521][ T4265] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 128.130318][ T4265] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.147068][ T4265] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.168679][ T4265] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.238192][ T4265] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.267714][ T4265] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.287684][ T4265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.302399][ T5461] FAULT_INJECTION: forcing a failure. [ 128.302399][ T5461] name failslab, interval 1, probability 0, space 0, times 0 [ 128.316042][ T5461] CPU: 1 PID: 5461 Comm: syz.0.228 Not tainted syzkaller #0 [ 128.323369][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 128.333496][ T5461] Call Trace: [ 128.336806][ T5461] [ 128.339918][ T5461] dump_stack_lvl+0x188/0x250 [ 128.344643][ T5461] ? lock_chain_count+0x20/0x20 [ 128.349557][ T5461] ? show_regs_print_info+0x20/0x20 [ 128.354803][ T5461] ? load_image+0x410/0x410 [ 128.359377][ T5461] should_fail+0x383/0x4b0 [ 128.363864][ T5461] should_failslab+0x5/0x20 [ 128.368411][ T5461] slab_pre_alloc_hook+0x51/0xc0 [ 128.373395][ T5461] kmem_cache_alloc_trace+0x47/0x290 [ 128.378734][ T5461] ? llc_sap_open+0xda/0x330 [ 128.383377][ T5461] llc_sap_open+0xda/0x330 [ 128.387845][ T5461] llc_ui_bind+0x6fd/0xc50 [ 128.392316][ T5461] ? llc_ui_release+0x450/0x450 [ 128.397216][ T5461] ? bpf_lsm_socket_bind+0x5/0x10 [ 128.402286][ T5461] ? security_socket_bind+0x7c/0xa0 [ 128.407534][ T5461] __sys_bind+0x2e9/0x3e0 [ 128.411931][ T5461] ? __ia32_sys_socketpair+0xb0/0xb0 [ 128.417286][ T5461] __x64_sys_bind+0x76/0x80 [ 128.421831][ T5461] do_syscall_64+0x4c/0xa0 [ 128.426300][ T5461] ? clear_bhb_loop+0x30/0x80 [ 128.431016][ T5461] ? clear_bhb_loop+0x30/0x80 [ 128.435729][ T5461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.441659][ T5461] RIP: 0033:0x7fbfbff38559 [ 128.446217][ T5461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.465861][ T5461] RSP: 002b:00007fbfbe18f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 128.474318][ T5461] RAX: ffffffffffffffda RBX: 00007fbfc01befa0 RCX: 00007fbfbff38559 [ 128.482346][ T5461] RDX: 0000000000000010 RSI: 0000200000000dc0 RDI: 0000000000000004 [ 128.490352][ T5461] RBP: 00007fbfbffcfb20 R08: 0000000000000000 R09: 0000000000000000 [ 128.498364][ T5461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.506372][ T5461] R13: 00007fbfc01bf038 R14: 00007fbfc01befa0 R15: 00007fff62003ab8 [ 128.514405][ T5461] [ 128.842228][ T4265] usb 6-1: usb_control_msg returned -32 [ 128.847982][ T4265] usbtmc 6-1:16.0: can't read capabilities [ 129.293380][ T26] audit: type=1800 audit(1793140040.900:37): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.227" name="c_chmask" dev="configfs" ino=36672 res=0 errno=0 [ 129.315379][ T5485] configfs-gadget gadget: afunc_bind:1164 Error! [ 129.321820][ T5485] udc dummy_udc.0: failed to start g1: -19 [ 129.378530][ T5485] netlink: 36 bytes leftover after parsing attributes in process `syz.2.227'. [ 130.212680][ T4755] usb 6-1: USB disconnect, device number 4 [ 130.233877][ T5483] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -71 [ 130.267077][ T4756] usb 5-1: USB disconnect, device number 6 [ 130.316994][ T4756] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 130.339773][ T26] audit: type=1800 audit(1793140040.920:38): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.227" name="UDC" dev="configfs" ino=36673 res=0 errno=0 [ 130.712357][ T4755] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 130.716405][ T5505] FAULT_INJECTION: forcing a failure. [ 130.716405][ T5505] name failslab, interval 1, probability 0, space 0, times 0 [ 130.782338][ T5505] CPU: 0 PID: 5505 Comm: syz.2.238 Not tainted syzkaller #0 [ 130.789717][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 130.799808][ T5505] Call Trace: [ 130.803125][ T5505] [ 130.806096][ T5505] dump_stack_lvl+0x188/0x250 [ 130.810826][ T5505] ? show_regs_print_info+0x20/0x20 [ 130.816067][ T5505] ? load_image+0x410/0x410 [ 130.820617][ T5505] ? __might_sleep+0xf0/0xf0 [ 130.825241][ T5505] ? __lock_acquire+0x7d40/0x7d40 [ 130.830313][ T5505] should_fail+0x383/0x4b0 [ 130.834772][ T5505] should_failslab+0x5/0x20 [ 130.839315][ T5505] slab_pre_alloc_hook+0x51/0xc0 [ 130.844296][ T5505] kmem_cache_alloc_trace+0x47/0x290 [ 130.849627][ T5505] ? loop_add+0x54/0x890 [ 130.853927][ T5505] loop_add+0x54/0x890 [ 130.858045][ T5505] loop_control_ioctl+0x124/0x550 [ 130.863117][ T5505] ? xor_init+0x60/0x60 [ 130.867346][ T5505] ? bpf_lsm_file_ioctl+0x5/0x10 [ 130.872328][ T5505] ? security_file_ioctl+0x7c/0xa0 [ 130.877490][ T5505] ? xor_init+0x60/0x60 [ 130.881687][ T5505] __se_sys_ioctl+0xfa/0x170 [ 130.886497][ T5505] do_syscall_64+0x4c/0xa0 [ 130.890952][ T5505] ? clear_bhb_loop+0x30/0x80 [ 130.895669][ T5505] ? clear_bhb_loop+0x30/0x80 [ 130.900393][ T5505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.906326][ T5505] RIP: 0033:0x7fb686d78559 [ 130.910775][ T5505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.930423][ T5505] RSP: 002b:00007fb684fcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.938902][ T5505] RAX: ffffffffffffffda RBX: 00007fb686ffefa0 RCX: 00007fb686d78559 [ 130.946922][ T5505] RDX: 0000000087000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 130.954930][ T5505] RBP: 00007fb686e0fb20 R08: 0000000000000000 R09: 0000000000000000 [ 130.962934][ T5505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.971029][ T5505] R13: 00007fb686fff038 R14: 00007fb686ffefa0 R15: 00007ffe367f10c8 [ 130.979058][ T5505] [ 131.122790][ T5520] process 'syz.0.243' launched './file0' with NULL argv: empty string added [ 131.268310][ T4755] usb 6-1: unable to get BOS descriptor or descriptor too short [ 131.296701][ T4755] usb 6-1: no configurations [ 131.301388][ T4755] usb 6-1: can't read configurations, error -22 [ 131.795988][ T5542] loop5: detected capacity change from 0 to 512 [ 131.836979][ T5545] FAULT_INJECTION: forcing a failure. [ 131.836979][ T5545] name failslab, interval 1, probability 0, space 0, times 0 [ 131.872214][ T5545] CPU: 1 PID: 5545 Comm: syz.3.248 Not tainted syzkaller #0 [ 131.879599][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.889698][ T5545] Call Trace: [ 131.893014][ T5545] [ 131.895978][ T5545] dump_stack_lvl+0x188/0x250 [ 131.900703][ T5545] ? show_regs_print_info+0x20/0x20 [ 131.905950][ T5545] ? load_image+0x410/0x410 [ 131.910518][ T5545] ? __might_sleep+0xf0/0xf0 [ 131.915155][ T5545] ? __lock_acquire+0x7d40/0x7d40 [ 131.920225][ T5545] should_fail+0x383/0x4b0 [ 131.924693][ T5545] should_failslab+0x5/0x20 [ 131.929235][ T5545] slab_pre_alloc_hook+0x51/0xc0 [ 131.934241][ T5545] ? __kernfs_new_node+0xe3/0x6b0 [ 131.939306][ T5545] kmem_cache_alloc+0x3d/0x280 [ 131.944117][ T5545] __kernfs_new_node+0xe3/0x6b0 [ 131.949017][ T5545] ? __lock_acquire+0x7d40/0x7d40 [ 131.954097][ T5545] ? kernfs_new_node+0x250/0x250 [ 131.959096][ T5545] ? kernfs_activate+0x1eb/0x210 [ 131.964072][ T5545] kernfs_new_node+0x148/0x250 [ 131.968883][ T5545] __kernfs_create_file+0x47/0x2e0 [ 131.974037][ T5545] sysfs_add_file_mode_ns+0x2d2/0x390 [ 131.979461][ T5545] internal_create_group+0x492/0xd00 [ 131.984825][ T5545] ? sysfs_create_group+0x20/0x20 [ 131.989910][ T5545] ? kernfs_activate+0x1eb/0x210 [ 131.994895][ T5545] ? kernfs_add_one+0x564/0x6c0 [ 131.999793][ T5545] sysfs_create_groups+0x55/0x120 [ 132.004871][ T5545] device_add_attrs+0x12f/0x690 [ 132.009778][ T5545] device_add+0x677/0x1050 [ 132.014244][ T5545] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 132.019762][ T5545] wakeup_source_register+0x15f/0x230 [ 132.025346][ T5545] ep_insert+0xe5c/0x1930 [ 132.029721][ T5545] ? ep_loop_check+0x180/0x180 [ 132.034508][ T5545] ? mutex_lock_io_nested+0x60/0x60 [ 132.039746][ T5545] ? apparmor_capable+0x12c/0x190 [ 132.044780][ T5545] ? bpf_lsm_capable+0x5/0x10 [ 132.049467][ T5545] ? security_capable+0x85/0xb0 [ 132.054331][ T5545] do_epoll_ctl+0x8bc/0xf20 [ 132.058849][ T5545] __x64_sys_epoll_ctl+0x162/0x1b0 [ 132.063987][ T5545] ? ep_modify+0xa80/0xa80 [ 132.068435][ T5545] ? lockdep_hardirqs_on+0x94/0x140 [ 132.073662][ T5545] do_syscall_64+0x4c/0xa0 [ 132.078094][ T5545] ? clear_bhb_loop+0x30/0x80 [ 132.082815][ T5545] ? clear_bhb_loop+0x30/0x80 [ 132.087534][ T5545] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.093457][ T5545] RIP: 0033:0x7f10c1a0d559 [ 132.097879][ T5545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.117664][ T5545] RSP: 002b:00007f10bfc64028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 132.126097][ T5545] RAX: ffffffffffffffda RBX: 00007f10c1c93fa0 RCX: 00007f10c1a0d559 [ 132.134094][ T5545] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 132.142089][ T5545] RBP: 00007f10c1aa4b20 R08: 0000000000000000 R09: 0000000000000000 [ 132.150080][ T5545] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 132.158067][ T5545] R13: 00007f10c1c94038 R14: 00007f10c1c93fa0 R15: 00007ffdfb41c0a8 [ 132.166067][ T5545] [ 132.194526][ T5542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 132.217798][ T5542] System zones: 1-12 [ 132.269945][ T5542] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.247: corrupted inode contents [ 132.302119][ T5542] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 132.347656][ T5550] loop2: detected capacity change from 0 to 8192 [ 132.392495][ T5542] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #15: comm syz.5.247: corrupted inode contents [ 132.416579][ T5542] EXT4-fs error (device loop5): ext4_evict_inode:332: inode #15: comm syz.5.247: mark_inode_dirty error [ 132.428257][ T5550] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 132.474965][ T5550] REISERFS (device loop2): using ordered data mode [ 132.538351][ T5550] reiserfs: using flush barriers [ 132.549994][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 132.584783][ T5550] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.613148][ T5542] EXT4-fs (loop5): 1 orphan inode deleted [ 132.618950][ T5542] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 132.648600][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.655007][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.672494][ T5550] REISERFS (device loop2): checking transaction log (loop2) [ 133.389308][ T5550] REISERFS (device loop2): Using tea hash to sort names [ 133.411470][ T5550] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 133.439603][ T5574] FAULT_INJECTION: forcing a failure. [ 133.439603][ T5574] name failslab, interval 1, probability 0, space 0, times 0 [ 133.504163][ T5574] CPU: 1 PID: 5574 Comm: syz.3.254 Not tainted syzkaller #0 [ 133.511550][ T5574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.521668][ T5574] Call Trace: [ 133.524987][ T5574] [ 133.527954][ T5574] dump_stack_lvl+0x188/0x250 [ 133.532684][ T5574] ? show_regs_print_info+0x20/0x20 [ 133.537931][ T5574] ? load_image+0x410/0x410 [ 133.542508][ T5574] ? __might_sleep+0xf0/0xf0 [ 133.547150][ T5574] ? __lock_acquire+0x7d40/0x7d40 [ 133.552223][ T5574] should_fail+0x383/0x4b0 [ 133.556693][ T5574] should_failslab+0x5/0x20 [ 133.561236][ T5574] slab_pre_alloc_hook+0x51/0xc0 [ 133.566217][ T5574] kmem_cache_alloc_trace+0x47/0x290 [ 133.571647][ T5574] ? shmem_init_fs_context+0x50/0x230 [ 133.577069][ T5574] shmem_init_fs_context+0x50/0x230 [ 133.582320][ T5574] ? shmem_error_remove_page+0x10/0x10 [ 133.587822][ T5574] alloc_fs_context+0x628/0x7d0 [ 133.592725][ T5574] reconfigure_single+0x45/0xa0 [ 133.597615][ T5574] public_dev_mount+0x6c/0xe0 [ 133.602359][ T5574] legacy_get_tree+0xe6/0x180 [ 133.607076][ T5574] ? devtmpfs_delete_node+0x230/0x230 [ 133.612496][ T5574] vfs_get_tree+0x88/0x270 [ 133.616961][ T5574] do_new_mount+0x247/0xa40 [ 133.621530][ T5574] __se_sys_mount+0x2e3/0x3d0 [ 133.626259][ T5574] ? __x64_sys_mount+0xc0/0xc0 [ 133.631070][ T5574] ? lockdep_hardirqs_on+0x94/0x140 [ 133.636301][ T5574] ? __x64_sys_mount+0x1c/0xc0 [ 133.641108][ T5574] do_syscall_64+0x4c/0xa0 [ 133.645559][ T5574] ? clear_bhb_loop+0x30/0x80 [ 133.650278][ T5574] ? clear_bhb_loop+0x30/0x80 [ 133.654994][ T5574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.660925][ T5574] RIP: 0033:0x7f10c1a0d559 [ 133.665372][ T5574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.685011][ T5574] RSP: 002b:00007f10bfc64028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 133.693509][ T5574] RAX: ffffffffffffffda RBX: 00007f10c1c93fa0 RCX: 00007f10c1a0d559 [ 133.701550][ T5574] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 133.709563][ T5574] RBP: 00007f10c1aa4b20 R08: 0000000000000000 R09: 0000000000000000 [ 133.717570][ T5574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.725577][ T5574] R13: 00007f10c1c94038 R14: 00007f10c1c93fa0 R15: 00007ffdfb41c0a8 [ 133.733609][ T5574] [ 133.738723][ T5579] ioremap: invalid physical address 8000000000000000 [ 133.780735][ T5579] ------------[ cut here ]------------ [ 133.792332][ T5579] WARNING: CPU: 0 PID: 5579 at arch/x86/mm/ioremap.c:200 __ioremap_caller+0x4f8/0x620 [ 133.816284][ T5579] Modules linked in: [ 133.820704][ T5579] CPU: 0 PID: 5579 Comm: syz.4.256 Not tainted syzkaller #0 [ 133.833756][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.848768][ T5579] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 133.857808][ T5550] CacheFiles: Can't set xattr on cache [4] (err 95) [ 133.862561][ T5579] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 69 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 58 88 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 133.905183][ T5579] RSP: 0018:ffffc90004a5f900 EFLAGS: 00010246 [ 133.913433][ T5550] CacheFiles: Failed to register: -95 [ 133.943692][ T5579] RAX: 0000000000000032 RBX: 1ffff9200094bf00 RCX: 954a3f87d1d26400 [ 133.956179][ T5579] RDX: ffffc9000608a000 RSI: 0000000000005417 RDI: 0000000000005418 [ 133.968137][ T5579] RBP: ffffc90004a5fa10 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 133.976570][ T5579] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: 000000000000002e [ 133.991129][ T5579] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 134.011646][ T5579] FS: 00007f1e008466c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 134.027713][ T5579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.034952][ T5579] CR2: 00007fa19e99a2f8 CR3: 00000000671db000 CR4: 00000000003506e0 [ 134.052673][ T5579] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.060735][ T5579] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.075307][ T5579] Call Trace: [ 134.078834][ T5579] [ 134.081808][ T5579] ? phram_setup+0x87c/0xdf0 [ 134.105333][ T5579] ? ioremap+0x30/0x30 [ 134.109790][ T5579] phram_setup+0x87c/0xdf0 [ 134.118839][ T5579] ? __mutex_lock_common+0x435/0x2400 [ 134.126778][ T5579] ? phram_param_call+0x70/0x70 [ 134.131706][ T5579] ? mutex_lock_io_nested+0x60/0x60 [ 134.143024][ T5579] ? read_lock_is_recursive+0x10/0x10 [ 134.148503][ T5579] param_attr_store+0x20a/0x300 [ 134.156970][ T5579] ? param_attr_show+0x170/0x170 [ 134.163353][ T5579] ? sysfs_kf_read+0x350/0x350 [ 134.169919][ T5579] module_attr_store+0x5b/0x80 [ 134.178644][ T5579] kernfs_fop_write_iter+0x3a8/0x500 [ 134.184369][ T5579] vfs_write+0x748/0xd70 [ 134.188801][ T5579] ? file_end_write+0x250/0x250 [ 134.196622][ T5579] ? mutex_lock_nested+0x17/0x20 [ 134.201616][ T5579] ? __fdget_pos+0x2bf/0x370 [ 134.208152][ T5579] ? ksys_write+0x70/0x260 [ 134.216599][ T5579] ksys_write+0x153/0x260 [ 134.220977][ T5579] ? __ia32_sys_read+0x80/0x80 [ 134.247007][ T5579] ? lockdep_hardirqs_on+0x94/0x140 [ 134.258028][ T5579] do_syscall_64+0x4c/0xa0 [ 134.262950][ T5579] ? clear_bhb_loop+0x30/0x80 [ 134.267749][ T5579] ? clear_bhb_loop+0x30/0x80 [ 134.273326][ T5579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.279349][ T5579] RIP: 0033:0x7f1e025ef559 [ 134.284254][ T5579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.304076][ T5579] RSP: 002b:00007f1e00846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.312944][ T5579] RAX: ffffffffffffffda RBX: 00007f1e02875fa0 RCX: 00007f1e025ef559 [ 134.323298][ T5579] RDX: 000000000000001e RSI: 0000200000000600 RDI: 0000000000000003 [ 134.331456][ T5579] RBP: 00007f1e02686b20 R08: 0000000000000000 R09: 0000000000000000 [ 134.339698][ T5579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.348028][ T5579] R13: 00007f1e02876038 R14: 00007f1e02875fa0 R15: 00007fff7b75b2a8 [ 134.356256][ T5579] [ 134.359479][ T5579] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.366809][ T5579] CPU: 1 PID: 5579 Comm: syz.4.256 Not tainted syzkaller #0 [ 134.374120][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.384193][ T5579] Call Trace: [ 134.387474][ T5579] [ 134.390407][ T5579] dump_stack_lvl+0x188/0x250 [ 134.395110][ T5579] ? show_regs_print_info+0x20/0x20 [ 134.400314][ T5579] ? load_image+0x410/0x410 [ 134.404830][ T5579] panic+0x2f8/0x850 [ 134.408739][ T5579] ? bpf_jit_dump+0xd0/0xd0 [ 134.413288][ T5579] ? __ioremap_caller+0x4f8/0x620 [ 134.418349][ T5579] __warn+0x248/0x2b0 [ 134.422373][ T5579] ? __ioremap_caller+0x4f8/0x620 [ 134.427437][ T5579] report_bug+0x1b9/0x2e0 [ 134.431801][ T5579] handle_bug+0x3a/0x70 [ 134.435964][ T5579] exc_invalid_op+0x16/0x40 [ 134.440508][ T5579] asm_exc_invalid_op+0x16/0x20 [ 134.445399][ T5579] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 134.451182][ T5579] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 69 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 58 88 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 134.470829][ T5579] RSP: 0018:ffffc90004a5f900 EFLAGS: 00010246 [ 134.476943][ T5579] RAX: 0000000000000032 RBX: 1ffff9200094bf00 RCX: 954a3f87d1d26400 [ 134.484972][ T5579] RDX: ffffc9000608a000 RSI: 0000000000005417 RDI: 0000000000005418 [ 134.492992][ T5579] RBP: ffffc90004a5fa10 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 134.500978][ T5579] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: 000000000000002e [ 134.508959][ T5579] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 134.516971][ T5579] ? phram_setup+0x87c/0xdf0 [ 134.521603][ T5579] ? ioremap+0x30/0x30 [ 134.525740][ T5579] phram_setup+0x87c/0xdf0 [ 134.530198][ T5579] ? __mutex_lock_common+0x435/0x2400 [ 134.535600][ T5579] ? phram_param_call+0x70/0x70 [ 134.540500][ T5579] ? mutex_lock_io_nested+0x60/0x60 [ 134.545715][ T5579] ? read_lock_is_recursive+0x10/0x10 [ 134.551121][ T5579] param_attr_store+0x20a/0x300 [ 134.555982][ T5579] ? param_attr_show+0x170/0x170 [ 134.560939][ T5579] ? sysfs_kf_read+0x350/0x350 [ 134.565713][ T5579] module_attr_store+0x5b/0x80 [ 134.570521][ T5579] kernfs_fop_write_iter+0x3a8/0x500 [ 134.575846][ T5579] vfs_write+0x748/0xd70 [ 134.580133][ T5579] ? file_end_write+0x250/0x250 [ 134.585029][ T5579] ? mutex_lock_nested+0x17/0x20 [ 134.589993][ T5579] ? __fdget_pos+0x2bf/0x370 [ 134.594592][ T5579] ? ksys_write+0x70/0x260 [ 134.599021][ T5579] ksys_write+0x153/0x260 [ 134.603366][ T5579] ? __ia32_sys_read+0x80/0x80 [ 134.608137][ T5579] ? lockdep_hardirqs_on+0x94/0x140 [ 134.613363][ T5579] do_syscall_64+0x4c/0xa0 [ 134.617825][ T5579] ? clear_bhb_loop+0x30/0x80 [ 134.622541][ T5579] ? clear_bhb_loop+0x30/0x80 [ 134.627292][ T5579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.633238][ T5579] RIP: 0033:0x7f1e025ef559 [ 134.637691][ T5579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.657523][ T5579] RSP: 002b:00007f1e00846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.665984][ T5579] RAX: ffffffffffffffda RBX: 00007f1e02875fa0 RCX: 00007f1e025ef559 [ 134.674000][ T5579] RDX: 000000000000001e RSI: 0000200000000600 RDI: 0000000000000003 [ 134.682004][ T5579] RBP: 00007f1e02686b20 R08: 0000000000000000 R09: 0000000000000000 [ 134.690117][ T5579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.698127][ T5579] R13: 00007f1e02876038 R14: 00007f1e02875fa0 R15: 00007fff7b75b2a8 [ 134.706131][ T5579] [ 134.709531][ T5579] Kernel Offset: disabled [ 134.714146][ T5579] Rebooting in 86400 seconds..