last executing test programs: 1m19.096172573s ago: executing program 1 (id=1264): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11, 0x0, 0x4000800}, 0x800) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000180)={0x10, 0xfffffff5, 0x3}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x24400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004"], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x700a}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) write$tun(r5, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x0, 0x2) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r10) fchdir(r9) chdir(&(0x7f0000000080)='./file0\x00') linkat(r9, &(0x7f0000000280)='./file0\x00', r4, 0x0, 0x1400) 1m18.666466629s ago: executing program 1 (id=1267): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4083, 0xff3}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/164, 0xa4}], 0x4}, 0x120) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000800)=""/129, 0x81}, {&(0x7f00000008c0)=""/144, 0x90}, {&(0x7f0000000980)=""/159, 0x9f}, {&(0x7f0000000a40)=""/100, 0x64}, {&(0x7f0000000ac0)=""/7, 0x7}, {&(0x7f0000000b00)=""/203, 0xcb}], 0x6, &(0x7f0000000c80)=""/14, 0xe}, 0x7}], 0x1, 0x120, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700), 0x0, 0x94, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0xfffffe41, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200102030109021b0002000000000904250000ff0116000904", @ANYRES32], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb014218000000000000000c0000000c0000000400000003000000000000840200000000615f00"], 0x0, 0x28, 0x0, 0x9}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x8}, [@RTA_DST={0x4, 0x1, {0x100}}]}, 0x24}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000000c0)={0xf65ffff, 0xbe01, 0x8, r6, 0x0, &(0x7f0000000080)={0x9d0901, 0xa81, '\x00', @string=&(0x7f0000000040)=0x9}}) landlock_create_ruleset(0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8fbc0e6f77c18ed3, 0x11, r7, 0x1000) 1m16.443724383s ago: executing program 1 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063edcea4", @ANYBLOB="b6a7a29782938426a4c1e016eedf515af3fd5b546aaacf8d3135c386daf856ecccd471f18f3b0c0d8118f2458d7a7797a3a26a1c7303dce38f54e82d58e84a2d90cbc9d4045b09322e0d4829f9a1ed35be0efa8653195ff1650e3c448d671c5d240daa776e54b6c4374d5a1217b928f24a7dcc1d83727e1e2496be90000d0ba16bf0266e2861636b9b86443ca18e70a2c05ef9389ecbff171bb734f3e0855948dfbbc23445ca276bba463e8f60607626b18799cc5aad8e5463878d9aca519ecfdaf99a675112f906be5e7abce02645ef430ef929cc1a2e435fa67b84f2462752b3693914f369a767e1"], 0x1, 0x105c7, &(0x7f0000020c40)="$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") openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$kcm(0x10, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) capset(&(0x7f0000000500)={0x20071026}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m14.23480069s ago: executing program 1 (id=1286): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r0, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f0000ffd000/0x1000)=nil}) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd6, &(0x7f0000000100)={[{@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_mixed}, {@utf8}, {@fat=@check_normal}, {@shortname_winnt}, {@shortname_winnt}, {@numtail}, {@rodir}, {@fat=@showexec}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x81, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1m6.94712781s ago: executing program 1 (id=1319): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$lock(r1, 0x5, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x20, &(0x7f00000001c0)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/89, 0x59}}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x7, 0x10, {0x10, 0x3, "20c5d661dd6e7936d01ab6a3846c"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x6d2889338089a39e, 0x16, "46f6adede5dcd656cf7363abfe62b3eda86b7ebc7073"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x3, 0xc2, 0x0, 0x9, 0x100, 0x3, 0xfffb, 0x4, 0xf909, 0x8, 0x2, 0x1}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x8001}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)={0x0, 0x10, 0x4, "d1327917"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m4.158465432s ago: executing program 3 (id=1327): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0xfffffffffffffffe, 0x5b, &(0x7f0000ffd000/0x2000)=nil, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x3, 0x9, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x1, 0x9, 0x6}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x20004, 0xffffffffffffffff, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, r4, r5, r7, r3], 0x5, r9, r3, 0x3ff, 0x0, 0x5, 0x9b3, {0x88, 0x0, 0x9, 0x3, 0x6, 0x7, 0x81, 0x100, 0x7ff, 0x9, 0x7ff, 0x9, 0x3, 0x5, "0f04f0ba4f47f47a4b19b6fb42472e94a6a931bf76eb265c263dd1d04560344e"}}) 1m3.578696742s ago: executing program 3 (id=1331): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000002060101000200000000000000000000050005000a000000050001000700000005000400000000000500010007000000050005000a0000000c0007800800064000000001"], 0x48}}, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f0000000140)=0x0) r4 = openat$6lowpan_enable(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r4, &(0x7f0000000700)='0', 0x1) unshare(0x28000080) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) r6 = syz_open_procfs$namespace(r5, &(0x7f00000006c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f00007cb000/0x2000)=nil, 0x2000, 0x1000008, 0x20010, r1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000600)={'nat\x00', 0x2, [{}, {}]}, 0x48) r8 = syz_ublk_add_dev(r1, r2, r7, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r9, 0x89e8) madvise(&(0x7f0000798000/0x3000)=nil, 0x3000, 0x65) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x2000c810}, 0x0) recvmsg(r11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) recvmmsg$unix(r13, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) syz_open_dev$ublk_chdev(&(0x7f00000005c0), r8, 0x800) 1m2.987386968s ago: executing program 3 (id=1336): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file1\x00', 0x14048, &(0x7f0000000040)=ANY=[], 0xfc, 0x5ec9, &(0x7f00000097c0)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJS2vwPlL8phx7gABLqmUSuWwVSQElAtIqIqxwQF+AlwKUXDn0LvIC+BsQLIFLCqQfCoPE+TzKerL02sXfWfj4fyZn5zbPjfSZfj2fXM7NPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxg7d+cqYXEZd/kxYci/hcDCL6Ect1vRr1zKX8+GFEHI/N5ng+IgaLEfX6m/88G3E+Ij59JuLe/Vtr9eKzu+zHhdM3rz/44ff/8fs/3Tn+s3d++nG7/cefP/fJH25HHPvRG588uL0/2w4AAAClqKqq6qW3+SfS+/t+150CAGYiH/+rJC9Xq9Vq9b7Wf+zPV3/UhdZN1WS3m0VEbDTXqV8zOB0PAIfMRnzWdRfokPyLNoyIp7ruBDDXel13gANx7/6ttV7Kt9c8HqyO2/PfKbfkv9F7eH/HdtNp2teYzOrn604M4rlt+rM8oz7Mk5x/v53/5XH7KD3uoPOfle3yH41vfSpOzn/Qzr9lS/5/johDm39/Yv6lyvkP95L/xmBf9v/B/mzCnsgfAAAAAIAS5L//H+v4/O/ik2/Krux0/nd1Rn0AAAAAAAAAgP32pOP/PWT8PwAAAJhb9Xv12l+eebRsu89iq5e/3Yt4uvV4oDCrjQ8HBAAAAAAAAAAAAABmYxixkq7rX4iIp1dWqqqqv5ra9V496fqHXenbDyXr+pc8AACMffpM617+XsRSRLydPutvYWVlpaqWlleqlWp5Mb+eHS0uVcuN97V5Wi9bHO3iBfFwVNXfbKmxXtO098vT2tvfr36uUTXYRcdmo8PAASAixkeje45IR0xVPRtdv8rhcLD/Hz32f3aj659TAAAA4OBVVVX10sd5n0jn/PtddwoAmIl8/G+fF1Cr1Wq1Wn306qZqstvNIiI2muvUrxkMxw8Ah8xGfNZ1F+iQ/Is2jIjjXXcCmGu9rjvAgbh3/9ZaL+Xbax4PVsft+VqQLflv9DbXy+tPmk7TvsZkVj9fd2IQz23Tn+dn1Id5kvPvt/O/PG7PQ/wfdP6zsl3+9XYe66A/Xcv5D9r5txyd/PsT8y9Vzn+4p/wH8gcAAAAAgDmW//5/zPnfvMkAAAAAAAAAcOjcu39rLd/3ms//f3HC43rNOfd/Hhk5/96u83f/71GS8++3829dkDNozN9981H+/75/a+3jm//6Qp7Off4Lg1H93Au9/mCYrvmpFt6Nq3Et1uP0Y48fbmk/81j7wpb2s1Pazz3WPqrblzfb36rrtfhlXIt3HrYvTrkwamlKezWlPec/sP8XKec/bHzV+a+k9l5rWrv7Uf+x/b45nfQ8l/72n5ce37tm704MHm5bU719Jzvoz+b/yVOj+PWN9euv//bKzZvXz0SabFl6NtJkn+X8F9JXzv/lF8ft+fd+c3+9+9Foz/nPizsx3Db/Fxvz9fa+MuO+dSHnP0pfOf98BJq8/x/m/Lff/1/toD8AAAAAAAAAAAAAAACwk6qqNm8RvRQRF9P9P13dmwkAzFY+/ldJXq6eXb00Z/1Rq9Vq9dGtm6qWB+0F4/X+3lynfs3wu0nfDACYZ/+NiH923Qk6I/+C5c/7q6df6rozwEzd+ODDn1+5dm39+o2uewIAAAAAAAAA/L/y+J+rjfGfN68Dao0bvWX81zdj9dCO/9kfDTbHOk8b9ELsPP73ydh5/O/hlOdbmNI+mtK+OKV9aUr7xBs9GnL+L6SMc/4n0oaVNP7ryx30p2s5/5NprOec/1daj2vmX/31MOff35L/qZvv/+rUjQ8+fO3q+1feW39v/RdnTl88f+7C+XMXLpx69+q19dPjfzvs8cHK+eexr10HWpacf85c/mXJ+X851fIvS87/pVTLvyw5//x6T/5lyfnn9z7yL0vO/5VUy78sOf+vplr+Zcn5v5pq+Zcl5/+1VMu/LDn/11It/7Lk/F9PtfzLkvM/lWr5lyXnn89wyb8sOf98ZYP8y5LzP5tq+Zcl538u1fIvS87/fKrlX5ac/4VUy78sOf+LqZZ/WXL+X0+1/MuS8/9GquVflpz/G6mWf1ly/t9MtfzLkvP/VqrlX5ac/7dTLf+y5Py/k+px/juNEsVRkvP/bqrt/2XJ+X8v1fIvy6PP/zdjxoyZPNP1byYAAAAAAAAAAAAAoG0WlxN3vY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2MHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi71xi5yvt+4Gdv9tqQ4H8g3OKAbW4GFnbXN3CIwSQhf0p6oSSkTUtqHO/abOJbvbvchMqm0JYoSEVqVdEXTZMojSK1FaiKWiqRCKmR2nfNq0a8iVopL/wCKgcllVIFtjozz/PszOzsnPVl7JlzPp8I/+ydc2aeOXNmdr8bfWcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABpt/vj0nwxkWZb/V/tjQ5ZdnP99XbY3/+fCrgu9QgAAAOBsvVv78+8uSV/Yu4qdGrb512v+/buLi4uL2RfeOfneny0upgs2ZdnQ2iyrXRb92y9+vti4TfBcNjow2PDvwYKbHyq4fLjg8pGCy9cUXL624PLRgsuXHYBl1tV/H1O7sutrf91QP6TZZdlI7bLr2+z13MDawcH4u5yagdo+iyMHs5nscDadTSzbZ6D2vyx7fXN+W/dn8bYGG25rY5Zlp376zIG4hoFwjK/Pmm6spvGxe/vebNM7P33mwLfn3rqq3Sw8DMtWmmVbt+TrfD7Lln5dlQ1ka9MxiescbFjnxjbrHGpa50Btv/zvres8tcp1xvs9Gtb5ww7r3Bi+9uR1WZYtZCtu0+q5bDBb33Kr6XiP1s+I/Dryh/ID2fBpnSebV3Ge5Pv85Lrm86T1nIzHf3M4JsMrrKHx4Xj7y2uWHfczPU/ye90L52p+3Q/mNzo62vir1aZzNd/mmRtWPgfaPnZtzoF0LjecA1uKzoHBNUO1c2Bwac1bms6ByWX7DGYDtds6eUPnc2B87sjx8dmnnr5t5sj+Q9OHpo9OTuzasX3nju07d44fnDk8PVH/8/QOaR9Znw2mc3BLeK2J5+BNLds2npKL3zh3z4PRHnke5Pf9MzfmC7p4MFvhHM+3eX7r2T8P0vf9hufBcMPzoO1rapvnwfAqngf5Nqe2ru575nDDf+3W0K3Xwg0N58CF/H6Y3+YjN6/8WrgxrOuFW073++HQsnMg3q2B8NzLv5J+3hu9MxyX5efF1fkFF63J5menT9z+5P65uROTWRjnxaUNj1Xr+bK+4T5ly86XwdM+X/b+7S9vvLrN1zeEYzV6a+fHKt9mx1jnx6r26t7+eDZ9dVsWxjl2vo9nu+9m+fFMWaLD8cy3ef62s/9ZMOWShte/kaLXv6GR4frr31A6GiNNr3/LH5qh2sqy7NRtq3v9Gwn/ne/Xv8t65PUvP1aP3N75HMi3eWH8dM+B4Y6vf9eFORDWc3NIDKMNuf+92uUL9dO04bEsPG+Gh0fCeTMcb7H5vNm+bJ/82vLb3jpxZufN1uuaH6umn1tKeN7kx+rPJzqfN/k2b0ye/WvHuvjXhteONUXnwMjQmny9I+kkqL/eLa6L58Dt2YHsWHY4m0r75I9yfltj21Z3DqwJ/53v144re+QcyI/Vy9s6nwP5Nj/Yfm5/dtoavpK2afjZqfX3Cytl/quHl66v9bCd68yfr/MTOzr/bijf5q0dp5szOh+nW8NXLmpznFqfPyud01PZ+TlOV4Z1Ht7Z+XdT+TaX7Vrl+bQ3y7I3J9+s/b4r/H73H+b/47tNv/dt9zvlNyfffGD8oR+dzvoBADhz79X+XFhT/1mz4f+xXs3//w8AAAD0hZj7B8NM5H8AAAAojZj7h8JM5H8AAAAojZj7h8NMKpL/H7tz9yvvPpuldwNcDOLl8TA8eHd9u9jxXgj/3rS4JP/6x7418spXnl3dbQ9mWfbLBz7UdvvH7o7rqjse1/mR5q8vc+W1q7r9Rx9e2q7x/RNO7a5ff7w/qz0NYlf59fFttevd9NRkbb7xQFabDy288Fz9+uv/jtuf3F7f/q/Cm5bsPTjQtP/WsJ7rw9wU3lPmwb1LxyGfcb9XNl7zL5d+dun24n4DW95fu5sv/0H9euN7RL10aX37eL9XWv/3vvqdV/Ltn7yh/fqfHWy//pPhen8S5i/21LdvPOZfaVj/H4X1x9uL+93+ze+3Xf+rV9S3fzWcF18Ps3X99/7ph99t93jF29l7V32/ePsT/7Ojtl+8vnj9resffXay6Xi0Xv8b79SvZ8/jPxtq3D5+Pd5O9Ohdzef3QHh8m3rkWZZ954+zpuOcfbS+3z+3rD9e3/G72q//1pZ1Hh+4trb/0v3Z0HS/vvY329re37ievX+/oen+vHRfOH7vjP8gv96TD4XzMVz+vz+sX1/re5m+el/z603c/usb6s/beH3jLet/qWX9C9fmx654/fe/U1//q/esbVr/3k+G8+n++ixa/6G/vqRp/298u/54nHhi7Oix2fmZqYaj2vg8Xju6bv1FF7/v/ZeE19LWf+87NvfY9IlNE5smsmxTH75lYLfX/80w/7s+Fs79LdT96Gf18+7FT9W/b9308/q/XwpffzQ8nvH749f+cqTpfG193Bfuqc+zXf8tYR2rdcVX/+vaVW148vOvz//TH77V+nNBvD/HPzhau38vb768dtnAG/XLW1+vivznB5uf1z8enqjN18JxXQzvzLzl8vrttV5/fG+SFz9df/7Gn+Ti/lnL+4lsGGq+H2e7/h+Hn2O+f2Xz6188P157tuXdnDdkA/kSFsLrQ7ZQvzxuFY/3i6cub3t78X14soWrTmeZK5p9anb88MzR+SfH56Zn58Znn3p635Fj80fn9tXeu3TfF4v2X3p+r689v6emd+3Ias/2Y/XRZRd6/ccfPjB1x8SNU9MH988fnHv4+PSJQwdmZw9MT83euP/gweknivafmdozuW339ju2jR2amdpz5+7d23ePzRw9li+jvqgCuya+NHb0xL7aLrN7duye3Llzx8TYkWNT03vumJgYmy/av/a9aSzf+/GxE9OH98/NHJkem515enrP5O5du7YVvvvjkeMHZzeNn5g/Oj4/O31ivH5fNs3Vvpx/7yvan2qYPRZe71oMhJ/OP3frrvT+uLlvfXnFq6pv0vzjafZ2eC+o+P2t6N8x94+EmVQk/wMAAEAVxNwf3vh/6QL5HwAAAEoj5v61YSbyPwAAAJRGzP2jYSYVyf/6//r/+v8r9P//8Xv6//r/+v/ngP6//n8n+v/6//28fv3/1v5/fArq/7Ok1/r/Mfevy7JK5n8AAACogpj714eZyP8AAABQGjH3XxRmIv8DAABAacTcf3GYSTXy/0jrX/X/9f/1/xs//z9uq/+f6f/r/58h/X/9/070/0vc/39v8Jys8YKtvz/7/+t8/j+9ptf6/zH3vy/MpBr5HwAAACoh5v73h5nI/wAAAFAaMfdfEmYi/wMAAEBpxNy/IcykIvnf5//r/+v/d+r/+/z/Rvr/+v9nQv9f/78T/f8S9/99/n8FP/9f/5/leq3/H3P//wszqUj+BwAAgCqIuf8DYSbyPwAAAJRGzP2XhpnI/wAAAFAaMfdfFmZSkfyv/6//r/+v/6//r//fTfr/+v+d6P/r//fz+vX/9f8p1mv9/5j7PxhmUpH8DwAAAFUQc//lYSbyPwAAAJRGzP1XhJnI/wAAAFAaMfdfGWZSkfyv/6//r/+v/6//r//fTfr/+v+d6P/r//fz+vX/9f8p1mv9/5j7rwozqUj+BwAAgCqIuf/qMBP5HwAAAEoj5v4PhZnI/wAAAFAaMfdvDDOpSP7X/9f/1//X/9f/1//vpv7q/w+ueIn+f53+fzP9f/3/c9b/z38U1/+nhHqt/x9z/4fDTCqS/wEAAKAKYu6/JsxE/gcAAIDSiLn/2jAT+R8AAABKI+b+TWEmFcn/+v/6//r/vdz/r9/Tavb/X/uL1uOp/6//347P/9f/z/T/z9iF7s/3+/p9/r/+P8V6rf8fc//mMJOK5H8AAACogpj7t4SZyP8AAABQGjH3XxdmIv8DAABAacTcf32YSUXyv/6//r/+fy/3/33+f6b/r/9fQP9f/z/T/z9jF7o/3+/r1/9fXf9/TdEVUWrnsf8/nK2i/x9z/w1hJhXJ/wAAAFAFMfffGGYi/wMAAEBpxNx/U5iJ/A8AAAClEXP/1jCTiuR//X/9f/1//X/9f/3/btL/1//vRP9f/7+f16//7/P/KdZrn/8fc//NYSYVyf8AAABQBTH33xJmIv8DAABAacTcf2uYifwPAAAApRFz/1iYSUXyv/6//r/+v/6//r/+fzeVtf+fXkf1//X/9f/1//X/9f9ZUa/1/2Puvy3MpCL5HwAAAKog5v7bw0zkfwAAACiNmPvHw0zkfwAAACiNmPsnwkwqkv/1//X/9f/1//X/9f+7qaz9f5//r/+f6f/r/+v/6/9TqNf6/zH3T4aZVCT/AwAAQBXE3L8tzET+BwAAgNKIuX97mIn8DwAAAKURc/+OMJOK5H/9f/1//X/9f/1//f9u0v/X/+9E/1//v5/Xr/+v/0+zwTZf67X+f8z9O8NMKpL/AQAAoApi7t8VZiL/AwAAQGnE3H9HmIn8DwAAAKURc/+dYSYVyf9n0//P99D/r9P/b79+/X/9f/1//X/9f/3/TvT/9f/7ef36//r/FOu1/n/M/bvDTCqS/wEAAKAKYu7/SJiJ/A8AAAClEXP/XWEm8j8AAAD0lXafQxjF3P/RMJOK5H+f/1/2/v/iWv1//X/9/87r1//vLv1//f9O9P/1//t5/fr/+v8U67X+f8z9e8JMKpL/AQAAoApi7r87zET+BwAAgNKIuf+eMBP5HwAAAEoj5v69YSYVyf/6/2Xv//v8f/1//f+i9ev/d5f+v/5/J/r//dn/Dz+26P/3UP8/P4f0/+lFvdb/j7n/3jCTiuR/AAAAqIKY+z8WZiL/AwAAQGnE3P/xMBP5HwAAAEoj5v5PhJlUJP/r/+v/6//r/+v/6/93k/6//n8n+v/92f+P9P97p//v8//pVb3W/4+5/74wk4rkfwAAAKiCmPs/GWYi/wMAAEBpxNz//8NM5H8AAAAojZj77w8zqUj+1//X/9f/1//X/9f/7yb9f/3/TvT/9f/7ef36//r/FOu1/n/M/b8SZlKR/A8AAABVEHP/A2Em8j8AAACURsz9nwozkf8BAACgNGLu/9Uwk4rkf/3/89P/H0zXr/+v/6//r/+v/38u6f/r/2f6/2fsQvfn+339+v/6/xTrtf5/zP2/FmZSkfwPAAAAVRBz/6+Hmcj/AAAAUBox9/9GmIn8DwAAAKURc/+DYSYVyf/6/z7/X/9f/1//X/+/m/T/9f870f/X/+/n9ev/6/9TrNf6/zH3/2aYSUXyPwAAAFRBzP0PhZnI/wAAAFAaMfd/OsxE/gcAAIDSiLn/M2EmFcn/+v/6//r/+v/6//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5/+Ewk4rkfwAAAKiCmPs/G2Yi/wMAAEBpxNz/W2Em8j8AAACURsz9vx1mUpH8r/+v/6//r/+v/6//3036/8v7//lr2IXs/69ZzYb6/6ui/6//r/+v/09nvdb/j7n/c2EmFcn/AAAAUAUx9/9OmIn8DwAAAKURc//vhpnI/wAAAFAaMfc/EmZSkfyv/6//r/+v/6//3+3+/xv6//r/Pv9/Bfr/+v/9vH79f/1/ivVa/z/m/s+HmVQk/wMAAEAVxNz/e2Em8j8AAAD0vpHVbRZz/74wE/kfAAAASiPm/kfDTCqS//X/9f8vWP8/7KP/v7Sf/n94XEvX//f5//r/+v8r0f/X/+/n9ev/6/9TrNf6/zH37w8zqUj+BwAAgCqIuf8LYSbyPwAAAJRGzP0HwkzkfwAAACiNmPunwkwqkv/1//X/ff6//r/+v/5/N+n/6/93ov+v/9/P69f/1/+nWK/1/2Punw4zqUj+BwAAgCqIuf9gmIn8DwAAAKURc/+hMBP5HwAAAEoj5v7Hwkwqkv/1//X/9f/1//X/9f+7Sf9f/78T/X/9/35ev/6//j/Feq3/H3P/TJhJRfI/AAAAVEHM/V8MM5H/AQAAoDRi7v9SmIn8DwAAAKURc//hMJOK5H/9f/1//X/9/3b9//opqf+v/3/29P/1/zvR/9f/7+f16//r/1Os1/r/MfcfCTOpSP4HAACAKoi5/2iYifwPAAAApRFz/7EwE/kfAAAASiPm/uNhJhXJ//r/+v/6//r/Pv9f/7+b9P/1/zvR/9f/7+f16//r/1Os1/r/Mff/fphJRfI/AAAAVEHM/SfCTOR/AAAAKI2Y+2fDTOR/AAAAKI2Y++fCTArz/7ourur80f/X/9f/1//X/9f/7yb9f/3/TvT/9f/7ef36//r/FOu1/n/M/fNhJv7/fwAAACiNmPsfDzOR/wEAAKA0Yu5/Isz/Y+8+c/W6qjgOvzFKgoSAsTAChsAYmEUg9B5677333nvvvffeIRB6lYLgrrUcHOccX/sev/vs9TxfliA38Zb96S/rp1PsfwAAAJhG7v4b4pYm+1//r//X/w/T/590fvp//b/+/1T0//r/g/7/sh27n9/7+/X/+n/Wjdb/5+6/T9zSZP8DAABAB7n77xu32P8AAAAwjdz9N8Yt9j8AAABMI3f//eKWJvtf/6//1/8P0//7/n/+uer/9f+noP/X/x/0/5ft2P383t+v/9f/s260/j93//3jlib7HwAAADrI3f+AuMX+BwAAgGnk7n9g3GL/AwAAwDRy9z8obmmy//X/+n/9v/5f/6//35L+X/+/RP+v/9/z+/X/+n/Wjdb/5+5/cNzSZP8DAABAB7n7HxK32P8AAAAwjdz9D41b7H8AAACYRu7+h8UtTfa//l//r//X/+v/9f9b0v/r/5fo//X/e36//l//z7rR+v/c/Q+PW5rsfwAAAOggd/8j4hb7HwAAAKaRu/+RcYv9DwAAANPI3f+ouKXJ/tf/6//1//p//b/+f0v6f/3/Ev2//n/P79f/6/9Zt3n/f6+b/ncvtf/P3X9T3NJk/wMAAEAHufsfHbfY/wAAADCN3P2PiVvsfwAAAJhG7v7Hxi1N9r/+X/9/vv+/9Rr9v/5f/3/+/9f/nw39v/5/if5/1P7/0n4n9P/6f/0/azbv/1d6/wv/d+7+x8UtTfY/AAAAdJC7//Fxi/0PAAAA08jd/4S4xf4HAACAaeTuf2Lc0mT/6//1/77/r//X/+v/t6T/1/8v0f+P2v/7/v+V9v/3vIT36//pYLT+P3f/k+KWJvsfAAAAOsjd/+S4xf4HAACAaeTuf0rcYv8DAADANHL3PzVuabL/9f/6f/2//l//r//fkv5f/79E/6//3/P7ff9f/8+60fr/3P1Pi1ua7H8AAADoIHf/0+MW+x8AAACmkbv/GXGL/Q8AAADTyN3/zLilyf7X/+v/9f/6/yvq/++k/9f/L9P/6/+X6P/1/3t+/yn7/+sv/Pf1/3QwWv+fu/9ZcUuT/Q8AAAAd5O5/dtxi/wMAAMA0cvc/J26x/wEAAGAaufufG7c02f/6f/2//l//7/v/+v8t6f+n6/+v0f+fp//X//v+v/6fZaP1/7n7nxe3NNn/AAAA0EHu/ufHLfY/AAAATCN3/wviFvsfAAAAppG7/4VxS5P9r//X/+v/9f/6f/3/lvT/0/X/vv9/G/p//b/+X//PstH6/9z9L4pbmux/AAAA6CB3/4vjFvsfAAAAppG7/yVxi/0PAAAA08jd/9K4pcn+H7L/v1b/v4/+/7rD4aD/1//r//X/y/T/+v8l+v+L9/93voNfT/8/1vv1//p/1o3W/+fuf1nc0mT/AwAAQAe5+18et9j/AAAAMI3c/a+IW+x/AAAAmEbu/lfGLU32/x31/7fc5eSf+/7/penZ//v+v/7//9+j/9f/X4z+X/+/RP/v+/97fr/+X//PutH6/9z9r4pbmux/AAAA6CB3/6vjFvsfAAAAppG7/zVxi/0PAAAA08jd/9q4pcn+H/L7//p//b/+v/47+n/9v/5/2cj9/7mD/n+N/l//v+f36//1/6wbrf/P3f+6uKXJ/gcAAIAOcve/Pm6x/wEAAGAaufvfELfY/wAAADCN3P1vjFua7H/9v/7/6P3/Of1/0v/Hn6v+X/9/CiP3/77/v07/r//f8/v1//p/1o3W/+fuf1Pc0mT/AwAAQAe5+98ct9j/AAAAMI3c/W+JW+x/AAAAmEbu/rfGLU32v/5f/3/0/t/3/4v+P/5cN+j///t7qP8/Dv2//n+J/l//v+f36//1/6wbrf/P3f+2uKXJ/gcAAIAOcve/PW6x/wEAAGAaufvfEbfY/wAAADCN3P3vjFua7H/9v/5f/6//79D/L71f/78t/b/+f4n+X/+/5/fr//X/rBut/8/d/664pcn+BwAAgA5y9787brH/AQAAYBq5+98Tt9j/AAAAMI3c/e+NW5rsf/3/3vv/e98cL9D/6//1//r/Ien/9f9L9P/6/z2/X/+v/2fdaP1/7v73xS1N9j8AAAB0kLv//XGL/Q8AAADTyN3/gbjF/gcAAIBp5O7/YNzSZP/36P+vvd2PzdP/+/6//l//r/8fm/5f/79E/6//3/P79f/6f9aN1v/n7v9Q3NJk/wMAAEAHufs/HLfY/wAAADCN3P0fiVvsfwAAAJhG7v6Pxi1N9n+P/v/29P8nzrz/v/Xu+n/9f9H/6/8P+n/9/wr9v/5/z+/X/+v/WTda/5+7/2NxS5P9DwAAAB3k7v943GL/AwAAwDRy938ibrH/AQAAYBq5+z8ZN9zjrsd70lWl/9f/+/6//l//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7v9U3OLv/wEAAGAaufs/HbfY/wAAADCN3P2fiVvsfwAAAJhG7v7Pxi1N9r/+X/+v/993/39O/6//H5z+X/+/RP+v/9/z+/X/+n/Wjdb/5+7/XNzSZP8DAABAB7n7Px+32P8AAAAwjdz9X4hb7H8AAACYRu7+L8YtTfa//l//r//fd//v+//6/9Hp//X/S/T/+v89v1//r/9n3Wj9f+7+L8UtTfY/AAAAdJC7/8txi/0PAAAA08jd/5W4xf4HAACAaeTu/2rc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+1uKXJ/gcAAIAOcvd/PW6x/wEAAGAaufu/EbfY/wAAADCN3P3fjFua7P+Z+/+lH9P/n9D/6/8P+n/9/8b0//r/Jfp//f+e36//1/+zbrT+P3f/t+KWJvsfAAAAOsjd/+24xf4HAACAaeTu/07cYv8DAADANHL3fzduabL/Z+7/l+j/T+j/9f8H/b/+f2P6f/3/Ev2//n/P79f/6/9ZN1r/n7v/e3FLk/0PAAAAHeTu/37cYv8DAADANHL3/yBusf8BAABgGrn7fxi3NNn/+n/9v/5f/6//1/9vSf+v/1+i/9f/7/n9+n/9P+tG6/9z9/8obmmy/wEAAKCD3P0/jlvsfwAAAJhG7v6fxC32PwAAAEwjd/9P45Ym+1//r//X/+v/9f/6/y3p//X/S/T/+v89v1//r/9n3Wj9f+7+n8UtTfY/AAAAdJC7/+dxi/0PAAAA08jd/4u4xf4HAACAaeTu/2Xc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+ruKXJ/gcAAIAOcvf/Om6x/wEAAGAauft/E7fY/wAAADCN3P2/jVua7H/9v/5f/6//b9j/X3fbX0//vy39v/5/yVn1/zfceHL1/6dz7H5+7+/X/+v/WXdm/X/+wBX2/7n7b45bmux/AAAA6CB3/+/iFvsfAAAAppG7//dxi/0PAAAA08jdf0vc0mT/6//1/1P2/9fr//X/vv8/Cv2//n+J7//r//f8fv2//p91o33/P3f/H+KWJvsfAAAAOsjd/8e4xf4HAACAaeTu/1PcYv8DAADANHL3/zluabL/9f9Xtf+/24U/r//3/X/9v/5f/39l9P/6/4P+/7Idu5/f+/v1//p/1o3W/+fu/0vc0mT/AwAAQAe5+/8at9j/AAAAMI3c/X+LW+x/AAAAmEbu/r/HLRff/xdmo7un//f9f/2//l//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7v9H3OLv/wEAAGAaufv/GbfY/wAAADCN3P3/ilvsfwAAAJhG7v5/xy1N9r/+X/+v/9f/6//1/1vS/+v/l+j/9f97fr/+X//PutH6/9z9/wkAAP//vWU0QQ==") syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1094c3, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0\x00', 0x1e, 0x0, 0x43, 0x0, &(0x7f0000000140)) 1m2.761051938s ago: executing program 1 (id=1337): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3dd, &(0x7f0000000740)="$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") 1m2.019763518s ago: executing program 32 (id=1337): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3dd, &(0x7f0000000740)="$eJzs3M9OG0ccwPFZMC1xJVQpaiCEw6TpgR7i7C7FyMppux6bSda7q5l1BKcqKhChQlo1qdRwKhfaSu1D5NqH6BtFfYRW+8c0/DEkEDBC34+UzOzuzzO/MdYMXjQrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAcMK263qOiHTcX5HDhW2T9E64Pmjv8wPFCf0K4eT/xOSkmClPzdz8//JnZSPT5dG0mMyLSbHzya1PH96s1YqzY444IaFL8eLVzndPt7bWf5R1IUaezeXrqljbRPeCrpLaJrLVbLoPljtWdnSk7KrNVE+GRgVZYuR8+KX0Wq0FqRqrST/utoNIDU4u3fddtykfNVIVGJvEDx41bLiso0jH3SImv5zHLOUfxMc6k5kKelJubG6tL5yWZB7kvUuQL2XtxB+j7/q+5/m+11xsLS65bu3ICfcQcSRi9B9ajNYHnb+B8/i3Wv8BAAAAAMD15RT32PPv/xPFfXhHdHSk3FGnBQAAAAAAPqDiL//TeTGR12aEw/d/AAAAAACum9+qPXYfVcf7e+zGBnv0bPqx8/c/wqgbZcR2kP8fbI+Xh+OHW8w6s85U1UhRNGvVUajmnNtl0O1B9Juq2Bi212+Qh2PMhLObrnzhnD0B8YeYLWNm18pybXCl7KXe0ZFqhEn00BNBMDWWqZXsp+ebPwuR9/573JtyxMbm1nrj2++31opcdvNWdrerDRRH9lGckMvL/X2Px494orgRU/VbL/t13x7/WPnysffoc0/cKWPu1MuyfnD8k3mfXmPY6KssvHOOfE/MlTFz8/fy4t78MVn4p2Xhv53Fmd6Ld8hi4bQsnF/OlwUAjMrGKauQI46su2eY5S5ndd8Td8uYu7PFxFqbPWZGd4fM6IP2qzX27KvbX0eegTBsjc37/fPQqvo6f8Hrof3ayHfyt3D85fYP4taLVzv3N7efPlt/tv7c9xea7leuu+iLieJXhapg7QEAHEOZN049+9UxRqffeK2WF2TLSpokfCyNbneV1HGmTLgcxF0lU5NkSZhEeeWJbisrbT9NE5PJTmJkmli9Ujz5RVaPfrGqF8SZDm0aqcAqGSZxFoSZbGsbyrT/daTt8g1TvNimKtQdHQaZTmJpk74JVUNKq9QgUBmp2yrOdEfn1VimRvcCsyqfJFG/p2Rb2dDoNEvKBgd96biTmF7RbGPUbzYAAFfE/hPsLrAy6jECAICDWKUBAAAAAAAAAAAAAAAAAAAAALj6LmP/H5VrUBk8IPKq5EPlgisjnpgAXLj/AgAA//9AdZvP") 1m0.167973964s ago: executing program 3 (id=1357): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000002d40)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES32], 0xfb, 0x2b8, &(0x7f00000004c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$vbi(&(0x7f0000000800), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000180)={0x6, @output={0x0, 0x1, {0x1000, 0x9}, 0x7, 0x666a}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000369000/0x2000)=nil, 0x2000, 0x1000006, 0x13, r3, 0x103000) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', 0x42442, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file2\x00', 0x14a1c, &(0x7f0000000080)=ANY=[], 0xa, 0x388, &(0x7f00000007c0)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x519a) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000000)) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fe27008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x19, 0x5, 0x10001, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x20, 0x1792, 0x9}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x40408d1) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000000200)=0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb6e4871f249d0736b01001800000000000000a4000000a4000000060000000700000000000008050000000800001c0000000b040000000e00000000000002000000000d0000000010001101ffffffea0000000d0000000000000100000000470063030b0000000700000505000000030002008a00000000000000020000000a0000000700000003000000040000000900000005000005000000060000000f0000000200000000010000006161000000"], &(0x7f00000002c0)=""/160, 0xc2, 0xa0, 0x0, 0x8000, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200003aa4d94443ea20dc000100000080000000", @ANYRES32=r5, @ANYBLOB="0300"/20, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="01000000050000000400"/28], 0x50) 54.297213895s ago: executing program 3 (id=1378): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0xfffffffffffffffe, 0x5b, &(0x7f0000ffd000/0x2000)=nil, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x3, 0x9, 0x8, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x20004, 0xffffffffffffffff, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000900)={&(0x7f00000008c0)=[0x0, r4, 0x0, 0x0, r3], 0x5, r6, r3, 0x3ff, 0x0, 0x5, 0x9b3, {0x88, 0x0, 0x9, 0x3, 0x6, 0x7, 0x81, 0x100, 0x7ff, 0x9, 0x7ff, 0x9, 0x3, 0x5, "0f04f0ba4f47f47a4b19b6fb42472e94a6a931bf76eb265c263dd1d04560344e"}}) 50.582258432s ago: executing program 3 (id=1390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0xfff, 0x0) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000240)={r4, 0x0, &(0x7f00000003c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000080)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000001c0)={0x80000000, 0x0, &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000002c0)={{r6, 0x0, 0xb, [0x0, 0x1]}, {r7, 0x0, 0x6, [0x4, 0xff]}, 0x2, [0x8b7, 0x8]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x28141, 0x0) 49.842859169s ago: executing program 33 (id=1390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0xfff, 0x0) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000240)={r4, 0x0, &(0x7f00000003c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000080)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000001c0)={0x80000000, 0x0, &(0x7f0000000540)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000002c0)={{r6, 0x0, 0xb, [0x0, 0x1]}, {r7, 0x0, 0x6, [0x4, 0xff]}, 0x2, [0x8b7, 0x8]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x28141, 0x0) 14.832985857s ago: executing program 0 (id=1547): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1a, 0x0, 0x1, 0x25, 0x6, @remote}, 0x14) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x0) syz_usb_control_io$lan78xx(r6, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003f7000000f7035e61da417b05b948a3b01124688c0ccd691462dedec14b67d64e3c6a82678d109bd86f"]}, 0x0) 14.633401657s ago: executing program 0 (id=1549): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = io_uring_setup(0x5980, &(0x7f0000000140)={0x0, 0x9b14, 0x8000, 0x0, 0x300}) io_uring_setup(0xbed, &(0x7f00000001c0)={0x0, 0x24b4, 0x2000, 0x2, 0x1bc, 0x0, r2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x11) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 14.282879104s ago: executing program 0 (id=1551): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/237, 0x0, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x2, 0x5a, &(0x7f00000007c0)=""/90}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xd, @pix_mp={0x9, 0x40000055, 0x47524247, 0x6, 0x8, [{0x9, 0x4000}, {0x9, 0x7fffffff}, {0x7f4d6e18, 0x2}, {0x0, 0x2}, {0x8000, 0x200}, {0x4000007, 0xffffffff}, {0x865b, 0x1f}, {0x7311, 0x7fff}], 0xc3, 0x4, 0x8, 0x2, 0x5}}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000580)=&(0x7f00000002c0)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x400, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x80, 0x83}, {0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) 14.033472531s ago: executing program 0 (id=1552): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)={[{@grpid}, {@mblk_io_submit}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@inode_readahead_blks}, {@delalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x124b8b7, 0x0, 0x3, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x38416761, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) pipe(&(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080)=0x4, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}, 0x800) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r3, r4) 14.023238909s ago: executing program 0 (id=1553): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioprio_get$pid(0x3, r0) socketpair(0x29, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2002010}, 0xc, &(0x7f0000000100)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000000}, 0x8e1b78ffce56cfdb) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x68e74bb4bff78df5, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x11c8008}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1010}, 0x20004000) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$int_in(r5, 0x5421, &(0x7f0000000380)=0x3) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10080}, 0x4) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000500)=0x400, 0x4) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000003600)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000035c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x4e8, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x484, 0x4, 0x0, 0x1, [{0x434, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x424, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x154, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "0ff18e729d9a32c8a3d402c4e8b28fc9cf627841c40924b59d5ef616f0bab0ed13e8a530270c53294c6c37c4c2fe511136305c9978a720b8b133c6"}, @NFTA_DATA_VALUE={0x79, 0x1, "d3e98586e7ffc0cb0106847fe27fae61a4869279bd48b83154019c6e3d0d32026cdc7b7d5459c2c4ec31da08d26baa1f151e150f1fff7fe359cc279566bb661132f0431d72d2537f3adb899561d2ad6b0cfeb63ca0a6e2c19953ffd117400b03af8b1f23e06bdc668421137d9156f8f905cf76d766"}, @NFTA_DATA_VALUE={0x29, 0x1, "5e78f77f5730b8aa7ad82ab1bdc920896ece70f43556b72212f5b120c5a206354ddf56ede5"}]}, @NFTA_RANGE_TO_DATA={0x2c4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xce, 0x1, "d20f95277275b2b8531ef3b34ec32c900ab2ae5c14534c293c73006672735486e1f2d454ca2cbd3c2fdb4cdffddb16155a1b9459531001c51ef821a8ab3ca016bc26d2249e3c065e2dfc7b4cdde4652fd56bc1e1ca1af7cdbef2ee62eeb6de7277bf4703ac0fb9c70d02474eb661eda54a792d86c6d11275f2e7cf9e053281fd47dc7c443859e757f7af8fb48d837d2e1835f2e2e754080d870e0e35b35939aa4d225ad8ba1db5dc9baa0bed1e1e7c966471f3a10a6b15f4cc28b52ce647eeb7329e8cdfe282adf7c0ff"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xde, 0x1, "25c9000b9718b9dd10d3a9ce44d8a4a062acd1c032bf018660c084eefe725177a9a3b11f5a9af40d7b5f83e0bef93c7172afff9be102941a1e1107499ddba0560de026a935e31addd09007fa9c39887fdf5142aa53bf1ba48e0629a8c7c5590c0dcbfc8886df46838f6885eea26903b4c794dee867ebffda450beeff8749a14c713f80b3847d2227faf23a57c8c6d0bf9033094e3b155ebe4ed82a21059f652ead5e09212589670e34359702f923036c764e3440df491d53c834367e3bf626201b9ea6d945933effa725b32d0ede72ef83985c43e3750f99fa1e"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xed}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x47, 0x7, 0x1, 0x0, "37d215a3b424c00874101ddf78b61b971c10688e1c0c20d6c868293577c7fb42994a48d9645a1b99ad6d6610ef653e271e4ddafb58a218e682568acc98e6ff1c63bdc2"}]}, @NFT_MSG_DELCHAIN={0x124, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x163b7c1e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3684b1f8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x59ac2a4b}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ec}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x90000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e2676ad}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x224487f1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x97e6549}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELRULE={0x286c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x27c8, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xf8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3b}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xed}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xdf79}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7ff}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x26dc, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x26d0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x250, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "d6de1fab5828facd41a6bd32eb1009870d39c6d4e83a1456414b6e"}, @NFTA_DATA_VALUE={0x5e, 0x1, "4cc7deba7522fc0d5393bcceffb1a3db2a15a5521ade7dabc37ab81c1306f6e1ffd9222495d11cbe3e49be90770e1474cfb48a1b2f6aa1a9e0c57ea8815cb8343acd9ada427cafe9d8a22454cf88393a9035e3d75c352c712032"}, @NFTA_DATA_VALUE={0xb5, 0x1, "65715ec0c02d68d10722146b570bbcde8ff477da559ed48c1d42a8ab12a843d2a6c8f20b20acc00febdca655f024b29bad02c626b520cea0c5903e91a79f79d89cb32c827eae00499945bcbd9968c748944fcafc59d3fde49fbe23ef0e1d423cc828cc058b6532faa7e8e49c82572177f5b13cd00a9d5c43b991f8b72f909e359f00b5edfc20665f8c2826c553f39906c5137168c9838f4f460c288e1f3bcaf58d198a33caa489f32a54174b843e12143a"}, @NFTA_DATA_VALUE={0x23, 0x1, "9e068d96bd686cf2f9d67e5355ba0905ea44e647231b8bb8bd6c202f074e23"}, @NFTA_DATA_VALUE={0xae, 0x1, "370c92bfb19bde36e354a9f0c0f3ebbbc263e284d05bf974fdec74270cf9346fe7bb4c11b9c302e759af568e43baf0ed27430203b6274a6d7088feffdf06635d22663868c28264d1da457695f234488fcce159e88d8165e2b7359711c8f6debd80e2b799b6f931fb0bf34d1eda2d7f0f8877f740368c1e78d6d91325f8c39c34c7b31ffe415c13606b48475945064ceeda6b3e08dd0bebfe30e71de95ad5c65cc2fb1c6adc9614347b74"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x2228, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xaf, 0x1, "d0b077332f8cfc8a4390517e358dcf42d31bf4f3c399fcf05011ec9793c36e2d078b046f40919bee8769eb33787378520b08e45f208ecd352480062e2a199f7218ba9730e4c1d1efa08a457723dc8d3e4c489278c779c56a3dfe651ee5ff254d34b9d5e4b4391929f19402b7de04cf2e483df124c407b138a9e0d2190cd4556f4a42109eb66ec9ed17e4eccf156f6ee39df13f7a8eaa67fdd0d1c5ff967ec066ceef98ec99120fb7b95f23"}, @NFTA_DATA_VALUE={0xab, 0x1, "13eba73fff7554c3262aa8ef2330750b91e63dcf02f6b512e6f2abcce1d0b76b9731c06e5cbb08615cbaa99220499d244077b5a0b9df76e7c15f171ae4a5cc2e3ec09b45405d34df319f14706bbe65870df4196f7c1aa9b6342b69b664afe82f8221c9363d456d573ad1a5defd03e0dd9f44d43f8e345e7889e0eac8653afa2af0e0d2f3b89a062c5ca9cfca4724b8885724bb0ccec071d3c61c4a491d89b3de4329cf405c515e"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CMP_DATA={0x110, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4a, 0x1, "9733c88d41727026a7da1d4b484d54b5391f9ccfe0e0eebcd1e8647f932d2873e2482700a3e771c3ee0756f34dc3f657017ef1b17a6d2158e5e388cecb0bb9337d3bdb60144e"}, @NFTA_DATA_VALUE={0xa4, 0x1, "703f91f99d1959c74352e4e377f85f1cd569e11178e425a951d56acb223850e6d3c677fa8864d5a2762dfb01c7bab4ee2d8f0c1282fc5da9dfb3c307020bd723d31917fc8282dea17c7b4e0aa5643aa1d47f03d64b4f2981512faa54ecd908fcabb6e2452f2e0d72ea8037f19da090ae6f0ad7c9e60c4b9e65c959645676585c3de695efb6d9ebba1bbd668b6cae77671bfcc1d21dd361a0199f0f5a0e4dba38"}]}, @NFTA_CMP_DATA={0xe0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "1e13883f7f35625e67b847c690f7554bf0eb4ac959e70b24968b0e57a51b7fbeb9b820a19611b38a521a57049cf52d14a791b59d9d98bc1ebc759a272bcfd130aeb412cb5da4866cd62a1a8bc607eab86369839af698b9229d204d504acff7ec01bd026bef086d0f63be9dafd887aa21d37b6391712c8d23403563e54888f37c7db7c9774f5b28899e253153f8d2ec388ce7048ab7e4e2a2f2042dc93e79971f5b38c27a34"}, @NFTA_DATA_VALUE={0x2f, 0x1, "14feea1a9f8f815b05f3804a67c43562690e261d5de914881f495adf9614e4449e7831500744e6b7100dc8"}]}, @NFTA_CMP_DATA={0x4c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xab}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x2eec}, 0x1, 0x0, 0x0, 0xc010}, 0x24008011) listen(r2, 0xe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003640)={'wlan1\x00', 0x0}) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000042c0)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x408010}, 0xc, &(0x7f0000004280)={&(0x7f00000036c0)={0xbb8, 0x0, 0x5, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x0, 0x8001}, 0x10, 0x4, 0x316, 0x4, 0x8, 'syz0\x00', "f6f3f1cd393169c3462d291b125b81c19f3b8ac8288df6117af9d6b47d715f67", "a187f662bdcc1df8a8597d7be0bd1177a0b087335a5fa86c7d516b614b7f28aa", [{0xfff, 0x40, {0x0, 0x7}}, {0x1, 0x8, {0x0, 0x38000000}}, {0x3, 0x8, {0x2}}, {0x69d, 0x1000, {0x0, 0xef}}, {0xdfd, 0x6, {0x0, 0xf7}}, {0x8001, 0x8, {0xb920b6507117ba7, 0x4}}, {0x2, 0x7, {0x1, 0x8}}, {0x3, 0x2, {0x3, 0x10000}}, {0xfff9, 0x0, {0x2, 0x237a}}, {0x8, 0xff8b, {0x2, 0xcef}}, {0x3, 0x7b, {0x3, 0x8}}, {0x1, 0x6a27, {0x2, 0x7ff}}, {0x2, 0x2, {0x3}}, {0x9, 0x6, {0x1, 0x6}}, {0xb, 0x8a9, {0x1, 0x3}}, {0x8, 0x100, {0x3, 0x970}}, {0x10, 0xffff, {0x3, 0x7}}, {0x6, 0x4, {0x3, 0x3}}, {0xfff, 0x100, {0x1, 0xaed2}}, {0xfffb, 0x1ff, {0x2, 0x5979}}, {0x6, 0x4, {0x3, 0x6ef5}}, {0x3, 0xb, {0x1, 0x15}}, {0x9, 0xfffe, {0x3, 0x200}}, {0x6, 0xb68, {0x3, 0x1000}}, {0x7, 0x4, {0x1, 0x3}}, {0x4, 0x0, {0x1, 0x5}}, {0x1, 0x9, {0x0, 0xbaa6}}, {0xeb, 0xff, {0x1, 0x200}}, {0xf8, 0x101, {0x2, 0x1}}, {0x4, 0x0, {0x2, 0x4}}, {0xd, 0x1000, {0x1, 0xb4}}, {0x1, 0x3, {0x3, 0xedb}}, {0xc, 0xa212, {0x1, 0x3}}, {0x5, 0x3, {0x2, 0x9}}, {0x0, 0x8, {0x3, 0x8}}, {0x9, 0x1, {0x2, 0x3}}, {0xf78, 0x8001}, {0x4, 0x400, {0x1, 0x9}}, {0x81e, 0x2, {0x2, 0x88a}}, {0xfe00, 0x13a0, {0x1, 0x5a87045c}}]}}}, {{0x254, 0x1, {{0x3}, 0x3, 0x2, 0x100, 0xc04, 0x1f, 'syz0\x00', "fbc1f2cfecabe740301c562d4be090e14acc454724a2a5daf5f121fb99718e13", "77a4f1cdc9a022542357bdb31ac5f84a2ac9b81ff67aabb21e6592e7b4b75950", [{0x8000, 0x2, {0x3, 0x8}}, {0x4, 0x4, {0x0, 0x8001}}, {0xf000, 0x0, {0x1, 0x10001}}, {0x7, 0x1, {0x1, 0x2}}, {0x9746, 0x4, {0x1, 0x1}}, {0x8, 0x4, {0x3, 0x4}}, {0xfffc, 0x43f7, {0x1, 0x6bf}}, {0xc, 0x9, {0x2, 0x6c9}}, {0x7, 0x7, {0x3, 0x1000}}, {0x7, 0x40, {0x1, 0x8}}, {0x1, 0x0, {0x0, 0xc}}, {0x86, 0x1}, {0x7, 0x4, {0x3, 0x2}}, {0x2c, 0xa, {0x2, 0xd2}}, {0x6, 0x81, {0x0, 0x10}}, {0x4, 0x0, {0x2, 0x400000}}, {0x7ff, 0x8, {0x0, 0x9b6}}, {0xfff8, 0x4, {0x2, 0x4}}, {0x6, 0xfa6, {0x2, 0x38}}, {0xf9, 0x5, {0x1}}, {0x9, 0x8, {0x3, 0x6}}, {0x6, 0x2, {0x2, 0x101}}, {0x93, 0xffff, {0x1, 0x8}}, {0x773, 0x800, {0x1, 0x9}}, {0x9, 0x10, {0x1, 0x2}}, {0x6, 0x400, {0x1, 0x2}}, {0x4, 0xffdf, {0x2, 0x6}}, {0x40, 0xfff, {0x2, 0x7}}, {0xd907, 0x0, {0x3, 0x101}}, {0x40, 0xbd8, {0x3, 0x232b}}, {0x0, 0xd, {0x2, 0x4}}, {0x8, 0x3, {0x3, 0x2}}, {0x3, 0x4, {0x1, 0x80000000}}, {0x5, 0x2, {0x2, 0x1}}, {0x7, 0x1, {0x1, 0x4}}, {0x7, 0x0, {0x0, 0x3}}, {0x3d9, 0xd, {0x0, 0x4}}, {0x4, 0x3, {0x0, 0x7fffffff}}, {0x0, 0xc, {0x0, 0xa8}}, {0x6, 0x7f, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0xf8, 0x2, 0x9, 0x5, 0x1, 'syz0\x00', "9a5d6268efda3c111aedcf4f8b5d6488fafd87908e64c214e6f02a9c9583a80a", "54b79b311a421521b169b35c05de1d1d01b2bcb74bc274f6916deffcb41bd5d2", [{0x9, 0xfff, {0x1, 0xff}}, {0x40, 0x10, {0x1, 0x5}}, {0xfffd, 0x1, {0x0, 0x9}}, {0xfff7, 0x0, {0x0, 0x9}}, {0xc, 0x4, {0x3, 0x2}}, {0x3, 0x9, {0x3, 0xffff}}, {0xffff, 0x0, {0x1, 0x400}}, {0x4, 0xffff, {0x0, 0xffff}}, {0x8001, 0x0, {0x0, 0x5}}, {0x7ff, 0x7, {0x2, 0x4}}, {0x2, 0x2, {0x2, 0x3ff}}, {0x0, 0x5, {0x0, 0x2}}, {0x6, 0x5, {0x1, 0x800}}, {0x0, 0x8, {0x0, 0x4}}, {0xfff8, 0x6, {0x1, 0xa}}, {0x8, 0x3, {0x3, 0x400}}, {0x62, 0x1, {0x3, 0x6}}, {0x0, 0x7, {0x1, 0x4}}, {0x9, 0x2, {0x1, 0x5}}, {0xfff7, 0x1000, {0x2, 0x8}}, {0x9, 0x8000, {0x0, 0x400}}, {0x2, 0x7ff, {0x2, 0x4}}, {0x4, 0x4, {0x1, 0x2}}, {0x45, 0x5, {0x3, 0x1}}, {0x8001, 0x3, {0x1, 0xffffffff}}, {0x0, 0x1, {0x1, 0x3}}, {0x1, 0x2, {0x0, 0x3}}, {0x3ff, 0xfff, {0x5a7d6371a48c4342, 0x7fffffff}}, {0x6, 0x3, {0x2, 0x9}}, {0x6, 0x8001, {0x1, 0x7}}, {0x7, 0x9}, {0x9, 0x56f, {0x0, 0x2d4}}, {0x9, 0x1, {0x1, 0x8}}, {0x9e3, 0x0, {0x1, 0x1}}, {0x7f, 0x80, {0x2, 0x3}}, {0x8000, 0x7f, {0x1, 0x40}}, {0x0, 0x6, {0x3, 0x40}}, {0x1000, 0x8, {0x1, 0x74c}}, {0x1, 0x7, {0x0, 0x8}}, {0x71d, 0x8, {0x0, 0x8001}}]}}}, {{0x254, 0x1, {{0x2, 0x31ea}, 0x4, 0x8, 0x5, 0xfff7, 0x5, 'syz1\x00', "e9ae45c4a8ff6aaadfab7b24d70af348c226d31c099a3d230866e4ef0de47f1c", "6ba47fa54350fb94ae2db31f30d4534fa02f6a6a0d5114912e2acf13c4698dd9", [{0x1, 0x7ff, {0x0, 0x200}}, {0x1000, 0x8, {0x1, 0x4}}, {0x1, 0x6, {0x1, 0xfff}}, {0x4, 0x8000, {0x1, 0x6}}, {0x401, 0x1, {0x3, 0x2c9cb0dc}}, {0x4, 0x2, {0x0, 0x40ec342c}}, {0x3d56, 0x80, {0x1, 0x9}}, {0x4, 0x8, {0x3, 0x2}}, {0x5, 0x7fff, {0x0, 0x80000000}}, {0x7f, 0x6000, {0x1, 0x9}}, {0x8001, 0x10, {0x1, 0x8}}, {0x2, 0x2, {0x1, 0x8}}, {0x60, 0x5, {0x3, 0x5}}, {0x7, 0x60e8, {0x1, 0x800}}, {0xab, 0x10, {0x2, 0xa}}, {0x1, 0x6a32, {0x1, 0xffffffc0}}, {0x0, 0x9, {0x2, 0x1}}, {0xffff, 0x1, {0x1, 0x4}}, {0x1, 0xfffd, {0x3, 0x1}}, {0x6, 0x1, {0x3, 0x10000}}, {0x9, 0x8, {0x3, 0x80}}, {0x7, 0x100, {0x2, 0x4}}, {0x7ff, 0x3, {0x2, 0x2}}, {0x6, 0x43, {0x0, 0xff}}, {0x81, 0x710, {0x2}}, {0x0, 0x9, {0x1, 0x2}}, {0x9, 0x400, {0x2, 0x9}}, {0x800, 0x6, {0x1, 0x4}}, {0x8, 0x4, {0x2, 0xd43}}, {0x400, 0x5, {0x1, 0xff}}, {0x7, 0x1, {0x3, 0x8}}, {0x1, 0xfff, {0x2, 0xda55}}, {0x10, 0x917, {0x1, 0xab}}, {0xfff, 0x4, {0x0, 0x8}}, {0x5, 0x1, {0x2, 0x7}}, {0x6, 0x9, {0x1, 0x82}}, {0x7, 0x2, {0x3, 0x566}}, {0x6, 0x1, {0x1, 0xc}}, {0x8, 0x6a5, {0x2, 0x7}}, {0x1, 0x1, {0x1, 0x53a}}]}}}, {{0x254, 0x1, {{0x1, 0x31ca}, 0xc, 0x6, 0x7, 0xff, 0xb, 'syz0\x00', "242807be745da32dcd9f04dcfcdaf91ffa1d2db48aac9cc9fe3c83cccf3b2c22", "a22668c522a1de156ec896fe61a4a33b8c8afe3a41165a4659cbe843a14d86a8", [{0xf, 0x9a8d, {0x1, 0x4}}, {0x6, 0x7, {0x1, 0x3}}, {0xf6b1, 0x99e, {0x0, 0x8}}, {0xf, 0xc81d}, {0x3, 0x6, {0x2, 0x9}}, {0xcd1, 0x1, {0x1, 0x7}}, {0x8, 0x0, {0x2, 0x1}}, {0x5, 0x65a5, {0x1, 0x9}}, {0x2, 0x2, {0x3, 0x80000001}}, {0x107, 0xe, {0x2, 0x68d}}, {0x100, 0x7fff, {0x1, 0x2}}, {0x1ff, 0x2, {0x0, 0x9}}, {0x6, 0x859, {0x1, 0x80000001}}, {0x4, 0x40, {0x0, 0x3}}, {0x4, 0x9, {0x3, 0xea70}}, {0x9b, 0x6, {0x3}}, {0x8001, 0x8353, {0x3, 0x7}}, {0x5, 0x5, {0x1, 0x7fff}}, {0x10, 0x5, {0x3, 0x3ff}}, {0x401, 0x8, {0x1, 0x1}}, {0x5, 0x7, {0x3, 0xfffffff4}}, {0x2, 0x28, {0x0, 0x7d47}}, {0x1, 0x8, {0x0, 0x8}}, {0x1, 0xd, {0x0, 0x8}}, {0xc, 0x8, {0x2, 0x101}}, {0x9, 0x4879, {0x3, 0x4}}, {0xfffb, 0xffff, {0x3, 0x1}}, {0x4, 0xb6e7, {0x2, 0x1}}, {0x6, 0x7f, {0x2, 0xa}}, {0x8, 0x2, {0x2, 0x100}}, {0xf22b, 0xe, {0x1, 0x8001}}, {0x1, 0x928, {0x2, 0x42786db8}}, {0x3, 0x6, {0x2, 0x8}}, {0x6a94, 0x5fe0, {0x0, 0x9}}, {0x8, 0x6, {0x0, 0x7}}, {0x2, 0xfffe, {0x3, 0x7fff}}, {0xbc, 0x9, {0x0, 0x80}}, {0xff, 0x974, {0x0, 0x7}}, {0x1, 0x2, {0x1, 0x6}}, {0x2, 0x3, {0x1, 0x8}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000004340), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000004400)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x38, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x20000001) r10 = syz_genetlink_get_family_id$team(&(0x7f0000004480), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000044c0)={'team0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000004500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004540)=0x14) getpeername$packet(r2, &(0x7f0000004580)={0x11, 0x0, 0x0}, &(0x7f00000045c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004600)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000004dc0)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004d80)={&(0x7f0000004640)={0x71c, r10, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe844}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd83}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa8}}}]}}, {{0x8, 0x1, r8}, {0x270, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa0}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0xbc, 0x4, 0xb}, {0x5, 0x80, 0x4}, {0x9, 0xa, 0x6, 0x5}, {0x8, 0x1, 0xfd, 0x1ff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x784a}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff7, 0x9, 0x1e, 0x8}, {0x306, 0x7, 0x1, 0x2}, {0x10, 0xc, 0x81, 0x4565}, {0x8000, 0x7f, 0x7f, 0x1}, {0x3e56, 0x10, 0x8, 0x80000000}, {0x4, 0x0, 0x4, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x71c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) openat$fb0(0xffffffffffffff9c, &(0x7f0000004e00), 0x200, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r5, 0x80306e85, &(0x7f0000004e40)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004e80)={'ip6tnl0\x00'}) timer_create(0x0, &(0x7f0000004ec0)={0x0, 0x12, 0x1, @tid=r0}, &(0x7f0000004f00)) 13.970665999s ago: executing program 0 (id=1554): pipe2$9p(0x0, 0x840) r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x8, 0x30}, &(0x7f00000003c0)=0xc) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x75, @none, 0xfffe, 0x1}, 0xe) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000004740), 0x8002) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000004780)={0xff, 0xb, 0xe, {0x3, 0x9}, 0x201f, 0xfffffff9}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000004800)={0xc, {0x5, 0x5, 0x7, 0x3}}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000004840)={0xe, "8f7fc84c06181098fd5df74722d5603575b510dfd47f1e05020814e01926d94274b870fcbfa54f695d53c0ff8f2830d543b206acde199331bffa0bb79d8ad238a622788d162e72dd216fa250dc02387b53d46541b09b346e90122ab56addd0eee2b869ad1037f5ef6a304887a5fe21e5cd51e665c0f3b8f835ab756636b33e9ca60f1ee69c718be9b12e16573cdeed3f12400685957607720008a727943b6cb5c7832c8bcb680e6c21efccf54d1d84baafc82cd5a69ac953fd437ef5040a1bb4c5a5a4c4f4f8a1bba9a7e2cc5a2bbd29a30a7f934f76b857fe1cfbc3601f3489e4fc3eaf11ce7c4d90e7e71b1bd9f96674fc524de1231f2478cffa3769a165937dc3c75f4fd30152b0da582f45ece5e5144dd3b98b317abf20da540de7b09927a59fa7689987e5cfef92d20a002d77cfb13331e6f11b91feb416450c29875a15f47810ba731458045bb754c1b1c6143e7dceb0ae5549bcb6e0d6c3a896f10f7676b690b5ae37f8e2c9052127e62c8168c7f7c5c5c63d0c140c38af668c14d87994cf77236acc856d853b93864139f8406efd5e890760b711614f3e3e83df82fccb34b895fe4d4749692dcd4edacb5abe6d0966a71d19e226fecff5be414a338f6e58bcc5b142b82fb36fb57ca9583089686012bcf2327e87aa16822f54c47a742647e7101ef38d4ceb2d5e71d49439bfd6a380121a62390b0e74d16c91c2b70b"}) 12.170815654s ago: executing program 5 (id=1562): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)={[{@grpid}, {@mblk_io_submit}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@inode_readahead_blks}, {@delalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x124b8b7, 0x0, 0x3, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x38416761, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) pipe(&(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080)=0x4, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}, 0x800) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r3, r4) 10.356339998s ago: executing program 5 (id=1567): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000009ddfbfec70b90cba8df03fe35550f6eadbc3c76ad7512583f9574b2b859177a9320aaaefa93a8a17a0f798646ab42c39dee6035ca65588219d3fdaaddf186db16fa163b58c1fc4051bfaef612bbd680c07997e2caac547c7d02b17fd82caeb1e0910e552f6f49dd859212f5f3e5dad44ddb4d69dfedbd7389c942aaa930f6971b29d3b15f7bbe88089882e876587093aa69916d9ebbe09b9406a22d134ba2727ab8044eb26b5aee7d99e240ef4e4511b8f79c6a1baa090f1a6a8d751d4ec43968fddb5f273a2658c4c0a18c93681dafedcbfee48c64dab8843a35f62195719395a9a00e605730647", @ANYRESHEX=0x0, @ANYBLOB="2c636f6465706167653d63703836302c63726561746f723da426dba32c00"], 0x4, 0x339, &(0x7f0000000140)="$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") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) (async) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) read$sequencer(r0, &(0x7f0000000480)=""/137, 0x89) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 9.202085436s ago: executing program 5 (id=1571): syz_emit_ethernet(0x38, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "54cefc", 0x2, 0x2f, 0x1, @local, @local, {[], "b760"}}}}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x40, 0x54) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x4, 0xda, 0x1}) 8.682889412s ago: executing program 2 (id=1572): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c015) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c015) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000005f80)={0x0, 0x0, &(0x7f0000005f40)={&(0x7f0000000280)={0x48, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, 0x0, 0x0}, 0x20) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) (async) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) 8.394702466s ago: executing program 6 (id=1573): prlimit64(0x0, 0x3, &(0x7f0000000040)={0x7, 0x800000089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2042, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000180)='&&):{$!&-\x00', 0x8800, &(0x7f0000000280)={@_ha_fsid={[0x6, 0xfffffff9]}, {0xb9c1, 0x8001, 0x3, 0x10001}}, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4}) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x40a027ab) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 8.213417316s ago: executing program 5 (id=1574): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f000001fb40)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x8084, &(0x7f00000000c0)=ANY=[], 0xfe, 0x17f, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000500)='rw\x00', 0x0, 0x0) (fail_nth: 2) 6.808682844s ago: executing program 6 (id=1575): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$char_usb(r0, 0x0, 0x0) 6.64582868s ago: executing program 4 (id=1576): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)={[{@grpid}, {@mblk_io_submit}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@inode_readahead_blks}, {@delalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x124b8b7, 0x0, 0x3, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x38416761, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) pipe(&(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080)=0x4, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}, 0x800) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r3, r4) 6.336476583s ago: executing program 2 (id=1577): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b408000000000000000000000000000085106bdf00000000b700000000ee00009500c2090000000095000012009e00b70f83f2bbf71c3836e774c323dc2364a1adcaee67af6fd93d9963e012d38455ecd1b6543ae1370d9c092aa3e665830050e4d634a4745c5285ebe8c4e13900"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 5.997882919s ago: executing program 2 (id=1578): syz_mount_image$bfs(&(0x7f0000000340), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xb5, &(0x7f0000000c40)="$eJzs1zFKxkAQBeC3v6IJiB7Ay+ghPIFH0EYIBA/kVWztbK0s0tqsmERimoBFEOH7msnLMsvAbrPPH0+XOU9qn9SjJDnNpNa7h8dsOdlc5T84zLX5OvGLKb9fJ1fjDaj1UJIM3e3r0N2Xpe1lrjfNert+Hc/2HR4AAPiVskrN8iAYvbXzR/vz7/F3Y9l/PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/9hkAAP//i+cWdw==") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000f80)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @local}}, 0x9, 0x1}, 0x90) 5.260446647s ago: executing program 4 (id=1579): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum64={0x2, 0x300, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000f80)=""/4094, 0x28, 0xffe, 0x1}, 0x28) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1004000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x11, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) 4.977092517s ago: executing program 2 (id=1580): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000001c00000004000000020000000003009301000000005f5f00"], &(0x7f0000000f80)=""/4094, 0x28, 0xffe, 0x1}, 0x28) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1004000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x11, 0x1) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f0000000100)=[@release={0x40046306, 0x2}, @increfs_done], 0xd7, 0x0, &(0x7f00000002c0)="7305cfac0c169c023e734ac3928c8dfda97012040b172337e95ea8e5b10069802fc224b164003795d9b1448d3388d763f65e85c8d85d93f2b37ccc7ff5629b63f2b3c9d648b7361e42a54095721126c0a74a2ee7b911d6bde7b3b651e4ae919c604215444ef08cc29d2b1743d7f92b4e1ebd3252edc3d5fdff1a7f239f884a9bd53fd5c3f83ebdb2a8fb311f76930a48c4a38d71c57760902387292ed72fdab056254c1758272806028c2f1e13cd2042b8297eae1a6729d6d3605fa0e591abc371585ef7bdea410b034da4ef2bab51e8d4662716fe6746"}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) 4.272450023s ago: executing program 6 (id=1581): write(0xffffffffffffffff, &(0x7f0000000100)="140000", 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x2}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b000300"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000080bfa300000000000007030000fffeffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001e2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000000000000bc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 4.18479094s ago: executing program 5 (id=1582): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x1fc, 0x24, 0x2, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0x1}, {0xfff3, 0x8}}, [@TCA_STAB={0x1d8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x4, 0x3, 0x3, 0x800, 0x9, 0x8}}, {0x14, 0x2, [0x4, 0x5, 0xfefc, 0x101, 0xa9, 0x1ea, 0xda, 0x1]}}, {{0x1c, 0x1, {0x25, 0x9, 0x0, 0x5, 0x1, 0xf, 0x9, 0x9}}, {0x16, 0x2, [0x6, 0x101, 0x9, 0x40, 0x400, 0xbc6a, 0x7, 0x401, 0x2]}}, {{0x1c, 0x1, {0x3, 0x2, 0x3, 0x3, 0x1, 0x5, 0x1, 0x8}}, {0x14, 0x2, [0xfffd, 0xd, 0x8001, 0x1, 0x6, 0x6, 0x8, 0x7]}}, {{0x1c, 0x1, {0x4, 0x3, 0xb, 0x8, 0x1, 0x3, 0x0, 0x4}}, {0xc, 0x2, [0x6, 0x9, 0x6, 0x2]}}, {{0x1c, 0x1, {0x1d, 0x9, 0x4, 0x8, 0x0, 0xff, 0x4, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x3, 0x8, 0x1ff, 0x87, 0xa08f, 0x5, 0xe8dd]}}, {{0x1c, 0x1, {0xe, 0x9, 0xe09, 0x400, 0x2, 0x8, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xff, 0x1, 0x0, 0x7, 0x0, 0x6c5, 0x9, 0x7}}, {0x12, 0x2, [0x5, 0xf2, 0xfff9, 0xe00, 0xd78a, 0x4, 0x8000]}}, {{0x1c, 0x1, {0x9, 0x7, 0x6, 0x2, 0x1, 0x3, 0x0, 0xa}}, {0x18, 0x2, [0x9, 0x0, 0x73a, 0x1ff, 0x43bf, 0x24, 0x3, 0x80, 0x40, 0x6]}}, {{0x1c, 0x1, {0x80, 0xf3, 0x2, 0x80000000, 0x2, 0xb, 0x30d, 0x8}}, {0x14, 0x2, [0xdb6, 0x8001, 0xc, 0x244, 0xfff7, 0x8, 0x4, 0x7]}}, {{0x1c, 0x1, {0xff, 0x6, 0x7fff, 0x800, 0x0, 0x7d2, 0x81, 0x6}}, {0x10, 0x2, [0x4, 0xeeb3, 0x3ff, 0x8f20, 0x1ff, 0x9]}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 4.112396432s ago: executing program 4 (id=1583): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0, 0x814}) syz_emit_ethernet(0x86, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x50, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x3, 0x8, "a78ce5400659808000000003f7fffeffffffffffffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34466d42c6"}]}}}}}}, 0x0) io_uring_enter(r0, 0x1da8, 0xfffffffd, 0x9, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x2000, 0x0, {0x2, 0x0, 0x0, r8, 0x8, 0x10}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @random="44328a67ad89"}]}, 0x3c}}, 0x20024090) 3.8706127s ago: executing program 6 (id=1584): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x100000000007, 0x42) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x5, 0x800003, 0x200f, 0x34c85a18233b411, 0x8, 0x1, 0x0, 0x3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="ffff000000000000140012800900010076657468000000000400028008001f0004"], 0x3c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8ae257a062cc3564) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000740)={0xa, 0x4e23, 0x7, @mcast1, 0x7f}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0xae6a, 0x4) write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20, 0x8cf2826c8227b098, 0x0, {0x0, 0x11}}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d36726567300000000000000000140002", @ANYRES8, @ANYRES32, @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23fd063"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) 3.675690155s ago: executing program 2 (id=1585): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@umask={'umask', 0x3d, 0x1}}, {@type={'type', 0x3d, "98acdea6"}}, {@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'ascii'}}]}, 0x1, 0x5f1, &(0x7f000000ab40)="$eJzs3U9vHGcdB/DvbGwnDiJ126QtCISVHECNSLzeNvUBiYAQ8qFClbj00oOVbBIrG7eyt8itEHL4e+UdtAg5Z04cEIdIcOYlYIlDD0jcfQua2dl4G2/9p3G86+bzkZ59nmeemWee+Xnm2Z1ZWRvgubX4biYfpsji5bfXy/rWZquztdm61y8nOZ2kkUz0shQrSTGZXE8v5Rvlwrq74ov2894nby181nxwv1ebqFO1fmOv7Q5mo06ZTXKqzo+qvxtP2d/pgXIZsEv9wMGoPdpl4zCbP+V1C4yDove+uctMcjbJmf77WD07NI53dEfvULMcAAAAnFAvbGc76zk36nEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASVL//n9Rp0a/PJui//v/U/Wy1OUT7eGoBwAAAAAAAAAAR+A729nOes7164+K6jv/i1XlfPX6tXyYtbSzmitZz1K66WY1zSQzAx1NrS91u6vNA2w5P3TL+eM5XgAAAAAAAAD4ivp1Fne+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHFQJKd6WZXO98szaUwkOZNkqlxvI/l7v3ySPRz1AAAAAOAYvLCd7aznXL/+qKju+V+p7vvP5MOspJvldNNJOzerZwG9u/7G1mars7XZulem3f3+6H+HGkbVY3rPHobvea5a40LV/uepZDE/zc9zObN5J6tZzi+ylG7amc1PqtJSiszUTy9m+uMcPt7rn6u9s99YX6tGMp1bWa7GdiU38n46uZlGdQzVOnvv8X4ZneKHtQPG6Gadl0f0xzo/fhtDls1UEZl8HJG5OvZlNF7cOxKHPE+e3FMzjcfPoM4/g5ifrfMy1r8fWcyHeTIS8wNn3yt7RyK5+J9v//VOZ+XunVtrl8fnkL6kJyPRGojEq89VJKbqaPRm0f5sWdp/trxYbXsuy/lZ3s/NtPNmFvJm5vNG3shcFnJtIK4X9r/Wbic5zLV26Xt1YTrJH+p8PJRxfXEgroMz3UzVNrhkJ0ovHf2MNPHNulDu4zd1Ph6ejERzIBIv7x2JPz0qX9c6K3dX7yx9cMD9fbfOy8v2d2M1N5fny0vlH6uqff7sKNteHtrWrNrOP25r7Gq78O+v1237XalT9We43T3NV22vDm1rVW2vDbQN+5QDwNg7+/rZqen/Tv9r+tPp307fmX77zI9PL5z+1lQm/znxt1N/aTxo/KB4PZ/mVzv3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJe39tHHd5c6nfaqgsKJLUzUZ/O4jOerUBjxxAQ8c1e79z64uvbRx99fvrd0u327vdJqNa/NL1xbmL929dZypz3Xex31MIFnYOdNf9QjAQAAAAAAAAAAAA7qOP6dYNTHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxsi+9m8mGKNOeuzJX1rc1Wp0z98s6aE0kaSYpfJsU/kuvppcwMdFd80X7e++Sthc+aD+7v9DXRX7+x13YHs1GnzCY5VedH1d+Np+6veHyEZcAu9QMHo/b/AAAA//+udQwr") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 3.482569263s ago: executing program 4 (id=1586): syz_mount_image$ntfs3(&(0x7f000001f6c0), &(0x7f0000000280)='./file0\x00', 0x1014041, &(0x7f00000002c0)={[{@sparse}, {@prealloc}, {@hide_dot_files}, {}, {@umask={'umask', 0x3d, 0x2}}, {@sparse}, {@prealloc}, {@acl}, {@nohidden}, {@gid}, {@nohidden}, {@discard}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@force}]}, 0x0, 0x1f28a, &(0x7f00000003c0)="$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") r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x6) 3.354855737s ago: executing program 2 (id=1587): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) socket(0x2, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r0) 2.737117105s ago: executing program 4 (id=1588): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)={[{@grpid}, {@mblk_io_submit}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@inode_readahead_blks}, {@delalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x124b8b7, 0x0, 0x3, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x38416761, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) pipe(&(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080)=0x4, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r2, r4, r5) 2.532598529s ago: executing program 5 (id=1589): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) r0 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000070000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582600002"], 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000010000)=ANY=[@ANYBLOB="9feb01001800000000008b74f7f10c81", @ANYRESOCT], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x9f, 0x5, 0x6, 0x9, 0x5, 0x6, 0x129f, 0x10, 0x7, 0x10, 0xf, 0xc}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000020000100000000000000006b556c147ddf84d54b5445f16cae81d80102801000020000ed0f79e72fe057e39e02336e62a00a00000000"], 0x2c}}, 0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x28, 0x0}, 0xfffff453}], 0x4000000000001d3, 0x10120, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000140)=0x6, 0x4) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x90) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c200b80400000000000000000000001100020000014e20000c907801000000"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.833109587s ago: executing program 4 (id=1590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r0, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x4000) r2 = socket(0x10, 0x6, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904020800000000000000fe50a10a000600014002020c60ad307e0e357b4dd80a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb79164815ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x74, "8c82516348328b9dadf5ae14a1f7dcdb138838a29eb062ece801551dc48c3d1e08bf393f805b753778064380f6e07aaca960b8771d72160263187176ff187d81497848d52fbdc7e0fea7c3f2e52b8e598bb1a4ada835f1e4275e5f162f7d3f37b4d848ba411c0c753897e637287a924a5ffcbbea"}, &(0x7f0000000380)=0x98) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2dbe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0xb, 0x9, 0x1, {0x22, 0x4d0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7, 0xc, 0x2}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xd1, 0x4, 0x5, 0x10, 0x3}, 0x103, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1, [{0xf6, &(0x7f0000000480)=ANY=[@ANYBLOB="f603585613c7630a46977eecf533124702efdc931d811f25cc80793c0e0ace0539fde0bb4efd11db60c01c63169ede20902241c831ed7b82b36fc72a6fc34379174fc606aca7d9da3c5a790a2fba2e7826a698278dd5c965eaf61c5b932ecefd560f94c99c003512787711a8beda8177469dcd93a57427864b21590c817dc380869d79f628c4392433af919d32217de30dcec81ca2fd1eab8383d949820ceec84aeec15f99422f5a175647958644aa31d4b289484347a8c9aa5cd2813080f8b62cbaf2d7a59239c1cf0ef0786c6b445695c2cd3d8942c622f3c01c755aad476854afb7bdd448c3fc066f47dab36a01dca4ccf690a7b3"]}]}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x2, 0xf50f, 0x8, 0xcf10}}, &(0x7f0000001080), 0x1600) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f0000000040)={0x0}) socket$alg(0x26, 0x5, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0) 681.107291ms ago: executing program 6 (id=1591): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240)=0xc1, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_complete(0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x60, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe63}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea000000071104d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) 0s ago: executing program 6 (id=1592): syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x2c}, 0x94) (fail_nth: 5) kernel console output (not intermixed with test programs): 339.727755][ T8552] shmem_get_inode+0x3da/0xf70 [ 339.727778][ T8552] ? __pfx_shmem_get_inode+0x10/0x10 [ 339.727796][ T8552] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 339.727817][ T8552] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.727829][ T8552] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.727850][ T8552] __shmem_file_setup+0x20b/0x370 [ 339.727865][ T8552] ? rt_spin_lock+0x1e0/0x400 [ 339.727882][ T8552] ? __pfx___shmem_file_setup+0x10/0x10 [ 339.727899][ T8552] ? rt_spin_unlock+0x14f/0x200 [ 339.727918][ T8552] memfd_alloc_file+0x99/0x570 [ 339.727936][ T8552] ? __pfx_memfd_alloc_file+0x10/0x10 [ 339.727958][ T8552] __se_sys_memfd_create+0x329/0x420 [ 339.727975][ T8552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.727998][ T8552] do_syscall_64+0x174/0x580 [ 339.728009][ T8552] ? trace_irq_disable+0x3b/0x140 [ 339.728025][ T8552] ? clear_bhb_loop+0x40/0x90 [ 339.728040][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.728052][ T8552] RIP: 0033:0x7fd2dbccce59 [ 339.728065][ T8552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.728076][ T8552] RSP: 002b:00007fd2d9f25e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 339.728090][ T8552] RAX: ffffffffffffffda RBX: 000000000000553b RCX: 00007fd2dbccce59 [ 339.728100][ T8552] RDX: 00007fd2d9f25ee0 RSI: 0000000000000000 RDI: 00007fd2dbd62f4f [ 339.728108][ T8552] RBP: 0000200000006dc0 R08: 00000000ffffffff R09: 0000000000000000 [ 339.728116][ T8552] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 339.728124][ T8552] R13: 00007fd2d9f25ee0 R14: 00007fd2d9f25ea0 R15: 0000200000000080 [ 339.728142][ T8552] [ 340.469395][ T8559] loop1: detected capacity change from 0 to 4096 [ 340.493368][ T8559] ntfs3: Unknown parameter '0x0000000000000003' [ 340.498998][ T8548] EXT4-fs (loop3): 1 truncate cleaned up [ 340.509623][ T8548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.863817][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.334545][ T8575] loop4: detected capacity change from 0 to 128 [ 341.359697][ T8575] /dev/loop4: Can't open blockdev [ 341.661094][ T8596] loop2: detected capacity change from 0 to 1024 [ 341.734255][ T8596] EXT4-fs: Ignoring removed orlov option [ 341.736312][ T8596] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 341.899989][ T8596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.963990][ T8604] sock: sock_timestamping_bind_phc: sock not bind to device [ 341.975635][ T8596] netlink: 'syz.2.823': attribute type 14 has an invalid length. [ 341.975655][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 342.242117][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.484777][ T8621] loop3: detected capacity change from 0 to 1024 [ 342.492969][ T823] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 342.586875][ T8621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.594376][ T8621] FAULT_INJECTION: forcing a failure. [ 342.594376][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 342.594412][ T8621] CPU: 1 UID: 0 PID: 8621 Comm: syz.3.831 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.594440][ T8621] Tainted: [L]=SOFTLOCKUP [ 342.594447][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.594459][ T8621] Call Trace: [ 342.594466][ T8621] [ 342.594474][ T8621] dump_stack_lvl+0xe8/0x150 [ 342.594507][ T8621] should_fail_ex+0x46b/0x600 [ 342.594537][ T8621] should_failslab+0xa8/0x100 [ 342.594567][ T8621] kmem_cache_alloc_noprof+0x87/0x680 [ 342.594592][ T8621] ? do_getname+0x2e/0x250 [ 342.594618][ T8621] do_getname+0x2e/0x250 [ 342.594638][ T8621] ? user_path_at+0x1e/0x160 [ 342.594666][ T8621] user_path_at+0x2a/0x160 [ 342.594696][ T8621] __se_sys_mount+0x2dc/0x420 [ 342.594726][ T8621] ? __pfx___se_sys_mount+0x10/0x10 [ 342.594758][ T8621] ? __x64_sys_mount+0x20/0xc0 [ 342.594782][ T8621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.594803][ T8621] do_syscall_64+0x174/0x580 [ 342.594824][ T8621] ? trace_irq_disable+0x3b/0x140 [ 342.594854][ T8621] ? clear_bhb_loop+0x40/0x90 [ 342.594877][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.594896][ T8621] RIP: 0033:0x7fa017d4ce59 [ 342.594923][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.594939][ T8621] RSP: 002b:00007fa015f9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 342.594960][ T8621] RAX: ffffffffffffffda RBX: 00007fa017fc5fa0 RCX: 00007fa017d4ce59 [ 342.594975][ T8621] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 342.594987][ T8621] RBP: 00007fa015f9e090 R08: 0000200000000400 R09: 0000000000000000 [ 342.595000][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.595011][ T8621] R13: 00007fa017fc6038 R14: 00007fa017fc5fa0 R15: 00007fff84d12048 [ 342.595043][ T8621] [ 342.644287][ T823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.644319][ T823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30752, setting to 64 [ 342.644345][ T823] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.644489][ T823] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 342.644513][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.877007][ T823] usb 2-1: usb_control_msg returned -71 [ 342.877143][ T823] usbtmc 2-1:16.0: can't read capabilities [ 342.918377][ T823] usb 2-1: USB disconnect, device number 31 [ 343.002684][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.507938][ T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 343.610671][ T8655] FAULT_INJECTION: forcing a failure. [ 343.610671][ T8655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.610710][ T8655] CPU: 0 UID: 0 PID: 8655 Comm: syz.1.845 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 343.610736][ T8655] Tainted: [L]=SOFTLOCKUP [ 343.610743][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 343.610754][ T8655] Call Trace: [ 343.610761][ T8655] [ 343.610768][ T8655] dump_stack_lvl+0xe8/0x150 [ 343.610796][ T8655] should_fail_ex+0x46b/0x600 [ 343.610824][ T8655] _copy_from_user+0x2d/0xb0 [ 343.610854][ T8655] ___sys_sendmsg+0x1c6/0x360 [ 343.610875][ T8655] ? __lock_acquire+0x6b5/0x2d10 [ 343.610910][ T8655] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.610989][ T8655] ? __fget_files+0x2a/0x420 [ 343.611018][ T8655] ? __fget_files+0x3a6/0x420 [ 343.611059][ T8655] __x64_sys_sendmsg+0x1c3/0x2a0 [ 343.611087][ T8655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.611123][ T8655] ? __pfx_ksys_write+0x10/0x10 [ 343.611167][ T8655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.611192][ T8655] do_syscall_64+0x174/0x580 [ 343.611214][ T8655] ? trace_irq_disable+0x3b/0x140 [ 343.611242][ T8655] ? clear_bhb_loop+0x40/0x90 [ 343.611270][ T8655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.611293][ T8655] RIP: 0033:0x7fd2dbccce59 [ 343.611315][ T8655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.611334][ T8655] RSP: 002b:00007fd2d9f26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.611359][ T8655] RAX: ffffffffffffffda RBX: 00007fd2dbf45fa0 RCX: 00007fd2dbccce59 [ 343.611375][ T8655] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 343.611389][ T8655] RBP: 00007fd2d9f26090 R08: 0000000000000000 R09: 0000000000000000 [ 343.611403][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.611417][ T8655] R13: 00007fd2dbf46038 R14: 00007fd2dbf45fa0 R15: 00007ffd533ddde8 [ 343.611453][ T8655] [ 343.672008][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 343.674587][ T43] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 343.674619][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.727544][ T43] usb 5-1: config 0 descriptor?? [ 343.783761][ T43] gspca_main: sunplus-2.14.0 probing 041e:400b [ 344.229358][ T8665] tipc: Enabling of bearer rejected, failed to enable media [ 345.084063][ T8685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.858'. [ 345.084813][ T8685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.858'. [ 345.280759][ T8685] loop1: detected capacity change from 0 to 512 [ 345.377433][ T43] gspca_sunplus: reg_w_riv err -110 [ 345.377551][ T43] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 345.700500][ T8698] loop3: detected capacity change from 0 to 64 [ 345.777007][ T8698] hfs: unable to locate alternate MDB [ 345.777025][ T8698] hfs: continuing without an alternate MDB [ 346.071655][ T8703] loop2: detected capacity change from 0 to 128 [ 346.086375][ T8640] loop4: detected capacity change from 0 to 40427 [ 346.087526][ T8640] F2FS-fs: heap/no_heap options were deprecated [ 346.108070][ T8640] F2FS-fs (loop4): build fault injection rate: 19 [ 346.108095][ T8640] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 346.109125][ T8640] F2FS-fs (loop4): invalid crc value [ 346.185996][ T8640] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1850 [ 346.267823][ T5612] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 346.514858][ T8714] FAULT_INJECTION: forcing a failure. [ 346.514858][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 346.514909][ T8714] CPU: 1 UID: 0 PID: 8714 Comm: syz.0.871 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.514941][ T8714] Tainted: [L]=SOFTLOCKUP [ 346.514948][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.514960][ T8714] Call Trace: [ 346.514969][ T8714] [ 346.514978][ T8714] dump_stack_lvl+0xe8/0x150 [ 346.515013][ T8714] should_fail_ex+0x46b/0x600 [ 346.515047][ T8714] should_failslab+0xa8/0x100 [ 346.515081][ T8714] __kmalloc_cache_noprof+0x84/0x690 [ 346.515110][ T8714] ? assoc_array_insert+0x428/0x2f60 [ 346.515142][ T8714] assoc_array_insert+0x428/0x2f60 [ 346.515176][ T8714] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.515210][ T8714] ? lockdep_hardirqs_on+0x7a/0x110 [ 346.515251][ T8714] __key_link_begin+0xd6/0x1f0 [ 346.515286][ T8714] __key_create_or_update+0x449/0xa80 [ 346.515322][ T8714] ? __pfx___key_create_or_update+0x10/0x10 [ 346.515353][ T8714] ? __might_fault+0xaf/0x130 [ 346.515397][ T8714] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 346.515427][ T8714] ? __pfx_keyring_search_iterator+0x10/0x10 [ 346.515465][ T8714] key_create_or_update+0x42/0x60 [ 346.515497][ T8714] __se_sys_add_key+0x349/0x420 [ 346.515533][ T8714] ? __pfx___se_sys_add_key+0x10/0x10 [ 346.515574][ T8714] ? __x64_sys_add_key+0x20/0xc0 [ 346.515607][ T8714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.515631][ T8714] do_syscall_64+0x174/0x580 [ 346.515652][ T8714] ? trace_irq_disable+0x3b/0x140 [ 346.515680][ T8714] ? clear_bhb_loop+0x40/0x90 [ 346.515709][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.515730][ T8714] RIP: 0033:0x7f837411ce59 [ 346.515752][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.515772][ T8714] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 346.515796][ T8714] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 346.515811][ T8714] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000000 [ 346.515826][ T8714] RBP: 00007f8372376090 R08: 000000001f3fc3cf R09: 0000000000000000 [ 346.515840][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.515853][ T8714] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 346.515895][ T8714] [ 346.602036][ T823] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 346.853559][ T8715] loop3: detected capacity change from 0 to 64 [ 346.862287][ T8715] minix: Unknown parameter 'ÿ†æ_É\ì77ÿÀƒéBÚ2­ž`‚+þÃK‘@" [ 346.862287][ T8715] øt¤Ù’!î®öÙ.…•ªÊ¶I%¡ëléŽôšF((ù[+v[sœY÷U' [ 346.952106][ T823] usb 2-1: device descriptor read/64, error -71 [ 347.193065][ T823] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 347.322957][ T823] usb 2-1: device descriptor read/64, error -71 [ 347.429459][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 347.446809][ T823] usb usb2-port1: attempt power cycle [ 347.534543][ T8640] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 347.565112][ T8640] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 347.611010][ T8726] team0 (unregistering): Port device team_slave_0 removed [ 347.683722][ T8715] loop3: detected capacity change from 0 to 40427 [ 347.684883][ T8715] f2fs: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0177777777777777777777701777777777777777777777' [ 347.708121][ T8726] team0 (unregistering): Port device team_slave_1 removed [ 347.784415][ T823] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 347.804496][ T823] usb 2-1: device descriptor read/8, error -71 [ 348.042055][ T823] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 348.065744][ T823] usb 2-1: device descriptor read/8, error -71 [ 348.176243][ T823] usb usb2-port1: unable to enumerate USB device [ 348.232835][ T8739] FAULT_INJECTION: forcing a failure. [ 348.232835][ T8739] name failslab, interval 1, probability 0, space 0, times 0 [ 348.232874][ T8739] CPU: 1 UID: 0 PID: 8739 Comm: syz.0.881 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.232914][ T8739] Tainted: [L]=SOFTLOCKUP [ 348.232921][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.232934][ T8739] Call Trace: [ 348.232941][ T8739] [ 348.232949][ T8739] dump_stack_lvl+0xe8/0x150 [ 348.232982][ T8739] should_fail_ex+0x46b/0x600 [ 348.233014][ T8739] should_failslab+0xa8/0x100 [ 348.233045][ T8739] __kmalloc_noprof+0xdf/0x7b0 [ 348.233071][ T8739] ? kfree+0x4d/0x6c0 [ 348.233093][ T8739] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 348.233129][ T8739] tomoyo_realpath_from_path+0xe3/0x5d0 [ 348.233158][ T8739] ? tomoyo_domain+0xd7/0x130 [ 348.233193][ T8739] ? tomoyo_path_number_perm+0x219/0x630 [ 348.233216][ T8739] tomoyo_path_number_perm+0x246/0x630 [ 348.233243][ T8739] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 348.233265][ T8739] ? __lock_acquire+0x6b5/0x2d10 [ 348.233300][ T8739] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.233358][ T8739] ? __fget_files+0x2a/0x420 [ 348.233388][ T8739] ? __fget_files+0x2a/0x420 [ 348.233412][ T8739] ? __fget_files+0x3a6/0x420 [ 348.233436][ T8739] ? __fget_files+0x2a/0x420 [ 348.233465][ T8739] security_file_ioctl+0xc3/0x2a0 [ 348.233489][ T8739] __se_sys_ioctl+0x47/0x170 [ 348.233509][ T8739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.233531][ T8739] do_syscall_64+0x174/0x580 [ 348.233550][ T8739] ? trace_irq_disable+0x3b/0x140 [ 348.233575][ T8739] ? clear_bhb_loop+0x40/0x90 [ 348.233600][ T8739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.233620][ T8739] RIP: 0033:0x7f837411ce59 [ 348.233640][ T8739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.233658][ T8739] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.233681][ T8739] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 348.233696][ T8739] RDX: 0000200000000a40 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 348.233709][ T8739] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 348.233722][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.233733][ T8739] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 348.233767][ T8739] [ 348.233808][ T8739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 348.298008][ T8715] loop3: detected capacity change from 0 to 256 [ 348.611021][ T823] usb 5-1: USB disconnect, device number 22 [ 349.003240][ T43] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 349.244953][ T8758] FAULT_INJECTION: forcing a failure. [ 349.244953][ T8758] name failslab, interval 1, probability 0, space 0, times 0 [ 349.244994][ T8758] CPU: 0 UID: 0 PID: 8758 Comm: syz.4.884 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 349.245026][ T8758] Tainted: [L]=SOFTLOCKUP [ 349.245033][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.245045][ T8758] Call Trace: [ 349.245053][ T8758] [ 349.245062][ T8758] dump_stack_lvl+0xe8/0x150 [ 349.245099][ T8758] should_fail_ex+0x46b/0x600 [ 349.245133][ T8758] should_failslab+0xa8/0x100 [ 349.245168][ T8758] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 349.245197][ T8758] ? __alloc_skb+0x1d0/0x7d0 [ 349.245229][ T8758] ? lockdep_hardirqs_on+0x7a/0x110 [ 349.245257][ T8758] __alloc_skb+0x1d0/0x7d0 [ 349.245296][ T8758] alloc_skb_with_frags+0xc8/0x760 [ 349.245319][ T8758] ? __lock_acquire+0x6b5/0x2d10 [ 349.245359][ T8758] sock_alloc_send_pskb+0x884/0x9a0 [ 349.245383][ T8758] ? unwind_next_frame+0xa6/0x2550 [ 349.245437][ T8758] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 349.245468][ T8758] ? __lock_acquire+0x6b5/0x2d10 [ 349.245502][ T8758] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 349.245540][ T8758] unix_dgram_sendmsg+0x460/0x18d0 [ 349.245582][ T8758] ? aa_file_perm+0x192/0x15f0 [ 349.245619][ T8758] ? aa_file_perm+0x51a/0x15f0 [ 349.245656][ T8758] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 349.245692][ T8758] ? hook_socket_sendmsg+0x170/0x340 [ 349.245732][ T8758] ? __pfx_aa_file_perm+0x10/0x10 [ 349.245763][ T8758] ? aa_sock_msg_perm+0x107/0x200 [ 349.245793][ T8758] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 349.245823][ T8758] sock_sendmsg_nosec+0x13a/0x180 [ 349.245864][ T8758] sock_write_iter+0x308/0x410 [ 349.245894][ T8758] ? __pfx_sock_write_iter+0x10/0x10 [ 349.245946][ T8758] vfs_write+0x629/0xba0 [ 349.245991][ T8758] ? __pfx_vfs_write+0x10/0x10 [ 349.246036][ T8758] ? __fget_files+0x2a/0x420 [ 349.246077][ T8758] ksys_write+0x156/0x270 [ 349.246113][ T8758] ? __pfx_ksys_write+0x10/0x10 [ 349.246157][ T8758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.246182][ T8758] do_syscall_64+0x174/0x580 [ 349.246204][ T8758] ? trace_irq_disable+0x3b/0x140 [ 349.246232][ T8758] ? clear_bhb_loop+0x40/0x90 [ 349.246260][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.246282][ T8758] RIP: 0033:0x7f386e9fce59 [ 349.246304][ T8758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.246323][ T8758] RSP: 002b:00007f386cc35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.246349][ T8758] RAX: ffffffffffffffda RBX: 00007f386ec76090 RCX: 00007f386e9fce59 [ 349.246366][ T8758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 349.246379][ T8758] RBP: 00007f386cc35090 R08: 0000000000000000 R09: 0000000000000000 [ 349.246393][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.246407][ T8758] R13: 00007f386ec76128 R14: 00007f386ec76090 R15: 00007ffdc123f768 [ 349.246443][ T8758] [ 349.528117][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 349.530313][ T43] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 349.530355][ T43] usb 3-1: can't read configurations, error -71 [ 349.842296][ T8762] loop2: detected capacity change from 0 to 64 [ 349.868176][ T8766] loop1: detected capacity change from 0 to 256 [ 349.889858][ T8766] exfat: Unknown parameter 'ÿÿÿÿÙ²Þ/QÚq ÈŠˆð•Q9¯ÕÈ]@œÕywÛ{|@­âŠ3¦coô' [ 349.942999][ T8762] hfs: unable to locate alternate MDB [ 349.943015][ T8762] hfs: continuing without an alternate MDB [ 350.140774][ T8770] loop1: detected capacity change from 0 to 16 [ 350.145904][ T8770] erofs (device loop1): mounted with root inode @ nid 36. [ 350.341303][ T5612] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 350.341498][ T5612] Bluetooth: hci1: Injecting HCI hardware error event [ 350.375616][ T5626] Bluetooth: hci1: hardware error 0x00 [ 351.098374][ T8782] FAULT_INJECTION: forcing a failure. [ 351.098374][ T8782] name failslab, interval 1, probability 0, space 0, times 0 [ 351.098416][ T8782] CPU: 0 UID: 0 PID: 8782 Comm: syz.4.897 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 351.098446][ T8782] Tainted: [L]=SOFTLOCKUP [ 351.098453][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.098465][ T8782] Call Trace: [ 351.098473][ T8782] [ 351.098483][ T8782] dump_stack_lvl+0xe8/0x150 [ 351.098525][ T8782] should_fail_ex+0x46b/0x600 [ 351.098562][ T8782] should_failslab+0xa8/0x100 [ 351.098595][ T8782] __kmalloc_cache_noprof+0x84/0x690 [ 351.098626][ T8782] ? tipc_topsrv_queue_evt+0xef/0x300 [ 351.098658][ T8782] tipc_topsrv_queue_evt+0xef/0x300 [ 351.098691][ T8782] tipc_sub_report_overlap+0x4bd/0x8b0 [ 351.098730][ T8782] tipc_nametbl_remove_publ+0xec1/0x1ed0 [ 351.098759][ T8782] ? tipc_nametbl_remove_publ+0x13f/0x1ed0 [ 351.098792][ T8782] ? rcu_is_watching+0x15/0xb0 [ 351.098846][ T8782] tipc_nametbl_withdraw+0x97/0x2c0 [ 351.098874][ T8782] ? tipc_nametbl_withdraw+0x70/0x2c0 [ 351.098903][ T8782] tipc_sk_withdraw+0x301/0x650 [ 351.098946][ T8782] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 351.098977][ T8782] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 351.099000][ T8782] ? lockdep_hardirqs_on+0x7a/0x110 [ 351.099031][ T8782] tipc_sk_bind+0x234/0x300 [ 351.099060][ T8782] ? tipc_bind+0x6c/0x260 [ 351.099095][ T8782] __sys_bind+0x2e9/0x410 [ 351.099132][ T8782] ? __pfx___sys_bind+0x10/0x10 [ 351.099182][ T8782] ? __pfx_ksys_write+0x10/0x10 [ 351.099224][ T8782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.099250][ T8782] __x64_sys_bind+0x7a/0x90 [ 351.099284][ T8782] do_syscall_64+0x174/0x580 [ 351.099306][ T8782] ? trace_irq_disable+0x3b/0x140 [ 351.099335][ T8782] ? clear_bhb_loop+0x40/0x90 [ 351.099364][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.099385][ T8782] RIP: 0033:0x7f386e9fce59 [ 351.099407][ T8782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.099425][ T8782] RSP: 002b:00007f386cc56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 351.099448][ T8782] RAX: ffffffffffffffda RBX: 00007f386ec75fa0 RCX: 00007f386e9fce59 [ 351.099464][ T8782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 351.099477][ T8782] RBP: 00007f386cc56090 R08: 0000000000000000 R09: 0000000000000000 [ 351.099490][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.099503][ T8782] R13: 00007f386ec76038 R14: 00007f386ec75fa0 R15: 00007ffdc123f768 [ 351.099541][ T8782] [ 351.310149][ T8770] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 352.452715][ T8769] FAULT_INJECTION: forcing a failure. [ 352.452715][ T8769] name failslab, interval 1, probability 0, space 0, times 0 [ 352.452743][ T8769] CPU: 1 UID: 0 PID: 8769 Comm: syz.0.892 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 352.452762][ T8769] Tainted: [L]=SOFTLOCKUP [ 352.452766][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.452774][ T8769] Call Trace: [ 352.452780][ T8769] [ 352.452786][ T8769] dump_stack_lvl+0xe8/0x150 [ 352.452808][ T8769] should_fail_ex+0x46b/0x600 [ 352.452833][ T8769] should_failslab+0xa8/0x100 [ 352.452853][ T8769] __kmalloc_noprof+0xdf/0x7b0 [ 352.452868][ T8769] ? kfree+0x4d/0x6c0 [ 352.452882][ T8769] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 352.452904][ T8769] tomoyo_realpath_from_path+0xe3/0x5d0 [ 352.452929][ T8769] tomoyo_check_open_permission+0x229/0x470 [ 352.452945][ T8769] ? tomoyo_check_open_permission+0x1d3/0x470 [ 352.452959][ T8769] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 352.452974][ T8769] ? __asan_memset+0x22/0x50 [ 352.453004][ T8769] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 352.453024][ T8769] ? tomoyo_file_open+0x166/0x220 [ 352.453045][ T8769] security_file_open+0xa9/0x240 [ 352.453060][ T8769] do_dentry_open+0x4c0/0x13e0 [ 352.453078][ T8769] ? vfs_open+0x31/0x350 [ 352.453095][ T8769] vfs_open+0x3b/0x350 [ 352.453108][ T8769] ? path_openat+0x2ed3/0x3960 [ 352.453128][ T8769] path_openat+0x2eea/0x3960 [ 352.453166][ T8769] ? __pfx_path_openat+0x10/0x10 [ 352.453187][ T8769] ? kasan_save_track+0x4f/0x80 [ 352.453201][ T8769] ? kasan_save_track+0x3e/0x80 [ 352.453215][ T8769] ? __kasan_slab_alloc+0x6c/0x80 [ 352.453236][ T8769] ? do_raw_spin_lock+0x12b/0x2f0 [ 352.453256][ T8769] do_file_open+0x23e/0x4a0 [ 352.453274][ T8769] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 352.453296][ T8769] ? __pfx_do_file_open+0x10/0x10 [ 352.453313][ T8769] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 352.453342][ T8769] ? alloc_fd+0x679/0x6f0 [ 352.453364][ T8769] do_sys_openat2+0x115/0x200 [ 352.453382][ T8769] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.453398][ T8769] ? ksys_write+0x248/0x270 [ 352.453418][ T8769] ? __pfx_ksys_write+0x10/0x10 [ 352.453438][ T8769] __x64_sys_openat+0x138/0x170 [ 352.453456][ T8769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.453469][ T8769] do_syscall_64+0x174/0x580 [ 352.453481][ T8769] ? trace_irq_disable+0x3b/0x140 [ 352.453497][ T8769] ? clear_bhb_loop+0x40/0x90 [ 352.453515][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.453528][ T8769] RIP: 0033:0x7f83740dd68e [ 352.453541][ T8769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 352.453551][ T8769] RSP: 002b:00007f8372375b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 352.453565][ T8769] RAX: ffffffffffffffda RBX: 00007f83723766c0 RCX: 00007f83740dd68e [ 352.453581][ T8769] RDX: 0000000000000001 RSI: 00007f8372375c00 RDI: ffffffffffffff9c [ 352.453590][ T8769] RBP: 00007f8372375c00 R08: 0000000000000000 R09: 0000000000000000 [ 352.453598][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 352.453606][ T8769] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 352.453625][ T8769] [ 352.453630][ T8769] ERROR: Out of memory at tomoyo_realpath_from_path. [ 352.572660][ T8784] veth11: entered promiscuous mode [ 352.572690][ T8784] veth11: entered allmulticast mode [ 352.902117][ T5626] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 353.058598][ T8791] FAULT_INJECTION: forcing a failure. [ 353.058598][ T8791] name failslab, interval 1, probability 0, space 0, times 0 [ 353.058632][ T8791] CPU: 1 UID: 0 PID: 8791 Comm: syz.2.901 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 353.058651][ T8791] Tainted: [L]=SOFTLOCKUP [ 353.058656][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.058664][ T8791] Call Trace: [ 353.058669][ T8791] [ 353.058675][ T8791] dump_stack_lvl+0xe8/0x150 [ 353.058698][ T8791] should_fail_ex+0x46b/0x600 [ 353.058718][ T8791] should_failslab+0xa8/0x100 [ 353.058738][ T8791] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 353.058755][ T8791] ? __d_alloc+0x37/0x6f0 [ 353.058776][ T8791] __d_alloc+0x37/0x6f0 [ 353.058801][ T8791] d_alloc+0x4b/0x190 [ 353.058822][ T8791] ? lookup_one_qstr_excl+0xc4/0x360 [ 353.058842][ T8791] lookup_one_qstr_excl+0xd8/0x360 [ 353.058863][ T8791] start_dirop+0x5c/0x90 [ 353.058881][ T8791] simple_start_creating+0xcc/0x110 [ 353.058901][ T8791] ? __pfx_simple_start_creating+0x10/0x10 [ 353.058923][ T8791] ? check_special_flags+0x24b/0x260 [ 353.058938][ T8791] bm_register_write+0x2df/0x1770 [ 353.058954][ T8791] ? __pfx_bm_register_write+0x10/0x10 [ 353.058969][ T8791] vfs_write+0x2a3/0xba0 [ 353.058993][ T8791] ? __pfx_vfs_write+0x10/0x10 [ 353.059014][ T8791] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 353.059035][ T8791] ? lockdep_hardirqs_on+0x7a/0x110 [ 353.059047][ T8791] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 353.059067][ T8791] ? mutex_lock_nested+0x152/0x1d0 [ 353.059082][ T8791] ? fdget_pos+0x252/0x320 [ 353.059105][ T8791] ksys_write+0x156/0x270 [ 353.059126][ T8791] ? __pfx_ksys_write+0x10/0x10 [ 353.059149][ T8791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.059164][ T8791] do_syscall_64+0x174/0x580 [ 353.059176][ T8791] ? trace_irq_disable+0x3b/0x140 [ 353.059192][ T8791] ? clear_bhb_loop+0x40/0x90 [ 353.059207][ T8791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.059220][ T8791] RIP: 0033:0x7fecd5a7ce59 [ 353.059233][ T8791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.059244][ T8791] RSP: 002b:00007fecd3cd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.059259][ T8791] RAX: ffffffffffffffda RBX: 00007fecd5cf5fa0 RCX: 00007fecd5a7ce59 [ 353.059268][ T8791] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 0000000000000003 [ 353.059277][ T8791] RBP: 00007fecd3cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 353.059284][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.059292][ T8791] R13: 00007fecd5cf6038 R14: 00007fecd5cf5fa0 R15: 00007ffc5cd95be8 [ 353.059312][ T8791] [ 354.994751][ T8802] loop1: detected capacity change from 0 to 32768 [ 354.995609][ T8802] btrfs: Deprecated parameter 'usebackuproot' [ 354.995625][ T8802] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 355.061374][ T8802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.904 (8802) [ 355.091547][ T8802] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 355.091599][ T8802] BTRFS info (device loop1): using crc32c checksum algorithm [ 355.878721][ T8053] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 355.884696][ T8802] BTRFS error (device loop1): failed to load root extent [ 355.886020][ T8802] BTRFS warning (device loop1): try to load backup roots slot 1 [ 355.889162][ T5894] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 355.889318][ T8802] BTRFS warning (device loop1): couldn't read tree root [ 355.889342][ T8802] BTRFS warning (device loop1): try to load backup roots slot 2 [ 355.890291][ T178] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 355.890423][ T8802] BTRFS warning (device loop1): couldn't read tree root [ 355.890444][ T8802] BTRFS warning (device loop1): try to load backup roots slot 3 [ 356.021028][ T8802] BTRFS info (device loop1): rebuilding free space tree [ 356.332027][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 356.332068][ T37] audit: type=1326 audit(1780132789.122:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.4.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f386e9fce59 code=0x0 [ 356.398606][ T8802] BTRFS info (device loop1): checking UUID tree [ 356.405555][ T8802] BTRFS info (device loop1): enabling ssd optimizations [ 356.405583][ T8802] BTRFS info (device loop1): disabling tree log [ 356.405599][ T8802] BTRFS info (device loop1): turning on async discard [ 356.405614][ T8802] BTRFS info (device loop1): enabling free space tree [ 356.405629][ T8802] BTRFS info (device loop1): force clearing of disk cache [ 356.405645][ T8802] BTRFS info (device loop1): trying to use backup root at mount time [ 356.405662][ T8802] BTRFS info (device loop1): force zlib compression, level 3 [ 356.405682][ T8802] BTRFS info (device loop1): max_inline set to 4096 [ 357.143529][ T5744] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 357.301983][ T5744] usb 2-1: Using ep0 maxpacket: 16 [ 357.304393][ T5744] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 357.304428][ T5744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 357.311628][ T5744] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 357.311662][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.311681][ T5744] usb 2-1: Product: syz [ 357.311694][ T5744] usb 2-1: Manufacturer: syz [ 357.311708][ T5744] usb 2-1: SerialNumber: syz [ 357.337127][ T5744] usb 2-1: config 0 descriptor?? [ 357.364653][ T5744] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 357.364688][ T5744] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 357.365411][ T8837] sock: sock_timestamping_bind_phc: sock not bind to device [ 357.966465][ T5744] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 357.967215][ T5744] em28xx 2-1:0.0: Config register raw data: 0x9f [ 358.177911][ T37] audit: type=1326 audit(1780132790.972:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.904" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dbccce59 code=0x7ffc0000 [ 358.178073][ T37] audit: type=1326 audit(1780132790.972:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.904" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dbccce59 code=0x7ffc0000 [ 358.178916][ T37] audit: type=1326 audit(1780132790.972:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.904" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fd2dbccce59 code=0x7ffc0000 [ 358.179107][ T37] audit: type=1326 audit(1780132790.972:1904): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.904" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dbccce59 code=0x7ffc0000 [ 358.179293][ T37] audit: type=1326 audit(1780132790.972:1905): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.904" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dbccce59 code=0x7ffc0000 [ 358.180367][ T37] audit: type=1326 audit(1780132790.972:1906): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.904" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fd2dbccce59 code=0x7ffc0000 [ 358.180674][ T37] audit: type=1326 audit(1780132790.972:1907): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.904" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dbccce59 code=0x7ffc0000 [ 358.180858][ T37] audit: type=1326 audit(1780132790.972:1908): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.904" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dbccce59 code=0x7ffc0000 [ 358.182093][ T37] audit: type=1326 audit(1780132790.972:1909): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8801 comm="syz.1.904" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2dbccce59 code=0x7ffc0000 [ 358.612244][ T5749] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 358.637426][ T5744] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 358.637451][ T5744] em28xx 2-1:0.0: No AC97 audio processor [ 358.763327][ T5749] usb 5-1: device descriptor read/64, error -71 [ 358.765327][ T8836] veth5: entered promiscuous mode [ 358.765355][ T8836] veth5: entered allmulticast mode [ 358.856515][ T5744] usb 2-1: USB disconnect, device number 36 [ 358.872686][ T5744] em28xx 2-1:0.0: Disconnecting em28xx [ 358.963886][ T5744] em28xx 2-1:0.0: Freeing device [ 359.002086][ T5749] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 359.141989][ T5749] usb 5-1: device descriptor read/64, error -71 [ 359.252409][ T5749] usb usb5-port1: attempt power cycle [ 359.473455][ T5744] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 359.623726][ T5749] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 359.628961][ T5744] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 359.628996][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.629018][ T5744] usb 4-1: Product: syz [ 359.629033][ T5744] usb 4-1: Manufacturer: syz [ 359.629049][ T5744] usb 4-1: SerialNumber: syz [ 359.666748][ T5744] usb 4-1: config 0 descriptor?? [ 359.684803][ T5749] usb 5-1: device descriptor read/8, error -71 [ 359.742350][ T5614] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 359.941985][ T5749] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 360.072517][ T5749] usb 5-1: device descriptor read/8, error -71 [ 360.185384][ T5749] usb usb5-port1: unable to enumerate USB device [ 360.276201][ T8846] loop3: detected capacity change from 0 to 32768 [ 360.488483][ T8846] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 360.488483][ T8846] [ 360.572391][ T8856] FAULT_INJECTION: forcing a failure. [ 360.572391][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 360.572434][ T8856] CPU: 0 UID: 0 PID: 8856 Comm: syz.0.917 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 360.572466][ T8856] Tainted: [L]=SOFTLOCKUP [ 360.572474][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.572488][ T8856] Call Trace: [ 360.572496][ T8856] [ 360.572506][ T8856] dump_stack_lvl+0xe8/0x150 [ 360.572538][ T8856] should_fail_ex+0x46b/0x600 [ 360.572573][ T8856] should_failslab+0xa8/0x100 [ 360.572608][ T8856] kmem_cache_alloc_noprof+0x87/0x680 [ 360.572638][ T8856] ? skb_clone+0x212/0x3a0 [ 360.572667][ T8856] skb_clone+0x212/0x3a0 [ 360.572693][ T8856] __netlink_deliver_tap+0x424/0x8b0 [ 360.572730][ T8856] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.572758][ T8856] netlink_deliver_tap+0x19c/0x1b0 [ 360.572792][ T8856] netlink_unicast+0x754/0x920 [ 360.572837][ T8856] netlink_sendmsg+0x813/0xb40 [ 360.572871][ T8856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.572899][ T8856] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 360.572938][ T8856] ? aa_sock_msg_perm+0x122/0x200 [ 360.572968][ T8856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.572991][ T8856] sock_sendmsg_nosec+0x13a/0x180 [ 360.573022][ T8856] ____sys_sendmsg+0x55c/0x870 [ 360.573052][ T8856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.573087][ T8856] ? import_iovec+0x73/0xa0 [ 360.573127][ T8856] ___sys_sendmsg+0x2a5/0x360 [ 360.573149][ T8856] ? __lock_acquire+0x6b5/0x2d10 [ 360.573183][ T8856] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.573213][ T8856] ? kstrtouint+0x6e/0xe0 [ 360.573271][ T8856] ? __fget_files+0x2a/0x420 [ 360.573300][ T8856] ? __fget_files+0x3a6/0x420 [ 360.573340][ T8856] __sys_sendmmsg+0x282/0x4e0 [ 360.573370][ T8856] ? __pfx___sys_sendmmsg+0x10/0x10 [ 360.573405][ T8856] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 360.573458][ T8856] ? ksys_write+0x248/0x270 [ 360.573496][ T8856] ? __pfx_ksys_write+0x10/0x10 [ 360.573535][ T8856] __x64_sys_sendmmsg+0xa0/0xc0 [ 360.573559][ T8856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.573583][ T8856] do_syscall_64+0x174/0x580 [ 360.573608][ T8856] ? clear_bhb_loop+0x40/0x90 [ 360.573636][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.573659][ T8856] RIP: 0033:0x7f837411ce59 [ 360.573679][ T8856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.573698][ T8856] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.573724][ T8856] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 360.573741][ T8856] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 360.573758][ T8856] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 360.573780][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.573793][ T8856] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 360.573830][ T8856] [ 360.639226][ T8856] netlink: 'syz.0.917': attribute type 12 has an invalid length. [ 360.639247][ T8856] netlink: 'syz.0.917': attribute type 29 has an invalid length. [ 360.639260][ T8856] netlink: 148 bytes leftover after parsing attributes in process `syz.0.917'. [ 360.639279][ T8856] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 360.639291][ T8856] netlink: 47 bytes leftover after parsing attributes in process `syz.0.917'. [ 360.714977][ T5744] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 361.117038][ T5744] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 361.432173][ T8858] loop4: detected capacity change from 0 to 32768 [ 361.493663][ T5749] usb 4-1: USB disconnect, device number 15 [ 362.243667][ T1480] read_mapping_page failed! [ 362.243684][ T1480] ERROR: (device loop3): txCommit: [ 362.243684][ T1480] [ 362.244052][ T1480] jfs_write_inode: jfs_commit_inode failed! [ 362.328264][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.921'. [ 362.553904][ T8855] loop2: detected capacity change from 0 to 32768 [ 362.624428][ T8874] loop4: detected capacity change from 0 to 256 [ 363.359300][ T8855] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop2": -EINTR [ 363.776462][ T8891] sock: sock_timestamping_bind_phc: sock not bind to device [ 364.107878][ T8894] loop2: detected capacity change from 0 to 1024 [ 364.121376][ T8894] EXT4-fs: Ignoring removed oldalloc option [ 364.134832][ T8894] EXT4-fs: test_dummy_encryption requires encrypt feature [ 364.153074][ T8889] veth7: entered promiscuous mode [ 364.153103][ T8889] veth7: entered allmulticast mode [ 364.313750][ T43] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 364.379240][ T8900] sock: sock_timestamping_bind_phc: sock not bind to device [ 364.407396][ T8905] loop3: detected capacity change from 0 to 128 [ 364.478142][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.478177][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 35104, setting to 64 [ 364.478207][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.478254][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 364.478279][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.771485][ T43] usb 5-1: usb_control_msg returned -71 [ 364.771541][ T43] usbtmc 5-1:16.0: can't read capabilities [ 364.830231][ T43] usb 5-1: USB disconnect, device number 27 [ 364.843331][ T5725] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 364.909712][ T8910] loop2: detected capacity change from 0 to 2048 [ 364.968851][ T8910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.004475][ T5725] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.004595][ T5725] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30752, setting to 64 [ 365.004635][ T5725] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.004714][ T5725] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 365.004740][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.243580][ T8910] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 365.243827][ T8910] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 365.243856][ T8910] EXT4-fs (loop2): This should not happen!! Data will be lost [ 365.243856][ T8910] [ 365.243874][ T8910] EXT4-fs (loop2): Total free blocks count 0 [ 365.243889][ T8910] EXT4-fs (loop2): Free/Dirty block details [ 365.243904][ T8910] EXT4-fs (loop2): free_blocks=4096 [ 365.243920][ T8910] EXT4-fs (loop2): dirty_blocks=16 [ 365.243934][ T8910] EXT4-fs (loop2): Block reservation details [ 365.243949][ T8910] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 365.326226][ T5725] usb 2-1: usb_control_msg returned -71 [ 365.326285][ T5725] usbtmc 2-1:16.0: can't read capabilities [ 365.365097][ T5725] usb 2-1: USB disconnect, device number 37 [ 365.650810][ T1480] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 365.655550][ T5617] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 365.757775][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 365.757795][ T37] audit: type=1400 audit(1780132798.522:1918): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=8927 comm="syz.4.944" [ 365.823306][ T8929] loop3: detected capacity change from 0 to 4096 [ 365.870910][ T8929] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 366.124865][ T5711] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 366.280317][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 366.283632][ T5711] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 366.283660][ T5711] usb 5-1: config 0 has no interface number 0 [ 366.283705][ T5711] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 366.283731][ T5711] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 366.326518][ T5711] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 366.326554][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.326577][ T5711] usb 5-1: Product: syz [ 366.326592][ T5711] usb 5-1: Manufacturer: syz [ 366.326608][ T5711] usb 5-1: SerialNumber: syz [ 366.350247][ T5711] usb 5-1: config 0 descriptor?? [ 366.354950][ T8932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 366.390594][ T8932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 366.461470][ T8945] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.952'. [ 366.597288][ T8932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 366.597440][ T8932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 366.675105][ T8953] sock: sock_timestamping_bind_phc: sock not bind to device [ 366.682986][ T8952] veth7: entered promiscuous mode [ 366.683015][ T8952] veth7: entered allmulticast mode [ 366.810128][ T5711] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 367.446047][ T8968] sock: sock_timestamping_bind_phc: sock not bind to device [ 367.574798][ T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 367.669856][ T8973] loop2: detected capacity change from 0 to 512 [ 367.682592][ T8973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 367.736210][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.736278][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 35104, setting to 64 [ 367.736308][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.736350][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 367.736365][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.784456][ T8973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 367.784670][ T8973] System zones: 1-12 [ 367.875132][ T8973] EXT4-fs (loop2): 1 truncate cleaned up [ 367.939121][ T8973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.169714][ T9] usb 2-1: usb_control_msg returned -71 [ 368.171144][ T9] usbtmc 2-1:16.0: can't read capabilities [ 368.302180][ T1010] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 368.456390][ T9] usb 2-1: USB disconnect, device number 38 [ 368.485752][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.575152][ T1010] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.575251][ T1010] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30752, setting to 64 [ 368.575289][ T1010] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.575338][ T1010] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.575441][ T1010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.614199][ T8981] FAULT_INJECTION: forcing a failure. [ 368.614199][ T8981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.614240][ T8981] CPU: 1 UID: 0 PID: 8981 Comm: syz.0.965 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 368.614270][ T8981] Tainted: [L]=SOFTLOCKUP [ 368.614279][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.614290][ T8981] Call Trace: [ 368.614297][ T8981] [ 368.614305][ T8981] dump_stack_lvl+0xe8/0x150 [ 368.614339][ T8981] should_fail_ex+0x46b/0x600 [ 368.614375][ T8981] _copy_from_user+0x2d/0xb0 [ 368.614408][ T8981] memdup_user+0x5e/0xd0 [ 368.614433][ T8981] ucma_set_option+0x2cc/0xcc0 [ 368.614474][ T8981] ? __pfx_ucma_set_option+0x10/0x10 [ 368.614498][ T8981] ? __lock_acquire+0x6b5/0x2d10 [ 368.614530][ T8981] ? aa_file_perm+0x51a/0x15f0 [ 368.614557][ T8981] ? aa_file_perm+0x192/0x15f0 [ 368.614593][ T8981] ? __lock_acquire+0x6b5/0x2d10 [ 368.614624][ T8981] ? __might_fault+0xaf/0x130 [ 368.614651][ T8981] ? __might_fault+0xaf/0x130 [ 368.614697][ T8981] ucma_write+0x257/0x2f0 [ 368.614722][ T8981] ? __pfx_ucma_write+0x10/0x10 [ 368.614752][ T8981] ? rw_verify_area+0x25b/0x4e0 [ 368.614788][ T8981] vfs_writev+0x4c6/0x9a0 [ 368.614812][ T8981] ? __pfx_ucma_write+0x10/0x10 [ 368.614840][ T8981] ? __pfx_vfs_writev+0x10/0x10 [ 368.614877][ T8981] ? __fget_files+0x2a/0x420 [ 368.614908][ T8981] ? __fget_files+0x3a6/0x420 [ 368.614935][ T8981] ? __fget_files+0x2a/0x420 [ 368.614969][ T8981] do_writev+0x15a/0x2e0 [ 368.614995][ T8981] ? __pfx_do_writev+0x10/0x10 [ 368.615025][ T8981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.615046][ T8981] do_syscall_64+0x174/0x580 [ 368.615067][ T8981] ? trace_irq_disable+0x3b/0x140 [ 368.615094][ T8981] ? clear_bhb_loop+0x40/0x90 [ 368.615120][ T8981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.615139][ T8981] RIP: 0033:0x7f837411ce59 [ 368.615159][ T8981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.615176][ T8981] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 368.615198][ T8981] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 368.615213][ T8981] RDX: 0000000000000006 RSI: 0000200000000680 RDI: 0000000000000003 [ 368.615226][ T8981] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 368.615239][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.615252][ T8981] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 368.615284][ T8981] [ 368.652276][ T8932] loop4: detected capacity change from 0 to 2048 [ 368.933487][ T5711] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 368.933523][ T5711] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 368.933831][ T5711] asix 5-1:0.34: probe with driver asix failed with error -71 [ 368.964747][ T8985] loop2: detected capacity change from 0 to 8 [ 368.996730][ T5711] usb 5-1: USB disconnect, device number 28 [ 369.005198][ T8985] SQUASHFS error: lzo decompression failed, data probably corrupt [ 369.005235][ T8985] SQUASHFS error: Failed to read block 0x91: -5 [ 369.005254][ T8985] SQUASHFS error: Unable to read metadata cache entry [8f] [ 369.005271][ T8985] SQUASHFS error: Unable to read inode 0x11f [ 369.194704][ T1010] usb 4-1: usb_control_msg returned -71 [ 369.194761][ T1010] usbtmc 4-1:16.0: can't read capabilities [ 369.223254][ T1010] usb 4-1: USB disconnect, device number 16 [ 369.796593][ T9006] FAULT_INJECTION: forcing a failure. [ 369.796593][ T9006] name failslab, interval 1, probability 0, space 0, times 0 [ 369.796633][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.1.976 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 369.796665][ T9006] Tainted: [L]=SOFTLOCKUP [ 369.796673][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.796686][ T9006] Call Trace: [ 369.796694][ T9006] [ 369.796704][ T9006] dump_stack_lvl+0xe8/0x150 [ 369.796738][ T9006] should_fail_ex+0x46b/0x600 [ 369.796773][ T9006] should_failslab+0xa8/0x100 [ 369.796808][ T9006] __kmalloc_noprof+0xdf/0x7b0 [ 369.796838][ T9006] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 369.796878][ T9006] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 369.796920][ T9006] genl_family_rcv_msg_doit+0xd9/0x330 [ 369.796952][ T9006] ? __asan_memcpy+0x40/0x70 [ 369.796982][ T9006] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.797018][ T9006] ? __pfx_genl_get_cmd+0x10/0x10 [ 369.797063][ T9006] genl_rcv_msg+0x61c/0x7a0 [ 369.797100][ T9006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.797127][ T9006] ? ref_tracker_free+0x673/0x820 [ 369.797158][ T9006] ? __pfx_net_shaper_nl_pre_doit+0x10/0x10 [ 369.797188][ T9006] ? __pfx_net_shaper_nl_get_doit+0x10/0x10 [ 369.797218][ T9006] ? __pfx_net_shaper_nl_post_doit+0x10/0x10 [ 369.797249][ T9006] ? ____sys_sendmsg+0x55c/0x870 [ 369.797270][ T9006] ? ___sys_sendmsg+0x2a5/0x360 [ 369.797291][ T9006] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 369.797312][ T9006] ? do_syscall_64+0x174/0x580 [ 369.797333][ T9006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.797376][ T9006] netlink_rcv_skb+0x232/0x4b0 [ 369.797401][ T9006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.797433][ T9006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.797473][ T9006] ? netlink_deliver_tap+0x2e/0x1b0 [ 369.797496][ T9006] ? netlink_deliver_tap+0x2e/0x1b0 [ 369.797526][ T9006] genl_rcv+0x28/0x40 [ 369.797554][ T9006] netlink_unicast+0x780/0x920 [ 369.797600][ T9006] netlink_sendmsg+0x813/0xb40 [ 369.797636][ T9006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.797663][ T9006] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 369.797703][ T9006] ? aa_sock_msg_perm+0x122/0x200 [ 369.797734][ T9006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.797757][ T9006] sock_sendmsg_nosec+0x13a/0x180 [ 369.797788][ T9006] ____sys_sendmsg+0x55c/0x870 [ 369.797819][ T9006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.797853][ T9006] ? import_iovec+0x73/0xa0 [ 369.797893][ T9006] ___sys_sendmsg+0x2a5/0x360 [ 369.797916][ T9006] ? __lock_acquire+0x6b5/0x2d10 [ 369.797951][ T9006] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.798016][ T9006] ? __fget_files+0x2a/0x420 [ 369.798046][ T9006] ? __fget_files+0x3a6/0x420 [ 369.798086][ T9006] __x64_sys_sendmsg+0x1c3/0x2a0 [ 369.798114][ T9006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.798149][ T9006] ? __pfx_ksys_write+0x10/0x10 [ 369.798194][ T9006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.798218][ T9006] do_syscall_64+0x174/0x580 [ 369.798239][ T9006] ? trace_irq_disable+0x3b/0x140 [ 369.798267][ T9006] ? clear_bhb_loop+0x40/0x90 [ 369.798295][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.798317][ T9006] RIP: 0033:0x7fd2dbccce59 [ 369.798339][ T9006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.798367][ T9006] RSP: 002b:00007fd2d9f26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.798392][ T9006] RAX: ffffffffffffffda RBX: 00007fd2dbf45fa0 RCX: 00007fd2dbccce59 [ 369.798409][ T9006] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 369.798423][ T9006] RBP: 00007fd2d9f26090 R08: 0000000000000000 R09: 0000000000000000 [ 369.798436][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.798450][ T9006] R13: 00007fd2dbf46038 R14: 00007fd2dbf45fa0 R15: 00007ffd533ddde8 [ 369.798486][ T9006] [ 370.422468][ T9017] sock: sock_timestamping_bind_phc: sock not bind to device [ 370.463802][ T9016] veth1: entered promiscuous mode [ 370.463832][ T9016] veth1: entered allmulticast mode [ 371.545045][ T9026] loop4: detected capacity change from 0 to 131072 [ 371.561831][ T9026] F2FS-fs (loop4): invalid crc value [ 371.621582][ T1010] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 371.677141][ T9026] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 371.710560][ T9026] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 371.785293][ T1010] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.785329][ T1010] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 35104, setting to 64 [ 371.785361][ T1010] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.785403][ T1010] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 371.785438][ T1010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.077702][ T1010] usb 4-1: usb_control_msg returned -71 [ 372.077759][ T1010] usbtmc 4-1:16.0: can't read capabilities [ 372.122260][ T1010] usb 4-1: USB disconnect, device number 17 [ 372.413464][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 372.413492][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 372.571491][ T5894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 373.640087][ T9069] capability: warning: `syz.2.1003' uses 32-bit capabilities (legacy support in use) [ 373.642665][ T9038] loop1: detected capacity change from 0 to 32768 [ 373.670768][ T9067] loop3: detected capacity change from 0 to 2048 [ 373.708811][ T9069] loop2: detected capacity change from 0 to 128 [ 373.754145][ T9067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.930427][ T9067] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 373.947198][ T9067] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 373.947235][ T9067] EXT4-fs (loop3): This should not happen!! Data will be lost [ 373.947235][ T9067] [ 373.947249][ T9067] EXT4-fs (loop3): Total free blocks count 0 [ 373.947262][ T9067] EXT4-fs (loop3): Free/Dirty block details [ 373.947276][ T9067] EXT4-fs (loop3): free_blocks=4096 [ 373.947291][ T9067] EXT4-fs (loop3): dirty_blocks=16 [ 373.947303][ T9067] EXT4-fs (loop3): Block reservation details [ 373.947315][ T9067] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 374.142420][ T178] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 374.145982][ T5615] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 374.320230][ T9038] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 374.449065][ T9092] sock: sock_timestamping_bind_phc: sock not bind to device [ 374.795569][ T9088] veth3: entered promiscuous mode [ 374.816824][ T9038] XFS (loop1): Ending clean mount [ 374.861003][ T9088] veth3: entered allmulticast mode [ 374.880268][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.888569][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.939507][ T9038] XFS (loop1): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 374.939552][ T9038] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 [ 374.939603][ T9038] XFS (loop1): Unmount and run xfs_repair [ 374.939616][ T9038] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 374.939636][ T9038] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 374.939654][ T9038] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 374.939671][ T9038] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 374.939687][ T9038] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 374.939704][ T9038] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 374.939718][ T9038] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 374.939732][ T9038] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 374.939747][ T9038] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 374.939923][ T9038] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 4 error 74 [ 374.977328][ T9038] loop1: lost filesystem error report for type 5 error -117 [ 374.977502][ T9038] XFS (loop1): Failed to initialize disk quotas, err -117. [ 375.019163][ T37] audit: type=1326 audit(1780132807.813:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.2.1011" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecd5a7ce59 code=0x0 [ 375.101207][ T1010] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 375.101410][ T5711] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 375.273885][ T1010] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.273923][ T1010] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 35104, setting to 64 [ 375.273954][ T1010] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.274002][ T1010] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.274028][ T1010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.335288][ T5614] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 375.370506][ T5614] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 375.617231][ T1010] usb 4-1: usb_control_msg returned -71 [ 375.617288][ T1010] usbtmc 4-1:16.0: can't read capabilities [ 375.715802][ T1010] usb 4-1: USB disconnect, device number 18 [ 375.836960][ T9112] FAULT_INJECTION: forcing a failure. [ 375.836960][ T9112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.836997][ T9112] CPU: 1 UID: 0 PID: 9112 Comm: syz.0.1015 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 375.837023][ T9112] Tainted: [L]=SOFTLOCKUP [ 375.837029][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.837040][ T9112] Call Trace: [ 375.837048][ T9112] [ 375.837056][ T9112] dump_stack_lvl+0xe8/0x150 [ 375.837085][ T9112] should_fail_ex+0x46b/0x600 [ 375.837113][ T9112] _copy_from_user+0x2d/0xb0 [ 375.837141][ T9112] ___sys_recvmsg+0x175/0x590 [ 375.837159][ T9112] ? get_pid_task+0x20/0x1f0 [ 375.837178][ T9112] ? get_pid_task+0x20/0x1f0 [ 375.837202][ T9112] ? __pfx____sys_recvmsg+0x10/0x10 [ 375.837225][ T9112] ? __fget_files+0x2a/0x420 [ 375.837263][ T9112] ? __fget_files+0x3a6/0x420 [ 375.837295][ T9112] __x64_sys_recvmsg+0x1c0/0x2a0 [ 375.837329][ T9112] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 375.837357][ T9112] ? __pfx_ksys_write+0x10/0x10 [ 375.837392][ T9112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.837412][ T9112] do_syscall_64+0x174/0x580 [ 375.837430][ T9112] ? trace_irq_disable+0x3b/0x140 [ 375.837453][ T9112] ? clear_bhb_loop+0x40/0x90 [ 375.837475][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.837494][ T9112] RIP: 0033:0x7f837411ce59 [ 375.837512][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.837527][ T9112] RSP: 002b:00007f8372355028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 375.837547][ T9112] RAX: ffffffffffffffda RBX: 00007f8374396090 RCX: 00007f837411ce59 [ 375.837560][ T9112] RDX: 0000000000000100 RSI: 0000200000000340 RDI: 0000000000000004 [ 375.837572][ T9112] RBP: 00007f8372355090 R08: 0000000000000000 R09: 0000000000000000 [ 375.837583][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.837593][ T9112] R13: 00007f8374396128 R14: 00007f8374396090 R15: 00007ffea1d72fe8 [ 375.837622][ T9112] [ 375.971394][ T9110] loop2: detected capacity change from 0 to 2048 [ 376.109571][ T9110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.209439][ T9117] FAULT_INJECTION: forcing a failure. [ 376.209439][ T9117] name failslab, interval 1, probability 0, space 0, times 0 [ 376.209478][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: syz.0.1017 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 376.209508][ T9117] Tainted: [L]=SOFTLOCKUP [ 376.209515][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.209528][ T9117] Call Trace: [ 376.209536][ T9117] [ 376.209544][ T9117] dump_stack_lvl+0xe8/0x150 [ 376.209577][ T9117] should_fail_ex+0x46b/0x600 [ 376.209610][ T9117] should_failslab+0xa8/0x100 [ 376.209640][ T9117] __kmalloc_node_noprof+0xe7/0x7f0 [ 376.209669][ T9117] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 376.209701][ T9117] __vmalloc_node_range_noprof+0x5ef/0x1750 [ 376.209726][ T9117] ? unwind_next_frame+0xa6/0x2550 [ 376.209786][ T9117] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 376.209815][ T9117] ? aa_file_perm+0x192/0x15f0 [ 376.209852][ T9117] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 376.209878][ T9117] __vmalloc_noprof+0xd2/0x120 [ 376.209903][ T9117] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 376.209932][ T9117] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 376.209962][ T9117] bpf_prog_alloc+0x3c/0x1a0 [ 376.209991][ T9117] bpf_prog_load+0x779/0x1a10 [ 376.210031][ T9117] ? __pfx_bpf_prog_load+0x10/0x10 [ 376.210083][ T9117] __sys_bpf+0xd0b/0xd90 [ 376.210118][ T9117] ? __pfx___sys_bpf+0x10/0x10 [ 376.210150][ T9117] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.210171][ T9117] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.210221][ T9117] ? ksys_write+0x248/0x270 [ 376.210254][ T9117] ? __pfx_ksys_write+0x10/0x10 [ 376.210316][ T9117] __x64_sys_bpf+0xba/0xd0 [ 376.210339][ T9117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.210362][ T9117] do_syscall_64+0x174/0x580 [ 376.210380][ T9117] ? trace_irq_disable+0x3b/0x140 [ 376.210406][ T9117] ? clear_bhb_loop+0x40/0x90 [ 376.210431][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.210451][ T9117] RIP: 0033:0x7f837411ce59 [ 376.210471][ T9117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.210489][ T9117] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.210513][ T9117] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 376.210528][ T9117] RDX: 0000000000000021 RSI: 0000200000000140 RDI: 0000000000000005 [ 376.210542][ T9117] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 376.210554][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.210567][ T9117] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 376.210600][ T9117] [ 376.210612][ T9117] syz.0.1017: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 376.248281][ T9110] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 376.248479][ T9110] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 376.248503][ T9110] EXT4-fs (loop2): This should not happen!! Data will be lost [ 376.248503][ T9110] [ 376.248518][ T9110] EXT4-fs (loop2): Total free blocks count 0 [ 376.248532][ T9110] EXT4-fs (loop2): Free/Dirty block details [ 376.248545][ T9110] EXT4-fs (loop2): free_blocks=4096 [ 376.248568][ T9110] EXT4-fs (loop2): dirty_blocks=16 [ 376.248581][ T9110] EXT4-fs (loop2): Block reservation details [ 376.248592][ T9110] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 376.279856][ T9117] ,cpuset=/,mems_allowed=0-1 [ 376.279902][ T9117] CPU: 0 UID: 0 PID: 9117 Comm: syz.0.1017 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 376.279930][ T9117] Tainted: [L]=SOFTLOCKUP [ 376.279936][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.279948][ T9117] Call Trace: [ 376.279955][ T9117] [ 376.279964][ T9117] dump_stack_lvl+0xe8/0x150 [ 376.279996][ T9117] warn_alloc+0x24c/0x270 [ 376.280024][ T9117] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.280047][ T9117] ? __pfx_warn_alloc+0x10/0x10 [ 376.280083][ T9117] ? __kmalloc_node_noprof+0x395/0x7f0 [ 376.280110][ T9117] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 376.280140][ T9117] __vmalloc_node_range_noprof+0xa06/0x1750 [ 376.280164][ T9117] ? unwind_next_frame+0xa6/0x2550 [ 376.280222][ T9117] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 376.280251][ T9117] ? aa_file_perm+0x192/0x15f0 [ 376.280288][ T9117] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 376.280312][ T9117] __vmalloc_noprof+0xd2/0x120 [ 376.280337][ T9117] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 376.280364][ T9117] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 376.280394][ T9117] bpf_prog_alloc+0x3c/0x1a0 [ 376.280422][ T9117] bpf_prog_load+0x779/0x1a10 [ 376.280460][ T9117] ? __pfx_bpf_prog_load+0x10/0x10 [ 376.280510][ T9117] __sys_bpf+0xd0b/0xd90 [ 376.280542][ T9117] ? __pfx___sys_bpf+0x10/0x10 [ 376.280581][ T9117] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.280600][ T9117] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.280652][ T9117] ? ksys_write+0x248/0x270 [ 376.280687][ T9117] ? __pfx_ksys_write+0x10/0x10 [ 376.280722][ T9117] __x64_sys_bpf+0xba/0xd0 [ 376.280748][ T9117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.280773][ T9117] do_syscall_64+0x174/0x580 [ 376.280794][ T9117] ? trace_irq_disable+0x3b/0x140 [ 376.280819][ T9117] ? clear_bhb_loop+0x40/0x90 [ 376.280845][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.280867][ T9117] RIP: 0033:0x7f837411ce59 [ 376.280887][ T9117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.280904][ T9117] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.280924][ T9117] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 376.280938][ T9117] RDX: 0000000000000021 RSI: 0000200000000140 RDI: 0000000000000005 [ 376.280951][ T9117] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 376.280963][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.280974][ T9117] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 376.281005][ T9117] [ 376.281974][ T9117] Mem-Info: [ 376.281984][ T9117] active_anon:12880 inactive_anon:0 isolated_anon:0 [ 376.281984][ T9117] active_file:2 inactive_file:57006 isolated_file:0 [ 376.281984][ T9117] unevictable:768 dirty:351 writeback:0 [ 376.281984][ T9117] slab_reclaimable:12110 slab_unreclaimable:100050 [ 376.281984][ T9117] mapped:31271 shmem:7620 pagetables:1263 [ 376.281984][ T9117] sec_pagetables:0 bounce:0 [ 376.281984][ T9117] kernel_misc_reclaimable:0 [ 376.281984][ T9117] free:1303444 free_pcp:8088 free_cma:0 [ 376.282038][ T9117] Node 0 active_anon:51520kB inactive_anon:0kB active_file:8kB inactive_file:227828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125084kB dirty:1404kB writeback:0kB shmem:28944kB kernel_stack:13676kB pagetables:4908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 376.282088][ T9117] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 376.282135][ T9117] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.304018][ T9117] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 376.304063][ T9117] Node 0 DMA32 free:1261808kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51120kB inactive_anon:0kB active_file:8kB inactive_file:227892kB unevictable:1536kB writepending:1428kB zspages:0kB present:3129332kB managed:2554320kB mlocked:0kB bounce:0kB free_pcp:30672kB local_pcp:14752kB free_cma:0kB [ 376.304133][ T9117] lowmem_reserve[]: 0 0 1 1 1 [ 376.304164][ T9117] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1152kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 376.304231][ T9117] lowmem_reserve[]: 0 0 0 0 0 [ 376.304262][ T9117] Node 1 Normal free:3938936kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.304320][ T9117] lowmem_reserve[]: 0 0 0 0 0 [ 376.304357][ T9117] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 376.304469][ T9117] Node 0 DMA32: 2451*4kB (UM) 1542*8kB (UME) 752*16kB (UME) 622*32kB (UME) 160*64kB (UME) 120*128kB (UME) 142*256kB (UME) 72*512kB (UM) 33*1024kB (UME) 7*2048kB (UME) 259*4096kB (UM) = 1261884kB [ 376.304650][ T9117] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 376.304755][ T9117] Node 1 Normal: 2*4kB (M) 6*8kB (UM) 8*16kB (UM) 12*32kB (UM) 9*64kB (UM) 4*128kB (UM) 6*256kB (UM) 5*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (M) = 3938936kB [ 376.304897][ T9117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.304913][ T9117] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.304929][ T9117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.304944][ T9117] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.304959][ T9117] 64509 total pagecache pages [ 376.304966][ T9117] 0 pages in swap cache [ 376.304973][ T9117] Free swap = 124996kB [ 376.304981][ T9117] Total swap = 124996kB [ 376.304988][ T9117] 2097051 pages RAM [ 376.304995][ T9117] 0 pages HighMem/MovableOnly [ 376.305002][ T9117] 426569 pages reserved [ 376.305009][ T9117] 0 pages cma reserved [ 376.465385][ T8053] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 376.483815][ T5617] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 377.240908][ T1010] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 377.401389][ T1010] usb 4-1: Using ep0 maxpacket: 16 [ 377.404231][ T1010] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.404259][ T1010] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.407334][ T1010] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.407366][ T1010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.407399][ T1010] usb 4-1: Product: syz [ 377.407414][ T1010] usb 4-1: Manufacturer: syz [ 377.407431][ T1010] usb 4-1: SerialNumber: syz [ 377.616545][ T1010] usb 4-1: 0:2 : does not exist [ 377.671250][ T9125] loop3: detected capacity change from 0 to 128 [ 377.765258][ T9133] sock: sock_timestamping_bind_phc: sock not bind to device [ 378.136388][ T9144] loop0: detected capacity change from 0 to 128 [ 378.325107][ T1010] usb 4-1: USB disconnect, device number 19 [ 378.858220][ T9152] loop3: detected capacity change from 0 to 2048 [ 378.947772][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.967750][ T9152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.014558][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.256908][ T9163] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 379.264881][ T9165] FAULT_INJECTION: forcing a failure. [ 379.264881][ T9165] name failslab, interval 1, probability 0, space 0, times 0 [ 379.264916][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.0.1032 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 379.264943][ T9165] Tainted: [L]=SOFTLOCKUP [ 379.264949][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.264959][ T9165] Call Trace: [ 379.264966][ T9165] [ 379.264974][ T9165] dump_stack_lvl+0xe8/0x150 [ 379.265004][ T9165] should_fail_ex+0x46b/0x600 [ 379.265034][ T9165] should_failslab+0xa8/0x100 [ 379.265063][ T9165] __kmalloc_node_noprof+0xe7/0x7f0 [ 379.265089][ T9165] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 379.265116][ T9165] __vmalloc_node_range_noprof+0x5ef/0x1750 [ 379.265137][ T9165] ? unwind_next_frame+0xa6/0x2550 [ 379.265191][ T9165] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 379.265217][ T9165] ? aa_file_perm+0x192/0x15f0 [ 379.265249][ T9165] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 379.265272][ T9165] __vmalloc_noprof+0xd2/0x120 [ 379.265294][ T9165] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 379.265331][ T9165] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 379.265358][ T9165] bpf_prog_alloc+0x3c/0x1a0 [ 379.265383][ T9165] bpf_prog_load+0x779/0x1a10 [ 379.265417][ T9165] ? __pfx_bpf_prog_load+0x10/0x10 [ 379.265464][ T9165] __sys_bpf+0xd0b/0xd90 [ 379.265493][ T9165] ? __pfx___sys_bpf+0x10/0x10 [ 379.265523][ T9165] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.265541][ T9165] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.265587][ T9165] ? ksys_write+0x248/0x270 [ 379.265617][ T9165] ? __pfx_ksys_write+0x10/0x10 [ 379.265649][ T9165] __x64_sys_bpf+0xba/0xd0 [ 379.265668][ T9165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.265687][ T9165] do_syscall_64+0x174/0x580 [ 379.265704][ T9165] ? trace_irq_disable+0x3b/0x140 [ 379.265725][ T9165] ? clear_bhb_loop+0x40/0x90 [ 379.265747][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.265764][ T9165] RIP: 0033:0x7f837411ce59 [ 379.265781][ T9165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.265795][ T9165] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.265814][ T9165] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 379.265827][ T9165] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 379.265839][ T9165] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 379.265852][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.265869][ T9165] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 379.265899][ T9165] [ 379.274391][ T9163] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 379.274426][ T9163] EXT4-fs (loop3): This should not happen!! Data will be lost [ 379.274426][ T9163] [ 379.274441][ T9163] EXT4-fs (loop3): Total free blocks count 0 [ 379.274454][ T9163] EXT4-fs (loop3): Free/Dirty block details [ 379.274467][ T9163] EXT4-fs (loop3): free_blocks=4096 [ 379.274481][ T9163] EXT4-fs (loop3): dirty_blocks=16 [ 379.274493][ T9163] EXT4-fs (loop3): Block reservation details [ 379.274506][ T9163] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 379.506034][ T5894] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 379.519575][ T5615] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 379.744322][ T9169] FAULT_INJECTION: forcing a failure. [ 379.744322][ T9169] name failslab, interval 1, probability 0, space 0, times 0 [ 379.744364][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz.0.1034 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 379.744402][ T9169] Tainted: [L]=SOFTLOCKUP [ 379.744409][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.744422][ T9169] Call Trace: [ 379.744431][ T9169] [ 379.744440][ T9169] dump_stack_lvl+0xe8/0x150 [ 379.744475][ T9169] should_fail_ex+0x46b/0x600 [ 379.744518][ T9169] should_failslab+0xa8/0x100 [ 379.744553][ T9169] kmem_cache_alloc_noprof+0x87/0x680 [ 379.744583][ T9169] ? skb_clone+0x212/0x3a0 [ 379.744612][ T9169] skb_clone+0x212/0x3a0 [ 379.744641][ T9169] __netlink_deliver_tap+0x424/0x8b0 [ 379.744680][ T9169] ? netlink_deliver_tap+0x2e/0x1b0 [ 379.744706][ T9169] netlink_deliver_tap+0x19c/0x1b0 [ 379.744732][ T9169] netlink_unicast+0x754/0x920 [ 379.744779][ T9169] netlink_sendmsg+0x813/0xb40 [ 379.744815][ T9169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.744843][ T9169] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 379.744883][ T9169] ? aa_sock_msg_perm+0x122/0x200 [ 379.744915][ T9169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.744938][ T9169] sock_sendmsg_nosec+0x13a/0x180 [ 379.744972][ T9169] ____sys_sendmsg+0x55c/0x870 [ 379.745003][ T9169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.745038][ T9169] ? import_iovec+0x73/0xa0 [ 379.745077][ T9169] ___sys_sendmsg+0x2a5/0x360 [ 379.745100][ T9169] ? __lock_acquire+0x6b5/0x2d10 [ 379.745134][ T9169] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.745199][ T9169] ? __fget_files+0x2a/0x420 [ 379.745227][ T9169] ? __fget_files+0x3a6/0x420 [ 379.745268][ T9169] __x64_sys_sendmsg+0x1c3/0x2a0 [ 379.745296][ T9169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.745332][ T9169] ? __pfx_ksys_write+0x10/0x10 [ 379.745377][ T9169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.745402][ T9169] do_syscall_64+0x174/0x580 [ 379.745424][ T9169] ? trace_irq_disable+0x3b/0x140 [ 379.745453][ T9169] ? clear_bhb_loop+0x40/0x90 [ 379.745481][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.745511][ T9169] RIP: 0033:0x7f837411ce59 [ 379.745533][ T9169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.745554][ T9169] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.745579][ T9169] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 379.745596][ T9169] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 379.745611][ T9169] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 379.745625][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.745639][ T9169] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 379.745676][ T9169] [ 379.780860][ T9169] netlink: 'syz.0.1034': attribute type 10 has an invalid length. [ 379.781555][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.890012][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.058977][ T9173] loop2: detected capacity change from 0 to 512 [ 380.063123][ T9173] EXT4-fs: inline encryption not supported [ 380.164201][ T9173] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1035: bad orphan inode 15 [ 380.164240][ T9173] loop2: lost filesystem error report for type 5 error -117 [ 380.170693][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 380.170719][ C0] EXT4-fs (loop2): initial error at time 1780132812: ext4_orphan_get:1423 [ 380.170742][ C0] EXT4-fs (loop2): last error at time 1780132812: ext4_orphan_get:1423 [ 380.173671][ T9173] ext4_test_bit(bit=14, block=5) = 0 [ 380.185759][ T9173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.211759][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.211962][ T9169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.216348][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.216583][ T9169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.489056][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.506348][ T9169] team0: Port device bridge0 added [ 380.714860][ T9161] loop1: detected capacity change from 0 to 32768 [ 380.825737][ T9181] loop3: detected capacity change from 0 to 512 [ 380.826893][ T9181] journal_path: Lookup failure for '.Jdebug' [ 380.826923][ T9181] EXT4-fs: error: could not find journal device path [ 381.143190][ T9154] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 381.143190][ T9154] [ 381.205947][ T9181] loop3: detected capacity change from 0 to 1024 [ 381.209541][ T9181] ext3: Unknown parameter 'noacl' [ 381.377275][ T9197] loop4: detected capacity change from 0 to 2048 [ 381.437977][ T9197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.474799][ T9197] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 381.475969][ T9197] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 381.476021][ T9197] EXT4-fs (loop4): This should not happen!! Data will be lost [ 381.476021][ T9197] [ 381.476038][ T9197] EXT4-fs (loop4): Total free blocks count 0 [ 381.476054][ T9197] EXT4-fs (loop4): Free/Dirty block details [ 381.476068][ T9197] EXT4-fs (loop4): free_blocks=4096 [ 381.476084][ T9197] EXT4-fs (loop4): dirty_blocks=16 [ 381.476097][ T9197] EXT4-fs (loop4): Block reservation details [ 381.476111][ T9197] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 381.646993][ T9203] FAULT_INJECTION: forcing a failure. [ 381.646993][ T9203] name failslab, interval 1, probability 0, space 0, times 0 [ 381.647034][ T9203] CPU: 0 UID: 0 PID: 9203 Comm: syz.0.1046 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 381.647066][ T9203] Tainted: [L]=SOFTLOCKUP [ 381.647074][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.647087][ T9203] Call Trace: [ 381.647095][ T9203] [ 381.647104][ T9203] dump_stack_lvl+0xe8/0x150 [ 381.647138][ T9203] should_fail_ex+0x46b/0x600 [ 381.647171][ T9203] should_failslab+0xa8/0x100 [ 381.647205][ T9203] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 381.647234][ T9203] ? __d_alloc+0x37/0x6f0 [ 381.647263][ T9203] ? __pfx___dquot_initialize+0x10/0x10 [ 381.647294][ T9203] __d_alloc+0x37/0x6f0 [ 381.647340][ T9203] d_alloc_pseudo+0x21/0xc0 [ 381.647372][ T9203] alloc_file_pseudo+0xdd/0x240 [ 381.647402][ T9203] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 381.647430][ T9203] ? __pfx_shmem_get_inode+0x10/0x10 [ 381.647463][ T9203] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.647505][ T9203] __shmem_file_setup+0x2e9/0x370 [ 381.647531][ T9203] ? rt_spin_lock+0x1e0/0x400 [ 381.647560][ T9203] ? __pfx___shmem_file_setup+0x10/0x10 [ 381.647590][ T9203] ? rt_spin_unlock+0x14f/0x200 [ 381.647623][ T9203] memfd_alloc_file+0x99/0x570 [ 381.647655][ T9203] ? __pfx_memfd_alloc_file+0x10/0x10 [ 381.647696][ T9203] __se_sys_memfd_create+0x329/0x420 [ 381.647726][ T9203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.647750][ T9203] do_syscall_64+0x174/0x580 [ 381.647770][ T9203] ? trace_irq_disable+0x3b/0x140 [ 381.647798][ T9203] ? clear_bhb_loop+0x40/0x90 [ 381.647824][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.647845][ T9203] RIP: 0033:0x7f837411ce59 [ 381.647865][ T9203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.647883][ T9203] RSP: 002b:00007f8372375e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 381.647907][ T9203] RAX: ffffffffffffffda RBX: 0000000000000c7a RCX: 00007f837411ce59 [ 381.647922][ T9203] RDX: 00007f8372375ee0 RSI: 0000000000000000 RDI: 00007f83741b2f4f [ 381.647936][ T9203] RBP: 00002000000001c0 R08: 00000000ffffffff R09: 0000000000000000 [ 381.647952][ T9203] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000000c0 [ 381.647965][ T9203] R13: 00007f8372375ee0 R14: 00007f8372375ea0 R15: 0000200000000e40 [ 381.647999][ T9203] [ 382.272449][ T9154] ERROR: (device loop1): remounting filesystem as read-only [ 382.272474][ T9154] xtLookup: xtSearch returned -5 [ 382.272487][ T9154] add_index: get/read_metapage failed! [ 382.272510][ T9154] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 382.272510][ T9154] [ 382.272549][ T9154] xtLookup: xtSearch returned -5 [ 382.272559][ T9154] free_index: error reading directory table [ 382.272568][ T9154] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 382.272568][ T9154] [ 382.272599][ T9154] xtLookup: xtSearch returned -5 [ 382.272608][ T9154] free_index: error reading directory table [ 382.272617][ T9154] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 382.272617][ T9154] [ 382.272648][ T9154] xtLookup: xtSearch returned -5 [ 382.272658][ T9154] free_index: error reading directory table [ 382.272666][ T9154] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 382.272666][ T9154] [ 382.272695][ T9154] xtLookup: xtSearch returned -5 [ 382.272704][ T9154] free_index: error reading directory table [ 382.272712][ T9154] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt [ 382.272712][ T9154] [ 382.272744][ T9154] xtLookup: xtSearch returned -5 [ 382.272753][ T9154] free_index: error reading directory table [ 382.638084][ T9199] loop2: detected capacity change from 0 to 131072 [ 382.701691][ T13] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 382.745837][ T9199] F2FS-fs (loop2): invalid crc value [ 382.775553][ T5616] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 382.908378][ T9199] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 382.920885][ T9199] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 384.697473][ T9231] loop4: detected capacity change from 0 to 2048 [ 384.803747][ T9231] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.828212][ T9231] FAULT_INJECTION: forcing a failure. [ 384.828212][ T9231] name failslab, interval 1, probability 0, space 0, times 0 [ 384.828263][ T9231] CPU: 1 UID: 0 PID: 9231 Comm: syz.4.1058 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 384.828296][ T9231] Tainted: [L]=SOFTLOCKUP [ 384.828304][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.828317][ T9231] Call Trace: [ 384.828326][ T9231] [ 384.828335][ T9231] dump_stack_lvl+0xe8/0x150 [ 384.828373][ T9231] should_fail_ex+0x46b/0x600 [ 384.828408][ T9231] should_failslab+0xa8/0x100 [ 384.828442][ T9231] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 384.828472][ T9231] ? __d_alloc+0x37/0x6f0 [ 384.828508][ T9231] __d_alloc+0x37/0x6f0 [ 384.828547][ T9231] d_alloc_parallel+0xe6/0x1610 [ 384.828584][ T9231] ? __d_lookup+0x66/0x780 [ 384.828620][ T9231] ? __d_lookup+0x66/0x780 [ 384.828659][ T9231] ? __d_lookup+0x66/0x780 [ 384.828696][ T9231] ? __pfx_d_alloc_parallel+0x10/0x10 [ 384.828731][ T9231] ? d_lookup+0x1f/0xc0 [ 384.828767][ T9231] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 384.828806][ T9231] path_openat+0xccb/0x3960 [ 384.828880][ T9231] ? __pfx_path_openat+0x10/0x10 [ 384.828934][ T9231] ? do_raw_spin_lock+0x12b/0x2f0 [ 384.828971][ T9231] do_file_open+0x23e/0x4a0 [ 384.829010][ T9231] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 384.829051][ T9231] ? __pfx_do_file_open+0x10/0x10 [ 384.829082][ T9231] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 384.829138][ T9231] ? alloc_fd+0x679/0x6f0 [ 384.829180][ T9231] do_sys_openat2+0x115/0x200 [ 384.829213][ T9231] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.829243][ T9231] ? ksys_write+0x248/0x270 [ 384.829286][ T9231] ? __pfx_ksys_write+0x10/0x10 [ 384.829324][ T9231] __x64_sys_openat+0x138/0x170 [ 384.829357][ T9231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.829381][ T9231] do_syscall_64+0x174/0x580 [ 384.829402][ T9231] ? trace_irq_disable+0x3b/0x140 [ 384.829428][ T9231] ? clear_bhb_loop+0x40/0x90 [ 384.829455][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.829477][ T9231] RIP: 0033:0x7f386e9fce59 [ 384.829499][ T9231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.829518][ T9231] RSP: 002b:00007f386cc56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 384.829542][ T9231] RAX: ffffffffffffffda RBX: 00007f386ec75fa0 RCX: 00007f386e9fce59 [ 384.829558][ T9231] RDX: 000000000008a040 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 384.829572][ T9231] RBP: 00007f386cc56090 R08: 0000000000000000 R09: 0000000000000000 [ 384.829585][ T9231] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 384.829597][ T9231] R13: 00007f386ec76038 R14: 00007f386ec75fa0 R15: 00007ffdc123f768 [ 384.829633][ T9231] [ 385.200389][ T9238] FAULT_INJECTION: forcing a failure. [ 385.200389][ T9238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.200432][ T9238] CPU: 1 UID: 0 PID: 9238 Comm: syz.3.1062 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 385.200462][ T9238] Tainted: [L]=SOFTLOCKUP [ 385.200470][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 385.200483][ T9238] Call Trace: [ 385.200497][ T9238] [ 385.200516][ T9238] dump_stack_lvl+0xe8/0x150 [ 385.200553][ T9238] should_fail_ex+0x46b/0x600 [ 385.200588][ T9238] _copy_from_user+0x2d/0xb0 [ 385.200623][ T9238] __copy_msghdr+0x3c5/0x5b0 [ 385.200652][ T9238] ___sys_sendmsg+0x213/0x360 [ 385.200674][ T9238] ? __lock_acquire+0x6b5/0x2d10 [ 385.200709][ T9238] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.200772][ T9238] ? __fget_files+0x2a/0x420 [ 385.200801][ T9238] ? __fget_files+0x3a6/0x420 [ 385.200841][ T9238] __x64_sys_sendmsg+0x1c3/0x2a0 [ 385.200867][ T9238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.200902][ T9238] ? __pfx_ksys_write+0x10/0x10 [ 385.200945][ T9238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.200971][ T9238] do_syscall_64+0x174/0x580 [ 385.200993][ T9238] ? trace_irq_disable+0x3b/0x140 [ 385.201021][ T9238] ? clear_bhb_loop+0x40/0x90 [ 385.201050][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.201073][ T9238] RIP: 0033:0x7fa017d4ce59 [ 385.201094][ T9238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.201112][ T9238] RSP: 002b:00007fa015f9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.201137][ T9238] RAX: ffffffffffffffda RBX: 00007fa017fc5fa0 RCX: 00007fa017d4ce59 [ 385.201152][ T9238] RDX: 0000000000000080 RSI: 0000200000000440 RDI: 0000000000000003 [ 385.201166][ T9238] RBP: 00007fa015f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 385.201179][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.201192][ T9238] R13: 00007fa017fc6038 R14: 00007fa017fc5fa0 R15: 00007fff84d12048 [ 385.201227][ T9238] [ 385.592453][ T9242] loop3: detected capacity change from 0 to 1024 [ 385.624746][ T9242] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 386.056257][ T9242] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.1064: lblock 1 mapped to illegal pblock 1 (length 1) [ 386.056304][ T9242] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 386.115458][ C1] EXT4-fs (loop3): initial error at time 1780132818: ext4_map_blocks:833: inode 3: block 1 [ 386.115507][ C1] EXT4-fs (loop3): last error at time 1780132818: ext4_map_blocks:833: inode 3: block 1 [ 386.232139][ T9242] Quota error (device loop3): write_blk: dquota write failed [ 386.232202][ T9242] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 386.232289][ T9242] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.1064: Failed to acquire dquot type 0 [ 386.232314][ T9242] loop3: lost filesystem error report for type 5 error -117 [ 386.275595][ T9242] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1064: Freeing blocks not in datazone - block = 0, count = 4096 [ 386.275639][ T9242] loop3: lost filesystem error report for type 5 error -117 [ 386.406711][ T9242] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1064: Invalid inode bitmap blk 0 in block_group 0 [ 386.406756][ T9242] loop3: lost filesystem error report for type 5 error -117 [ 386.476669][ T9242] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 386.476703][ T9242] loop3: lost filesystem error report for type 5 error -117 [ 386.497730][ T67] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 386.497777][ T67] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 386.587232][ T9242] EXT4-fs (loop3): 1 orphan inode deleted [ 386.611669][ T67] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 386.611788][ T67] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 0 [ 386.611812][ T67] loop3: lost filesystem error report for type 5 error -117 [ 386.642620][ T9242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.794748][ T13] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 386.852525][ T13] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 386.852577][ T13] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 386.910600][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.998472][ T9276] FAULT_INJECTION: forcing a failure. [ 386.998472][ T9276] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.998513][ T9276] CPU: 0 UID: 0 PID: 9276 Comm: syz.0.1077 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 386.998544][ T9276] Tainted: [L]=SOFTLOCKUP [ 386.998551][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.998564][ T9276] Call Trace: [ 386.998572][ T9276] [ 386.998581][ T9276] dump_stack_lvl+0xe8/0x150 [ 386.998612][ T9276] should_fail_ex+0x46b/0x600 [ 386.998640][ T9276] prepare_alloc_pages+0x22a/0x6b0 [ 386.998673][ T9276] __alloc_frozen_pages_noprof+0x12f/0x380 [ 386.998703][ T9276] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 386.998733][ T9276] ? __pfx_policy_nodemask+0x10/0x10 [ 386.998756][ T9276] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 386.998781][ T9276] ? reacquire_held_locks+0x104/0x190 [ 386.998811][ T9276] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 386.998838][ T9276] alloc_pages_mpol+0xd1/0x380 [ 386.998868][ T9276] alloc_pages_noprof+0xd2/0x2f0 [ 386.998897][ T9276] __pmd_alloc+0x3a/0x5e0 [ 386.998925][ T9276] handle_mm_fault+0xf4d/0x14d0 [ 386.998953][ T9276] ? handle_mm_fault+0xed/0x14d0 [ 386.998981][ T9276] ? __pfx_handle_mm_fault+0x10/0x10 [ 386.999018][ T9276] ? __lock_acquire+0x6b5/0x2d10 [ 386.999047][ T9276] ? lock_mm_and_find_vma+0xa7/0x340 [ 386.999076][ T9276] do_user_addr_fault+0x75b/0x1340 [ 386.999115][ T9276] exc_page_fault+0x6a/0xc0 [ 386.999133][ T9276] asm_exc_page_fault+0x26/0x30 [ 386.999151][ T9276] RIP: 0010:__get_user_8+0x14/0x40 [ 386.999175][ T9276] Code: ca e9 40 2f 05 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 0f 2f 05 00 90 90 90 90 90 90 90 90 90 [ 386.999191][ T9276] RSP: 0018:ffffc90005ec7eb8 EFLAGS: 00050287 [ 386.999209][ T9276] RAX: 00002000000023c0 RBX: 00002000000023c0 RCX: 0000000000000046 [ 386.999222][ T9276] RDX: 00007ffffffff000 RSI: ffffffff8d8b03aa RDI: ffffffff8baa2980 [ 386.999234][ T9276] RBP: ffffc90005ec7f38 R08: ffffffff8218329f R09: ffff88803aafba30 [ 386.999246][ T9276] R10: dffffc0000000000 R11: fffffbfff1f1a07f R12: 00000000000000ce [ 386.999258][ T9276] R13: ffffffff81000130 R14: 0000000000010001 R15: ffff88801e7a9f00 [ 386.999273][ T9276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.999295][ T9276] ? __might_fault+0xaf/0x130 [ 386.999331][ T9276] __se_sys_io_setup+0x2d/0x1d0 [ 386.999355][ T9276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.999373][ T9276] do_syscall_64+0x174/0x580 [ 386.999389][ T9276] ? trace_irq_disable+0x3b/0x140 [ 386.999410][ T9276] ? clear_bhb_loop+0x40/0x90 [ 386.999432][ T9276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.999459][ T9276] RIP: 0033:0x7f837411ce59 [ 386.999475][ T9276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.999489][ T9276] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 386.999507][ T9276] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 386.999520][ T9276] RDX: 0000000000000000 RSI: 00002000000023c0 RDI: 0000000000010001 [ 386.999531][ T9276] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 386.999542][ T9276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.999553][ T9276] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 386.999585][ T9276] [ 387.078267][ T9274] loop4: detected capacity change from 0 to 64 [ 387.159809][ T9274] hfs: unable to locate alternate MDB [ 387.159824][ T9274] hfs: continuing without an alternate MDB [ 387.336075][ T9278] loop0: detected capacity change from 0 to 2048 [ 387.345684][ T9278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.358826][ T9278] FAULT_INJECTION: forcing a failure. [ 387.358826][ T9278] name failslab, interval 1, probability 0, space 0, times 0 [ 387.358864][ T9278] CPU: 1 UID: 0 PID: 9278 Comm: syz.0.1078 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.358892][ T9278] Tainted: [L]=SOFTLOCKUP [ 387.358899][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.358911][ T9278] Call Trace: [ 387.358919][ T9278] [ 387.358927][ T9278] dump_stack_lvl+0xe8/0x150 [ 387.358960][ T9278] should_fail_ex+0x46b/0x600 [ 387.358992][ T9278] should_failslab+0xa8/0x100 [ 387.359022][ T9278] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 387.359049][ T9278] ? __d_alloc+0x37/0x6f0 [ 387.359081][ T9278] __d_alloc+0x37/0x6f0 [ 387.359114][ T9278] d_alloc_parallel+0xe6/0x1610 [ 387.359145][ T9278] ? __d_lookup+0x66/0x780 [ 387.359189][ T9278] ? __d_lookup+0x66/0x780 [ 387.359224][ T9278] ? __d_lookup+0x66/0x780 [ 387.359256][ T9278] ? __pfx_d_alloc_parallel+0x10/0x10 [ 387.359292][ T9278] ? d_lookup+0x1f/0xc0 [ 387.359325][ T9278] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 387.359360][ T9278] path_openat+0xccb/0x3960 [ 387.359424][ T9278] ? __pfx_path_openat+0x10/0x10 [ 387.359470][ T9278] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.359503][ T9278] do_file_open+0x23e/0x4a0 [ 387.359531][ T9278] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 387.359566][ T9278] ? __pfx_do_file_open+0x10/0x10 [ 387.359592][ T9278] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 387.359641][ T9278] ? alloc_fd+0x679/0x6f0 [ 387.359679][ T9278] do_sys_openat2+0x115/0x200 [ 387.359707][ T9278] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.359732][ T9278] ? ksys_write+0x248/0x270 [ 387.359765][ T9278] ? __pfx_ksys_write+0x10/0x10 [ 387.359798][ T9278] __x64_sys_openat+0x138/0x170 [ 387.359827][ T9278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.359848][ T9278] do_syscall_64+0x174/0x580 [ 387.359868][ T9278] ? trace_irq_disable+0x3b/0x140 [ 387.359892][ T9278] ? clear_bhb_loop+0x40/0x90 [ 387.359917][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.359937][ T9278] RIP: 0033:0x7f837411ce59 [ 387.359957][ T9278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.359975][ T9278] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.359997][ T9278] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 387.360012][ T9278] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 387.360025][ T9278] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 387.360038][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.360050][ T9278] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 387.360083][ T9278] [ 387.659083][ T9280] loop3: detected capacity change from 0 to 256 [ 387.665493][ T9280] exfat: Bad value for 'gid' [ 387.665513][ T9280] exfat: Bad value for 'gid' [ 387.866800][ T9288] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1083'. [ 387.954335][ T9292] loop4: detected capacity change from 0 to 1024 [ 387.955665][ T9292] EXT4-fs: Ignoring removed orlov option [ 387.957005][ T9292] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 388.076213][ T9292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.134100][ T9292] netlink: 'syz.4.1084': attribute type 14 has an invalid length. [ 388.134126][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 388.303883][ T9299] loop1: detected capacity change from 0 to 512 [ 388.412106][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.522149][ T9299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.522317][ T9299] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.150816][ T9299] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1086: bg 0: block 248: padding at end of block bitmap is not set [ 390.262476][ T9299] Quota error (device loop1): write_blk: dquota write failed [ 390.262635][ T9299] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 390.262684][ T9299] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1086: Failed to acquire dquot type 0 [ 390.893997][ T9314] loop0: detected capacity change from 0 to 32768 [ 390.895255][ T9314] btrfs: Deprecated parameter 'usebackuproot' [ 390.895275][ T9314] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 390.914926][ T9314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1091 (9314) [ 391.090498][ T9314] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 391.090536][ T9314] BTRFS info (device loop0): using crc32c checksum algorithm [ 391.759505][ T13] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 391.759684][ T9314] BTRFS error (device loop0): failed to load root extent [ 391.759729][ T9314] BTRFS warning (device loop0): try to load backup roots slot 1 [ 391.760300][ T5893] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 391.760426][ T9314] BTRFS warning (device loop0): couldn't read tree root [ 391.760447][ T9314] BTRFS warning (device loop0): try to load backup roots slot 2 [ 391.761598][ T13] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 391.761727][ T9314] BTRFS warning (device loop0): couldn't read tree root [ 391.761748][ T9314] BTRFS warning (device loop0): try to load backup roots slot 3 [ 391.992571][ T9314] BTRFS info (device loop0): rebuilding free space tree [ 392.080971][ T9314] BTRFS info (device loop0): checking UUID tree [ 392.173054][ T9316] loop4: detected capacity change from 0 to 131072 [ 392.189991][ T9314] BTRFS info (device loop0): enabling ssd optimizations [ 392.190020][ T9314] BTRFS info (device loop0): turning on async discard [ 392.190037][ T9314] BTRFS info (device loop0): enabling free space tree [ 392.190055][ T9314] BTRFS info (device loop0): force clearing of disk cache [ 392.190072][ T9314] BTRFS info (device loop0): enabling auto defrag [ 392.190090][ T9314] BTRFS info (device loop0): trying to use backup root at mount time [ 392.190131][ T9314] BTRFS info (device loop0): use zstd compression, level 3 [ 392.199546][ T9316] F2FS-fs (loop4): invalid crc value [ 392.364268][ T9314] FAULT_INJECTION: forcing a failure. [ 392.364268][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 392.364312][ T9314] CPU: 1 UID: 0 PID: 9314 Comm: syz.0.1091 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.364343][ T9314] Tainted: [L]=SOFTLOCKUP [ 392.364352][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.364366][ T9314] Call Trace: [ 392.364375][ T9314] [ 392.364385][ T9314] dump_stack_lvl+0xe8/0x150 [ 392.364428][ T9314] should_fail_ex+0x46b/0x600 [ 392.364465][ T9314] should_failslab+0xa8/0x100 [ 392.364502][ T9314] kmem_cache_alloc_noprof+0x87/0x680 [ 392.364532][ T9314] ? btrfs_get_extent+0x32b/0x1720 [ 392.364563][ T9314] ? btrfs_alloc_path+0x9/0x30 [ 392.364602][ T9314] btrfs_get_extent+0x32b/0x1720 [ 392.364658][ T9314] ? __pfx_btrfs_get_extent+0x10/0x10 [ 392.364690][ T9314] ? rt_spin_unlock+0x1a0/0x200 [ 392.364738][ T9314] btrfs_reset_extent_delalloc+0x1d4/0x480 [ 392.364778][ T9314] btrfs_dirty_folio+0x271/0x3c0 [ 392.364820][ T9314] btrfs_buffered_write+0xcb2/0x1670 [ 392.364881][ T9314] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 392.364928][ T9314] btrfs_do_write_iter+0x30f/0x840 [ 392.364955][ T9314] ? vfs_write+0x22d/0xba0 [ 392.365000][ T9314] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 392.365043][ T9314] vfs_write+0x629/0xba0 [ 392.365089][ T9314] ? __pfx_vfs_write+0x10/0x10 [ 392.365127][ T9314] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 392.365171][ T9314] ? lockdep_hardirqs_on+0x7a/0x110 [ 392.365197][ T9314] ? mutex_lock_nested+0x152/0x1d0 [ 392.365226][ T9314] ? fdget_pos+0x252/0x320 [ 392.365269][ T9314] ksys_write+0x156/0x270 [ 392.365308][ T9314] ? __pfx_ksys_write+0x10/0x10 [ 392.365354][ T9314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.365381][ T9314] do_syscall_64+0x174/0x580 [ 392.365404][ T9314] ? trace_irq_disable+0x3b/0x140 [ 392.365432][ T9314] ? clear_bhb_loop+0x40/0x90 [ 392.365463][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.365486][ T9314] RIP: 0033:0x7f837411ce59 [ 392.365509][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.365530][ T9314] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.365555][ T9314] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 392.365572][ T9314] RDX: 000000000000000c RSI: 0000200000000040 RDI: 0000000000000004 [ 392.365587][ T9314] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 392.365601][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.365615][ T9314] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 392.365654][ T9314] [ 392.456636][ T9344] netlink: 'syz.3.1096': attribute type 21 has an invalid length. [ 392.592076][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.614028][ T9316] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 392.646782][ T9316] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 392.752284][ T9342] FAULT_INJECTION: forcing a failure. [ 392.752284][ T9342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.752325][ T9342] CPU: 0 UID: 0 PID: 9342 Comm: syz.2.1095 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.752356][ T9342] Tainted: [L]=SOFTLOCKUP [ 392.752364][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.752377][ T9342] Call Trace: [ 392.752386][ T9342] [ 392.752397][ T9342] dump_stack_lvl+0xe8/0x150 [ 392.752439][ T9342] should_fail_ex+0x46b/0x600 [ 392.752474][ T9342] _copy_to_user+0x31/0xb0 [ 392.752507][ T9342] simple_read_from_buffer+0xe1/0x170 [ 392.752541][ T9342] proc_fail_nth_read+0x1be/0x230 [ 392.752575][ T9342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.752607][ T9342] ? rw_verify_area+0x2ac/0x4e0 [ 392.752639][ T9342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.752668][ T9342] vfs_read+0x212/0xa80 [ 392.752711][ T9342] ? __pfx_vfs_read+0x10/0x10 [ 392.752747][ T9342] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 392.752784][ T9342] ? lockdep_hardirqs_on+0x7a/0x110 [ 392.752808][ T9342] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 392.752844][ T9342] ? mutex_lock_nested+0x152/0x1d0 [ 392.752872][ T9342] ? fdget_pos+0x252/0x320 [ 392.752913][ T9342] ksys_read+0x156/0x270 [ 392.752951][ T9342] ? __pfx_ksys_read+0x10/0x10 [ 392.752996][ T9342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.753021][ T9342] do_syscall_64+0x174/0x580 [ 392.753044][ T9342] ? trace_irq_disable+0x3b/0x140 [ 392.753073][ T9342] ? clear_bhb_loop+0x40/0x90 [ 392.753102][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.753125][ T9342] RIP: 0033:0x7fecd5a3d68e [ 392.753146][ T9342] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 392.753167][ T9342] RSP: 002b:00007fecd3cb4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.753192][ T9342] RAX: ffffffffffffffda RBX: 00007fecd3cb56c0 RCX: 00007fecd5a3d68e [ 392.753208][ T9342] RDX: 000000000000000f RSI: 00007fecd3cb50a0 RDI: 0000000000000005 [ 392.753221][ T9342] RBP: 00007fecd3cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 392.753236][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.753255][ T9342] R13: 00007fecd5cf6128 R14: 00007fecd5cf6090 R15: 00007ffc5cd95be8 [ 392.753293][ T9342] [ 392.758931][ T37] audit: type=1326 audit(1780132825.555:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.4.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e9fce59 code=0x7ffc0000 [ 392.758996][ T37] audit: type=1326 audit(1780132825.565:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.4.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e9fce59 code=0x7ffc0000 [ 392.760646][ T37] audit: type=1326 audit(1780132825.565:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.4.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f386e9fce59 code=0x7ffc0000 [ 392.760703][ T37] audit: type=1326 audit(1780132825.565:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.4.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e9fce59 code=0x7ffc0000 [ 392.760752][ T37] audit: type=1326 audit(1780132825.565:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.4.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e9fce59 code=0x7ffc0000 [ 392.760802][ T37] audit: type=1326 audit(1780132825.565:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.4.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f386e9fce59 code=0x7ffc0000 [ 392.760856][ T37] audit: type=1326 audit(1780132825.565:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.4.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e9fce59 code=0x7ffc0000 [ 392.762403][ T37] audit: type=1326 audit(1780132825.565:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.4.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e9fce59 code=0x7ffc0000 [ 392.762469][ T37] audit: type=1326 audit(1780132825.565:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.4.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f386e9fce59 code=0x7ffc0000 [ 392.762519][ T37] audit: type=1326 audit(1780132825.565:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.4.1092" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386e9fce59 code=0x7ffc0000 [ 393.424284][ T9350] loop2: detected capacity change from 0 to 2048 [ 393.435133][ T9348] erspan0: entered promiscuous mode [ 393.456930][ T5611] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.483678][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 393.669702][ T9350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.880171][ T9350] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 394.359702][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.730974][ T9367] FAULT_INJECTION: forcing a failure. [ 394.730974][ T9367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.731016][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz.0.1104 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.731048][ T9367] Tainted: [L]=SOFTLOCKUP [ 394.731057][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.731070][ T9367] Call Trace: [ 394.731079][ T9367] [ 394.731089][ T9367] dump_stack_lvl+0xe8/0x150 [ 394.731125][ T9367] should_fail_ex+0x46b/0x600 [ 394.731161][ T9367] _copy_from_iter+0x1d3/0x1670 [ 394.731211][ T9367] ? trace_kmem_cache_alloc+0x29/0xe0 [ 394.731239][ T9367] ? __alloc_skb+0x27d/0x7d0 [ 394.731273][ T9367] ? __pfx__copy_from_iter+0x10/0x10 [ 394.731303][ T9367] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 394.731333][ T9367] ? __alloc_skb+0x27d/0x7d0 [ 394.731373][ T9367] ? netlink_sendmsg+0x650/0xb40 [ 394.731396][ T9367] ? skb_put+0x11b/0x210 [ 394.731435][ T9367] netlink_sendmsg+0x6c0/0xb40 [ 394.731470][ T9367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.731498][ T9367] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 394.731538][ T9367] ? aa_sock_msg_perm+0x122/0x200 [ 394.731569][ T9367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.731593][ T9367] sock_sendmsg_nosec+0x13a/0x180 [ 394.731626][ T9367] ____sys_sendmsg+0x55c/0x870 [ 394.731657][ T9367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.731692][ T9367] ? import_iovec+0x73/0xa0 [ 394.731731][ T9367] ___sys_sendmsg+0x2a5/0x360 [ 394.731754][ T9367] ? __lock_acquire+0x6b5/0x2d10 [ 394.731789][ T9367] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.731860][ T9367] ? __fget_files+0x2a/0x420 [ 394.731889][ T9367] ? __fget_files+0x3a6/0x420 [ 394.731931][ T9367] __x64_sys_sendmsg+0x1c3/0x2a0 [ 394.731959][ T9367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.731995][ T9367] ? __pfx_ksys_write+0x10/0x10 [ 394.732040][ T9367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.732066][ T9367] do_syscall_64+0x174/0x580 [ 394.732090][ T9367] ? trace_irq_disable+0x3b/0x140 [ 394.732118][ T9367] ? clear_bhb_loop+0x40/0x90 [ 394.732146][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.732169][ T9367] RIP: 0033:0x7f837411ce59 [ 394.732200][ T9367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.732217][ T9367] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.732242][ T9367] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 394.732258][ T9367] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 394.732273][ T9367] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 394.732287][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.732301][ T9367] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 394.732336][ T9367] [ 395.388103][ T9371] loop1: detected capacity change from 0 to 2048 [ 395.428016][ T9371] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 395.437870][ T9371] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.482628][ T9375] loop2: detected capacity change from 0 to 512 [ 395.620553][ T9375] EXT4-fs (loop2): 1 truncate cleaned up [ 395.691865][ T9375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.823601][ T9375] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.1103: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 396.053567][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.415325][ T9384] loop1: detected capacity change from 0 to 32768 [ 396.417228][ T9384] btrfs: Deprecated parameter 'usebackuproot' [ 396.417252][ T9384] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 396.427859][ T9384] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1109 (9384) [ 396.542950][ T9384] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.542992][ T9384] BTRFS info (device loop1): using crc32c checksum algorithm [ 396.808819][ T5894] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 396.808951][ T9384] BTRFS error (device loop1): failed to load root extent [ 396.808997][ T9384] BTRFS warning (device loop1): try to load backup roots slot 1 [ 396.809429][ T5894] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 396.809526][ T9384] BTRFS warning (device loop1): couldn't read tree root [ 396.809546][ T9384] BTRFS warning (device loop1): try to load backup roots slot 2 [ 396.810086][ T1480] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 396.829278][ T9384] BTRFS warning (device loop1): couldn't read tree root [ 396.829310][ T9384] BTRFS warning (device loop1): try to load backup roots slot 3 [ 396.876930][ T9384] BTRFS info (device loop1): rebuilding free space tree [ 397.261088][ T9384] BTRFS info (device loop1): checking UUID tree [ 397.262632][ T9384] BTRFS info (device loop1): enabling ssd optimizations [ 397.262661][ T9384] BTRFS info (device loop1): turning on async discard [ 397.262680][ T9384] BTRFS info (device loop1): enabling free space tree [ 397.262699][ T9384] BTRFS info (device loop1): force clearing of disk cache [ 397.262718][ T9384] BTRFS info (device loop1): enabling auto defrag [ 397.262737][ T9384] BTRFS info (device loop1): trying to use backup root at mount time [ 397.262758][ T9384] BTRFS info (device loop1): use zstd compression, level 3 [ 397.715373][ T9418] sock: sock_timestamping_bind_phc: sock not bind to device [ 398.079702][ T5614] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 398.080086][ T5749] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 398.328979][ T5749] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.329017][ T5749] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30752, setting to 64 [ 398.329048][ T5749] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.329093][ T5749] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.329119][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.620387][ T5749] usb 3-1: usb_control_msg returned -71 [ 398.620450][ T5749] usbtmc 3-1:16.0: can't read capabilities [ 398.717299][ T5749] usb 3-1: USB disconnect, device number 21 [ 399.165778][ T9427] loop4: detected capacity change from 0 to 32768 [ 399.167051][ T9427] btrfs: Deprecated parameter 'usebackuproot' [ 399.167073][ T9427] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 399.179813][ T9427] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1099 (9427) [ 399.230596][ T9427] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 399.230637][ T9427] BTRFS info (device loop4): using crc32c checksum algorithm [ 399.538067][ T9453] netlink: zone id is out of range [ 399.538085][ T9453] netlink: zone id is out of range [ 399.547993][ T8053] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 399.548167][ T9427] BTRFS error (device loop4): failed to load root extent [ 399.548209][ T9427] BTRFS warning (device loop4): try to load backup roots slot 1 [ 399.557986][ T8053] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 399.558137][ T9427] BTRFS warning (device loop4): couldn't read tree root [ 399.558160][ T9427] BTRFS warning (device loop4): try to load backup roots slot 2 [ 399.560752][ T5894] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 399.560885][ T9427] BTRFS warning (device loop4): couldn't read tree root [ 399.560914][ T9427] BTRFS warning (device loop4): try to load backup roots slot 3 [ 399.710780][ T9427] BTRFS info (device loop4): rebuilding free space tree [ 400.083499][ T9427] BTRFS info (device loop4): checking UUID tree [ 400.093876][ T9427] BTRFS info (device loop4): enabling ssd optimizations [ 400.093906][ T9427] BTRFS info (device loop4): turning on async discard [ 400.093926][ T9427] BTRFS info (device loop4): enabling free space tree [ 400.093945][ T9427] BTRFS info (device loop4): force clearing of disk cache [ 400.093964][ T9427] BTRFS info (device loop4): enabling auto defrag [ 400.093982][ T9427] BTRFS info (device loop4): trying to use backup root at mount time [ 400.094002][ T9427] BTRFS info (device loop4): use zstd compression, level 3 [ 400.108561][ T9464] loop2: detected capacity change from 0 to 128 [ 400.424281][ T9464] EXT4-fs (loop2): Test dummy encryption mode enabled [ 400.543088][ T9464] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 400.627921][ T9464] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 401.079842][ T9481] FAULT_INJECTION: forcing a failure. [ 401.079842][ T9481] name failslab, interval 1, probability 0, space 0, times 0 [ 401.079883][ T9481] CPU: 1 UID: 0 PID: 9481 Comm: syz.0.1137 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 401.079916][ T9481] Tainted: [L]=SOFTLOCKUP [ 401.079924][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.079939][ T9481] Call Trace: [ 401.079948][ T9481] [ 401.079959][ T9481] dump_stack_lvl+0xe8/0x150 [ 401.079994][ T9481] should_fail_ex+0x46b/0x600 [ 401.080030][ T9481] should_failslab+0xa8/0x100 [ 401.080065][ T9481] kmem_cache_alloc_noprof+0x87/0x680 [ 401.080105][ T9481] ? skb_clone+0x212/0x3a0 [ 401.080135][ T9481] skb_clone+0x212/0x3a0 [ 401.080165][ T9481] __netlink_deliver_tap+0x424/0x8b0 [ 401.080205][ T9481] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.080231][ T9481] netlink_deliver_tap+0x19c/0x1b0 [ 401.080258][ T9481] netlink_unicast+0x754/0x920 [ 401.080307][ T9481] netlink_sendmsg+0x813/0xb40 [ 401.080342][ T9481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.080369][ T9481] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 401.080410][ T9481] ? aa_sock_msg_perm+0x122/0x200 [ 401.080442][ T9481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.080471][ T9481] sock_sendmsg_nosec+0x13a/0x180 [ 401.080505][ T9481] ____sys_sendmsg+0x55c/0x870 [ 401.080537][ T9481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.080573][ T9481] ? import_iovec+0x73/0xa0 [ 401.080611][ T9481] ___sys_sendmsg+0x2a5/0x360 [ 401.080635][ T9481] ? __lock_acquire+0x6b5/0x2d10 [ 401.080672][ T9481] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.080737][ T9481] ? __fget_files+0x2a/0x420 [ 401.080767][ T9481] ? __fget_files+0x3a6/0x420 [ 401.080807][ T9481] __x64_sys_sendmsg+0x1c3/0x2a0 [ 401.080834][ T9481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.080870][ T9481] ? __pfx_ksys_write+0x10/0x10 [ 401.080915][ T9481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.080940][ T9481] do_syscall_64+0x174/0x580 [ 401.080963][ T9481] ? trace_irq_disable+0x3b/0x140 [ 401.080991][ T9481] ? clear_bhb_loop+0x40/0x90 [ 401.081021][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.081044][ T9481] RIP: 0033:0x7f837411ce59 [ 401.081066][ T9481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.081095][ T9481] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.081121][ T9481] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 401.081139][ T9481] RDX: 0000000004000010 RSI: 00002000000007c0 RDI: 0000000000000003 [ 401.081154][ T9481] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 401.081169][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.081184][ T9481] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 401.081221][ T9481] [ 401.243967][ T5617] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 401.990776][ T5616] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 402.066715][ T5749] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 402.288040][ T5749] usb 3-1: Using ep0 maxpacket: 32 [ 402.292196][ T5749] usb 3-1: unable to get BOS descriptor or descriptor too short [ 402.293914][ T5749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.293970][ T5749] usb 3-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.294001][ T5749] usb 3-1: config 1 interface 0 has no altsetting 0 [ 402.297227][ T5749] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.297256][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.297279][ T5749] usb 3-1: Product: syz [ 402.297294][ T5749] usb 3-1: Manufacturer: syz [ 402.297311][ T5749] usb 3-1: SerialNumber: syz [ 402.558603][ T9490] loop3: detected capacity change from 0 to 32768 [ 402.871796][ T5749] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 402.903718][ T5749] usb 3-1: USB disconnect, device number 22 [ 402.933155][ T9490] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 9e821823-14f7-448e-ac48-ad3863d4035d [ 402.933234][ T9490] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1142 (9490) [ 403.460892][ T9498] loop1: detected capacity change from 0 to 131072 [ 403.547100][ T9498] F2FS-fs (loop1): invalid crc value [ 403.567791][ T9490] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 403.567829][ T9490] BTRFS info (device loop3): using crc32c checksum algorithm [ 403.712769][ T9498] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 403.774427][ T9498] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 403.808415][ T9518] netlink: 'syz.2.1149': attribute type 29 has an invalid length. [ 403.808441][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 403.835536][ T9518] netlink: 'syz.2.1149': attribute type 29 has an invalid length. [ 403.835559][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 404.018016][ T9522] loop0: detected capacity change from 0 to 256 [ 404.024222][ T9522] exfat: Deprecated parameter 'utf8' [ 404.405657][ T8053] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 404.405918][ T9490] BTRFS warning (device loop3): couldn't read tree root [ 404.405942][ T9490] BTRFS warning (device loop3): try to load backup roots slot 1 [ 404.406875][ T8053] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 404.409657][ T9490] BTRFS warning (device loop3): couldn't read tree root [ 404.409682][ T9490] BTRFS warning (device loop3): try to load backup roots slot 2 [ 404.414312][ T178] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 404.415087][ T9490] BTRFS warning (device loop3): couldn't read tree root [ 404.415110][ T9490] BTRFS warning (device loop3): try to load backup roots slot 3 [ 404.459258][ T9522] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 404.586227][ T5894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 404.938667][ T9531] FAULT_INJECTION: forcing a failure. [ 404.938667][ T9531] name failslab, interval 1, probability 0, space 0, times 0 [ 404.938712][ T9531] CPU: 0 UID: 0 PID: 9531 Comm: syz.0.1147 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 404.938744][ T9531] Tainted: [L]=SOFTLOCKUP [ 404.938752][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 404.938765][ T9531] Call Trace: [ 404.938774][ T9531] [ 404.938784][ T9531] dump_stack_lvl+0xe8/0x150 [ 404.938827][ T9531] should_fail_ex+0x46b/0x600 [ 404.938862][ T9531] should_failslab+0xa8/0x100 [ 404.938897][ T9531] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 404.938928][ T9531] ? __d_alloc+0x37/0x6f0 [ 404.938957][ T9531] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.938987][ T9531] __d_alloc+0x37/0x6f0 [ 404.939025][ T9531] d_alloc_parallel+0xe6/0x1610 [ 404.939055][ T9531] ? lockdep_hardirqs_on+0x7a/0x110 [ 404.939079][ T9531] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 404.939115][ T9531] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 404.939142][ T9531] ? reacquire_held_locks+0x104/0x190 [ 404.939174][ T9531] ? rt_spin_lock+0x1e0/0x400 [ 404.939206][ T9531] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 404.939243][ T9531] ? __pfx_d_alloc_parallel+0x10/0x10 [ 404.939294][ T9531] ? rt_spin_unlock+0x160/0x200 [ 404.939327][ T9531] ? __dentry_kill+0x46f/0x5c0 [ 404.939352][ T9531] ? finish_dput+0xad/0x480 [ 404.939380][ T9531] ? finish_dput+0x3da/0x480 [ 404.939411][ T9531] path_openat+0x1c42/0x3960 [ 404.939484][ T9531] ? __pfx_path_openat+0x10/0x10 [ 404.939536][ T9531] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.939572][ T9531] do_file_open+0x23e/0x4a0 [ 404.939605][ T9531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 404.939644][ T9531] ? __pfx_do_file_open+0x10/0x10 [ 404.939674][ T9531] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 404.939729][ T9531] ? alloc_fd+0x679/0x6f0 [ 404.939770][ T9531] do_sys_openat2+0x115/0x200 [ 404.939803][ T9531] ? __pfx_do_sys_openat2+0x10/0x10 [ 404.939833][ T9531] ? ksys_write+0x248/0x270 [ 404.939868][ T9531] ? __pfx_ksys_write+0x10/0x10 [ 404.939905][ T9531] __x64_sys_openat+0x138/0x170 [ 404.939937][ T9531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.939961][ T9531] do_syscall_64+0x174/0x580 [ 404.939982][ T9531] ? trace_irq_disable+0x3b/0x140 [ 404.940009][ T9531] ? clear_bhb_loop+0x40/0x90 [ 404.940036][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.940057][ T9531] RIP: 0033:0x7f837411ce59 [ 404.940079][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.940097][ T9531] RSP: 002b:00007f8372355028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 404.940121][ T9531] RAX: ffffffffffffffda RBX: 00007f8374396090 RCX: 00007f837411ce59 [ 404.940137][ T9531] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 404.940153][ T9531] RBP: 00007f8372355090 R08: 0000000000000000 R09: 0000000000000000 [ 404.940167][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.940179][ T9531] R13: 00007f8374396128 R14: 00007f8374396090 R15: 00007ffea1d72fe8 [ 404.940216][ T9531] [ 405.372971][ T9529] loop2: detected capacity change from 0 to 1024 [ 406.011535][ T9532] loop4: detected capacity change from 0 to 131072 [ 406.142465][ T9532] F2FS-fs (loop4): invalid crc value [ 406.164257][ T9490] BTRFS error (device loop3): open_ctree failed: -4 [ 406.295987][ T9532] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 406.366350][ T9532] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 407.223645][ T9545] loop0: detected capacity change from 0 to 8 [ 407.484756][ T9545] FAULT_INJECTION: forcing a failure. [ 407.484756][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 407.484799][ T9545] CPU: 0 UID: 0 PID: 9545 Comm: syz.0.1152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 407.484831][ T9545] Tainted: [L]=SOFTLOCKUP [ 407.484840][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.484853][ T9545] Call Trace: [ 407.484862][ T9545] [ 407.484874][ T9545] dump_stack_lvl+0xe8/0x150 [ 407.484913][ T9545] should_fail_ex+0x46b/0x600 [ 407.484950][ T9545] should_failslab+0xa8/0x100 [ 407.485000][ T9545] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 407.485034][ T9545] ? __d_alloc+0x37/0x6f0 [ 407.485073][ T9545] __d_alloc+0x37/0x6f0 [ 407.485113][ T9545] d_alloc_parallel+0xe6/0x1610 [ 407.485149][ T9545] ? __d_lookup+0x66/0x780 [ 407.485187][ T9545] ? __d_lookup+0x66/0x780 [ 407.485226][ T9545] ? __d_lookup+0x66/0x780 [ 407.485264][ T9545] ? __pfx_d_alloc_parallel+0x10/0x10 [ 407.485299][ T9545] ? d_lookup+0x1f/0xc0 [ 407.485336][ T9545] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 407.485377][ T9545] path_openat+0xccb/0x3960 [ 407.485451][ T9545] ? __pfx_path_openat+0x10/0x10 [ 407.485506][ T9545] ? do_raw_spin_lock+0x12b/0x2f0 [ 407.485544][ T9545] do_file_open+0x23e/0x4a0 [ 407.485580][ T9545] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 407.485623][ T9545] ? __pfx_do_file_open+0x10/0x10 [ 407.485655][ T9545] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 407.485713][ T9545] ? alloc_fd+0x679/0x6f0 [ 407.485755][ T9545] do_sys_openat2+0x115/0x200 [ 407.485790][ T9545] ? __pfx_do_sys_openat2+0x10/0x10 [ 407.485820][ T9545] ? ksys_write+0x248/0x270 [ 407.485858][ T9545] ? __pfx_ksys_write+0x10/0x10 [ 407.485897][ T9545] __x64_sys_openat+0x138/0x170 [ 407.485931][ T9545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.485957][ T9545] do_syscall_64+0x174/0x580 [ 407.485988][ T9545] ? trace_irq_disable+0x3b/0x140 [ 407.486017][ T9545] ? clear_bhb_loop+0x40/0x90 [ 407.486048][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.486071][ T9545] RIP: 0033:0x7f837411ce59 [ 407.486094][ T9545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.486115][ T9545] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 407.486140][ T9545] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 407.486157][ T9545] RDX: 0000000000040000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 407.486174][ T9545] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 407.486189][ T9545] R10: 0000000000000120 R11: 0000000000000246 R12: 0000000000000001 [ 407.486203][ T9545] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 407.486241][ T9545] [ 408.131462][ T9540] loop3: detected capacity change from 0 to 131072 [ 408.142962][ T9540] F2FS-fs (loop3): invalid crc value [ 408.311366][ T9540] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 408.389775][ T9540] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 409.311669][ T9556] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1160'. [ 413.254710][ T9572] FAULT_INJECTION: forcing a failure. [ 413.254710][ T9572] name failslab, interval 1, probability 0, space 0, times 0 [ 413.254747][ T9572] CPU: 0 UID: 0 PID: 9572 Comm: syz.0.1167 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 413.254774][ T9572] Tainted: [L]=SOFTLOCKUP [ 413.254782][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.254793][ T9572] Call Trace: [ 413.254801][ T9572] [ 413.254809][ T9572] dump_stack_lvl+0xe8/0x150 [ 413.254844][ T9572] should_fail_ex+0x46b/0x600 [ 413.254873][ T9572] should_failslab+0xa8/0x100 [ 413.254903][ T9572] kmem_cache_alloc_noprof+0x87/0x680 [ 413.254928][ T9572] ? skb_clone+0x212/0x3a0 [ 413.254953][ T9572] skb_clone+0x212/0x3a0 [ 413.254977][ T9572] __netlink_deliver_tap+0x424/0x8b0 [ 413.255032][ T9572] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.255053][ T9572] netlink_deliver_tap+0x19c/0x1b0 [ 413.255073][ T9572] netlink_unicast+0x754/0x920 [ 413.255110][ T9572] netlink_sendmsg+0x813/0xb40 [ 413.255138][ T9572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.255159][ T9572] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 413.255199][ T9572] ? aa_sock_msg_perm+0x122/0x200 [ 413.255224][ T9572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.255242][ T9572] sock_sendmsg_nosec+0x13a/0x180 [ 413.255268][ T9572] ____sys_sendmsg+0x55c/0x870 [ 413.255292][ T9572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.255319][ T9572] ? import_iovec+0x73/0xa0 [ 413.255350][ T9572] ___sys_sendmsg+0x2a5/0x360 [ 413.255367][ T9572] ? __lock_acquire+0x6b5/0x2d10 [ 413.255394][ T9572] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.255448][ T9572] ? __fget_files+0x2a/0x420 [ 413.255473][ T9572] ? __fget_files+0x3a6/0x420 [ 413.255507][ T9572] __x64_sys_sendmsg+0x1c3/0x2a0 [ 413.255529][ T9572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.255558][ T9572] ? __pfx_ksys_write+0x10/0x10 [ 413.255594][ T9572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.255615][ T9572] do_syscall_64+0x174/0x580 [ 413.255633][ T9572] ? trace_irq_disable+0x3b/0x140 [ 413.255655][ T9572] ? clear_bhb_loop+0x40/0x90 [ 413.255677][ T9572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.255696][ T9572] RIP: 0033:0x7f837411ce59 [ 413.255716][ T9572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.255733][ T9572] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.255754][ T9572] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 413.255767][ T9572] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 413.255779][ T9572] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 413.255790][ T9572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.255801][ T9572] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 413.255831][ T9572] [ 414.541383][ T1010] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 414.823626][ T1010] usb 2-1: Using ep0 maxpacket: 16 [ 414.834229][ T1010] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 414.834260][ T1010] usb 2-1: config 0 has no interface number 0 [ 414.834305][ T1010] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 414.834333][ T1010] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 414.849513][ T1010] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 414.849549][ T1010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.849573][ T1010] usb 2-1: Product: syz [ 414.849590][ T1010] usb 2-1: Manufacturer: syz [ 414.849607][ T1010] usb 2-1: SerialNumber: syz [ 414.934633][ T1010] usb 2-1: config 0 descriptor?? [ 414.940988][ T9574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 414.941111][ T9574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 415.147108][ T9574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 415.147223][ T9574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 415.350279][ T1010] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 415.798728][ T9590] loop0: detected capacity change from 0 to 256 [ 416.462043][ T9595] loop2: detected capacity change from 0 to 1024 [ 416.882562][ T9574] loop1: detected capacity change from 0 to 2048 [ 417.181747][ T1010] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 417.181785][ T1010] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 417.182108][ T1010] asix 2-1:0.34: probe with driver asix failed with error -71 [ 417.260137][ T1010] usb 2-1: USB disconnect, device number 39 [ 417.363284][ T9603] loop4: detected capacity change from 0 to 4096 [ 417.364682][ T9603] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.460665][ T9603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.503425][ T9598] veth13: entered promiscuous mode [ 417.503454][ T9598] veth13: entered allmulticast mode [ 418.089336][ T9608] loop3: detected capacity change from 0 to 32768 [ 418.092479][ T9608] overlay: Unknown parameter 'obj_role' [ 418.709435][ T9622] FAULT_INJECTION: forcing a failure. [ 418.709435][ T9622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.709477][ T9622] CPU: 0 UID: 0 PID: 9622 Comm: syz.3.1182 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 418.709508][ T9622] Tainted: [L]=SOFTLOCKUP [ 418.709517][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.709531][ T9622] Call Trace: [ 418.709539][ T9622] [ 418.709549][ T9622] dump_stack_lvl+0xe8/0x150 [ 418.709587][ T9622] should_fail_ex+0x46b/0x600 [ 418.709623][ T9622] _copy_to_user+0x31/0xb0 [ 418.709660][ T9622] simple_read_from_buffer+0xe1/0x170 [ 418.709698][ T9622] proc_fail_nth_read+0x1be/0x230 [ 418.709732][ T9622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.709763][ T9622] ? rw_verify_area+0x2ac/0x4e0 [ 418.709797][ T9622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.709850][ T9622] vfs_read+0x212/0xa80 [ 418.709893][ T9622] ? __pfx_vfs_read+0x10/0x10 [ 418.709930][ T9622] ? do_sys_openat2+0x14e/0x200 [ 418.709957][ T9622] ? kmem_cache_free+0x187/0x6c0 [ 418.709989][ T9622] ? do_sys_openat2+0x14e/0x200 [ 418.710038][ T9622] ksys_read+0x156/0x270 [ 418.710076][ T9622] ? __pfx_ksys_read+0x10/0x10 [ 418.710119][ T9622] ? fdget+0x13f/0x1f0 [ 418.710155][ T9622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.710180][ T9622] do_syscall_64+0x174/0x580 [ 418.710203][ T9622] ? trace_irq_disable+0x3b/0x140 [ 418.710233][ T9622] ? clear_bhb_loop+0x40/0x90 [ 418.710262][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.710285][ T9622] RIP: 0033:0x7fa017d0d68e [ 418.710308][ T9622] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.710328][ T9622] RSP: 002b:00007fa015f9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.710352][ T9622] RAX: ffffffffffffffda RBX: 00007fa015f9e6c0 RCX: 00007fa017d0d68e [ 418.710369][ T9622] RDX: 000000000000000f RSI: 00007fa015f9e0a0 RDI: 0000000000000004 [ 418.710384][ T9622] RBP: 00007fa015f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 418.710398][ T9622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.710412][ T9622] R13: 00007fa017fc6038 R14: 00007fa017fc5fa0 R15: 00007fff84d12048 [ 418.710448][ T9622] [ 419.363327][ T9629] loop1: detected capacity change from 0 to 64 [ 419.378048][ T9611] loop2: detected capacity change from 0 to 128 [ 419.424732][ T9631] loop3: detected capacity change from 0 to 1024 [ 419.446863][ T9611] /dev/loop2: Can't open blockdev [ 419.504233][ T9629] hfs: unable to locate alternate MDB [ 419.504252][ T9629] hfs: continuing without an alternate MDB [ 419.634022][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.901009][ T9639] netlink: 'syz.2.1190': attribute type 39 has an invalid length. [ 420.162090][ T9647] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 421.186415][ T9641] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1191'. [ 421.907017][ T9675] FAULT_INJECTION: forcing a failure. [ 421.907017][ T9675] name failslab, interval 1, probability 0, space 0, times 0 [ 421.907061][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.0.1200 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 421.907103][ T9675] Tainted: [L]=SOFTLOCKUP [ 421.907112][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.907126][ T9675] Call Trace: [ 421.907135][ T9675] [ 421.907145][ T9675] dump_stack_lvl+0xe8/0x150 [ 421.907183][ T9675] should_fail_ex+0x46b/0x600 [ 421.907219][ T9675] should_failslab+0xa8/0x100 [ 421.907254][ T9675] __kmalloc_cache_noprof+0x84/0x690 [ 421.907287][ T9675] ? unix_prepare_fpl+0xf3/0x580 [ 421.907327][ T9675] unix_prepare_fpl+0xf3/0x580 [ 421.907370][ T9675] unix_scm_to_skb+0x293/0x3f0 [ 421.907406][ T9675] unix_stream_sendmsg+0x4f0/0xe80 [ 421.907457][ T9675] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 421.907484][ T9675] ? hook_socket_sendmsg+0x170/0x340 [ 421.907528][ T9675] ? aa_sock_msg_perm+0x107/0x200 [ 421.907561][ T9675] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 421.907588][ T9675] sock_sendmsg_nosec+0x13a/0x180 [ 421.907628][ T9675] ____sys_sendmsg+0x55c/0x870 [ 421.907659][ T9675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.907695][ T9675] ? import_iovec+0x73/0xa0 [ 421.907734][ T9675] ___sys_sendmsg+0x2a5/0x360 [ 421.907757][ T9675] ? __lock_acquire+0x6b5/0x2d10 [ 421.907793][ T9675] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.907855][ T9675] ? __fget_files+0x2a/0x420 [ 421.907885][ T9675] ? __fget_files+0x3a6/0x420 [ 421.907926][ T9675] __x64_sys_sendmsg+0x1c3/0x2a0 [ 421.907954][ T9675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.907991][ T9675] ? __pfx_ksys_write+0x10/0x10 [ 421.908035][ T9675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.908060][ T9675] do_syscall_64+0x174/0x580 [ 421.908111][ T9675] ? trace_irq_disable+0x3b/0x140 [ 421.908139][ T9675] ? clear_bhb_loop+0x40/0x90 [ 421.908167][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.908191][ T9675] RIP: 0033:0x7f837411ce59 [ 421.908214][ T9675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.908233][ T9675] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.908259][ T9675] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 421.908276][ T9675] RDX: 0000000004040090 RSI: 00002000000004c0 RDI: 0000000000000003 [ 421.908292][ T9675] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 421.908306][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.908320][ T9675] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 421.908355][ T9675] [ 422.829997][ T9688] loop2: detected capacity change from 0 to 8 [ 422.852459][ T9688] SQUASHFS error: Unknown LZ4 version [ 422.852505][ T9688] squashfs image failed sanity check [ 423.250983][ T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 423.326545][ T9699] loop1: detected capacity change from 0 to 64 [ 423.388182][ T9699] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 423.458597][ T43] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 423.458631][ T43] usb 5-1: config 1 has no interface number 0 [ 423.458682][ T43] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 423.458711][ T43] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 423.458741][ T43] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.461561][ T43] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 423.461590][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.461611][ T43] usb 5-1: Product: syz [ 423.461626][ T43] usb 5-1: Manufacturer: syz [ 423.461639][ T43] usb 5-1: SerialNumber: syz [ 423.541546][ T9703] loop0: detected capacity change from 0 to 128 [ 423.575977][ T43] usb 5-1: can't set config #1, error -71 [ 423.589648][ T9703] FAULT_INJECTION: forcing a failure. [ 423.589648][ T9703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.597114][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.0.1212 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 423.597148][ T9703] Tainted: [L]=SOFTLOCKUP [ 423.597156][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 423.597168][ T9703] Call Trace: [ 423.597176][ T9703] [ 423.597185][ T9703] dump_stack_lvl+0xe8/0x150 [ 423.597219][ T9703] should_fail_ex+0x46b/0x600 [ 423.597251][ T9703] strncpy_from_user+0x36/0x2b0 [ 423.597278][ T9703] do_getname+0x77/0x250 [ 423.597302][ T9703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.597324][ T9703] __se_sys_rename+0x3a/0x2c0 [ 423.597349][ T9703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.597370][ T9703] do_syscall_64+0x174/0x580 [ 423.597391][ T9703] ? trace_irq_disable+0x3b/0x140 [ 423.597416][ T9703] ? clear_bhb_loop+0x40/0x90 [ 423.597440][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.597460][ T9703] RIP: 0033:0x7f837411ce59 [ 423.597481][ T9703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.597498][ T9703] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 423.597521][ T9703] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 423.597536][ T9703] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 423.597550][ T9703] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 423.597563][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.597581][ T9703] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 423.597613][ T9703] [ 423.782178][ T43] usb 5-1: USB disconnect, device number 29 [ 425.291884][ T9706] veth15: entered promiscuous mode [ 425.291914][ T9706] veth15: entered allmulticast mode [ 426.689617][ T9714] loop4: detected capacity change from 0 to 32768 [ 427.045018][ T9718] loop2: detected capacity change from 0 to 32768 [ 427.385153][ T9718] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 427.896333][ T9718] XFS (loop2): Ending clean mount [ 428.114471][ T5725] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 428.297650][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 428.364453][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 428.367399][ T5725] usb 4-1: config index 0 descriptor too short (expected 57, got 27) [ 428.367430][ T5725] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 428.410347][ T5626] block nbd0: Receive control failed (result -32) [ 428.482385][ T5725] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 428.482420][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.482441][ T5725] usb 4-1: Product: syz [ 428.482457][ T5725] usb 4-1: Manufacturer: syz [ 428.482471][ T5725] usb 4-1: SerialNumber: syz [ 428.611685][ T9767] loop4: detected capacity change from 0 to 64 [ 428.615807][ T9767] hfs: unable to locate alternate MDB [ 428.615822][ T9767] hfs: continuing without an alternate MDB [ 428.803949][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.813900][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.819602][ T1010] usb 4-1: USB disconnect, device number 20 [ 428.821972][ T5617] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 429.022815][ T5725] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 429.924726][ T1010] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 430.094443][ T1010] usb 5-1: Using ep0 maxpacket: 16 [ 430.097591][ T1010] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.097650][ T1010] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 430.097680][ T1010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.108022][ T1010] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 430.108058][ T1010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.108082][ T1010] usb 5-1: Product: syz [ 430.108098][ T1010] usb 5-1: Manufacturer: syz [ 430.108114][ T1010] usb 5-1: SerialNumber: syz [ 430.237152][ T1010] usb 5-1: config 0 descriptor?? [ 430.353259][ T1010] appledisplay 5-1:0.0: Could not find int-in endpoint [ 430.379695][ T1010] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 430.506042][ T9780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.508258][ T9780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.551859][ T43] usb 5-1: USB disconnect, device number 30 [ 430.777001][ T5802] udevd[5802]: setting mode of /dev/bus/usb/005/030 to 020664 failed: No such file or directory [ 430.777164][ T5802] udevd[5802]: setting owner of /dev/bus/usb/005/030 to uid=0, gid=0 failed: No such file or directory [ 430.915086][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 430.915107][ T37] audit: type=1326 audit(1780132863.720:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837411ce59 code=0x7ffc0000 [ 430.915836][ T37] audit: type=1326 audit(1780132863.720:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837411ce59 code=0x7ffc0000 [ 430.916383][ T37] audit: type=1326 audit(1780132863.720:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f837411ce59 code=0x7ffc0000 [ 430.916437][ T37] audit: type=1326 audit(1780132863.720:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837411ce59 code=0x7ffc0000 [ 430.919224][ T37] audit: type=1326 audit(1780132863.720:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837411ce59 code=0x7ffc0000 [ 430.920169][ T37] audit: type=1326 audit(1780132863.720:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837411ce59 code=0x7ffc0000 [ 430.920218][ T37] audit: type=1326 audit(1780132863.720:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837411ce59 code=0x7ffc0000 [ 430.922452][ T37] audit: type=1326 audit(1780132863.720:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837411ce59 code=0x7ffc0000 [ 430.922498][ T37] audit: type=1326 audit(1780132863.720:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83740dd68e code=0x7ffc0000 [ 430.957849][ T37] audit: type=1326 audit(1780132863.770:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.0.1245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f83740dd68e code=0x7ffc0000 [ 430.957864][ T9798] FAULT_INJECTION: forcing a failure. [ 430.957864][ T9798] name failslab, interval 1, probability 0, space 0, times 0 [ 430.957904][ T9798] CPU: 1 UID: 0 PID: 9798 Comm: syz.0.1245 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.957940][ T9798] Tainted: [L]=SOFTLOCKUP [ 430.957948][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 430.957967][ T9798] Call Trace: [ 430.957976][ T9798] [ 430.957984][ T9798] dump_stack_lvl+0xe8/0x150 [ 430.958022][ T9798] should_fail_ex+0x46b/0x600 [ 430.958053][ T9798] should_failslab+0xa8/0x100 [ 430.958083][ T9798] kmem_cache_alloc_noprof+0x87/0x680 [ 430.958112][ T9798] ? audit_log_start+0x367/0xa40 [ 430.958149][ T9798] audit_log_start+0x367/0xa40 [ 430.958185][ T9798] ? __pfx_audit_log_start+0x10/0x10 [ 430.958212][ T9798] ? __lock_acquire+0x6b5/0x2d10 [ 430.958242][ T9798] ? get_pid_task+0x20/0x1f0 [ 430.958264][ T9798] ? get_pid_task+0x20/0x1f0 [ 430.958296][ T9798] audit_seccomp+0x63/0x190 [ 430.958329][ T9798] __seccomp_filter+0xd48/0x1ef0 [ 430.958368][ T9798] ? __pfx___seccomp_filter+0x10/0x10 [ 430.958395][ T9798] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.958415][ T9798] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.958446][ T9798] ? rt_mutex_slowunlock+0x1cb/0x300 [ 430.958471][ T9798] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 430.958505][ T9798] ? fput+0xa0/0xd0 [ 430.958535][ T9798] ? __pfx_ksys_write+0x10/0x10 [ 430.958569][ T9798] ? __secure_computing+0xe1/0x2a0 [ 430.958602][ T9798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.958625][ T9798] do_syscall_64+0x10e/0x580 [ 430.958644][ T9798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.958665][ T9798] ? clear_bhb_loop+0x40/0x90 [ 430.958690][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.958710][ T9798] RIP: 0033:0x7f837411ce59 [ 430.958728][ T9798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.958745][ T9798] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000034 [ 430.958767][ T9798] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 430.958782][ T9798] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 430.958795][ T9798] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 430.958807][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.958820][ T9798] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 430.958851][ T9798] [ 431.972706][ T5725] usb 2-1: unable to get BOS descriptor or descriptor too short [ 431.987564][ T5725] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 431.987608][ T5725] usb 2-1: can't read configurations, error -71 [ 432.238637][ T9811] FAULT_INJECTION: forcing a failure. [ 432.238637][ T9811] name fail_futex, interval 1, probability 0, space 0, times 1 [ 432.238678][ T9811] CPU: 1 UID: 0 PID: 9811 Comm: syz.0.1251 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 432.238710][ T9811] Tainted: [L]=SOFTLOCKUP [ 432.238717][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.238739][ T9811] Call Trace: [ 432.238749][ T9811] [ 432.238759][ T9811] dump_stack_lvl+0xe8/0x150 [ 432.238798][ T9811] should_fail_ex+0x46b/0x600 [ 432.238834][ T9811] get_futex_key+0x1b0/0x1590 [ 432.238879][ T9811] ? __pfx_get_futex_key+0x10/0x10 [ 432.238909][ T9811] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 432.238940][ T9811] ? hrtimer_setup_sleeper_on_stack+0xdc/0x130 [ 432.238966][ T9811] ? ktime_add_safe+0x38/0x70 [ 432.239004][ T9811] futex_lock_pi+0x25c/0xb10 [ 432.239042][ T9811] ? __pfx_futex_lock_pi+0x10/0x10 [ 432.239075][ T9811] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 432.239101][ T9811] ? __lock_acquire+0x6b5/0x2d10 [ 432.239146][ T9811] ? get_pid_task+0x20/0x1f0 [ 432.239173][ T9811] ? get_pid_task+0x20/0x1f0 [ 432.239204][ T9811] ? __pfx_futex_wake_mark+0x10/0x10 [ 432.239256][ T9811] do_futex+0x292/0x420 [ 432.239296][ T9811] ? __pfx_do_futex+0x10/0x10 [ 432.239325][ T9811] ? rt_mutex_slowunlock+0x1cb/0x300 [ 432.239354][ T9811] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 432.239389][ T9811] __se_sys_futex+0x3a8/0x450 [ 432.239429][ T9811] ? __pfx___se_sys_futex+0x10/0x10 [ 432.239463][ T9811] ? __pfx_ksys_write+0x10/0x10 [ 432.239501][ T9811] ? __x64_sys_futex+0x21/0xf0 [ 432.239536][ T9811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.239560][ T9811] do_syscall_64+0x174/0x580 [ 432.239581][ T9811] ? trace_irq_disable+0x3b/0x140 [ 432.239608][ T9811] ? clear_bhb_loop+0x40/0x90 [ 432.239636][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.239658][ T9811] RIP: 0033:0x7f837411ce59 [ 432.239680][ T9811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.239699][ T9811] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 432.239760][ T9811] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 432.239777][ T9811] RDX: 0000000000000001 RSI: 0000000000000086 RDI: 0000200000000240 [ 432.239792][ T9811] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000080001 [ 432.239806][ T9811] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 432.239820][ T9811] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 432.239855][ T9811] [ 432.304289][ T1010] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 432.486877][ T1010] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 432.486915][ T1010] usb 3-1: config 0 has no interface number 0 [ 432.486984][ T1010] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 432.487013][ T1010] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.554232][ T1010] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 432.554271][ T1010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.554295][ T1010] usb 3-1: Product: syz [ 432.554315][ T1010] usb 3-1: Manufacturer: syz [ 432.554331][ T1010] usb 3-1: SerialNumber: syz [ 432.587122][ T9819] FAULT_INJECTION: forcing a failure. [ 432.587122][ T9819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.587161][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.1.1254 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 432.587190][ T9819] Tainted: [L]=SOFTLOCKUP [ 432.587199][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.587211][ T9819] Call Trace: [ 432.587219][ T9819] [ 432.587227][ T9819] dump_stack_lvl+0xe8/0x150 [ 432.587259][ T9819] should_fail_ex+0x46b/0x600 [ 432.587289][ T9819] strncpy_from_user+0x36/0x2b0 [ 432.587316][ T9819] getname_long+0x88/0x130 [ 432.587344][ T9819] do_getname+0x181/0x250 [ 432.587371][ T9819] __x64_sys_newstat+0x107/0x1e0 [ 432.587396][ T9819] ? __pfx___x64_sys_newstat+0x10/0x10 [ 432.587438][ T9819] ? __pfx_ksys_write+0x10/0x10 [ 432.587476][ T9819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.587498][ T9819] do_syscall_64+0x174/0x580 [ 432.587518][ T9819] ? trace_irq_disable+0x3b/0x140 [ 432.587542][ T9819] ? clear_bhb_loop+0x40/0x90 [ 432.587566][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.587586][ T9819] RIP: 0033:0x7fd2dbccce59 [ 432.587605][ T9819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.587622][ T9819] RSP: 002b:00007fd2d9f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 432.587645][ T9819] RAX: ffffffffffffffda RBX: 00007fd2dbf45fa0 RCX: 00007fd2dbccce59 [ 432.587660][ T9819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000005c0 [ 432.587672][ T9819] RBP: 00007fd2d9f26090 R08: 0000000000000000 R09: 0000000000000000 [ 432.587686][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.587697][ T9819] R13: 00007fd2dbf46038 R14: 00007fd2dbf45fa0 R15: 00007ffd533ddde8 [ 432.587728][ T9819] [ 432.805069][ T1010] usb 3-1: config 0 descriptor?? [ 432.824563][ T9809] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 432.859326][ T1010] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 432.916779][ T1010] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 433.735115][ T9818] loop4: detected capacity change from 0 to 4096 [ 433.943187][ T9813] loop3: detected capacity change from 0 to 4096 [ 433.963765][ T9813] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 434.441108][ T9818] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 434.629554][ T9818] ntfs3(loop4): Failed to load $Extend (-22). [ 434.629588][ T9818] ntfs3(loop4): Failed to initialize $Extend. [ 434.802984][ T9813] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 435.114405][ T5725] usb 3-1: USB disconnect, device number 23 [ 435.175559][ T5725] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 435.176577][ T5725] cyberjack 3-1:0.69: device disconnected [ 435.717453][ T9853] FAULT_INJECTION: forcing a failure. [ 435.717453][ T9853] name failslab, interval 1, probability 0, space 0, times 0 [ 435.717496][ T9853] CPU: 0 UID: 0 PID: 9853 Comm: syz.2.1268 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 435.717529][ T9853] Tainted: [L]=SOFTLOCKUP [ 435.717537][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 435.717550][ T9853] Call Trace: [ 435.717559][ T9853] [ 435.717570][ T9853] dump_stack_lvl+0xe8/0x150 [ 435.717606][ T9853] should_fail_ex+0x46b/0x600 [ 435.717641][ T9853] should_failslab+0xa8/0x100 [ 435.717675][ T9853] kmem_cache_alloc_noprof+0x87/0x680 [ 435.717700][ T9853] ? audit_log_start+0x367/0xa40 [ 435.717735][ T9853] audit_log_start+0x367/0xa40 [ 435.717775][ T9853] ? __pfx_audit_log_start+0x10/0x10 [ 435.717806][ T9853] ? __lock_acquire+0x6b5/0x2d10 [ 435.717846][ T9853] ? get_pid_task+0x20/0x1f0 [ 435.717872][ T9853] ? get_pid_task+0x20/0x1f0 [ 435.717911][ T9853] audit_seccomp+0x63/0x190 [ 435.717958][ T9853] __seccomp_filter+0xd48/0x1ef0 [ 435.718005][ T9853] ? __pfx___seccomp_filter+0x10/0x10 [ 435.718036][ T9853] ? lockdep_hardirqs_on+0x7a/0x110 [ 435.718060][ T9853] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 435.718096][ T9853] ? rt_mutex_slowunlock+0x1cb/0x300 [ 435.718125][ T9853] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 435.718167][ T9853] ? fput+0xa0/0xd0 [ 435.718202][ T9853] ? __pfx_ksys_write+0x10/0x10 [ 435.718244][ T9853] ? __secure_computing+0xe1/0x2a0 [ 435.718277][ T9853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.718303][ T9853] do_syscall_64+0x10e/0x580 [ 435.718326][ T9853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.718350][ T9853] ? clear_bhb_loop+0x40/0x90 [ 435.718379][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.718402][ T9853] RIP: 0033:0x7fecd5a7ce59 [ 435.718424][ T9853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.718446][ T9853] RSP: 002b:00007fecd3cd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 435.718472][ T9853] RAX: ffffffffffffffda RBX: 00007fecd5cf5fa0 RCX: 00007fecd5a7ce59 [ 435.718491][ T9853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 435.718507][ T9853] RBP: 00007fecd3cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.718523][ T9853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.718537][ T9853] R13: 00007fecd5cf6038 R14: 00007fecd5cf5fa0 R15: 00007ffc5cd95be8 [ 435.718574][ T9853] [ 436.060936][ T9857] loop2: detected capacity change from 0 to 2048 [ 436.150832][ T9857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.190254][ T9861] loop0: detected capacity change from 0 to 1024 [ 436.223018][ T9857] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 436.266874][ T5749] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 436.417125][ T9861] loop0: detected capacity change from 0 to 256 [ 436.418379][ T9861] vfat: Bad value for 'uid' [ 436.418397][ T9861] vfat: Bad value for 'uid' [ 436.423160][ T5749] usb 2-1: config 0 has an invalid interface number: 37 but max is 1 [ 436.423191][ T5749] usb 2-1: config 0 has an invalid interface number: 255 but max is 1 [ 436.423214][ T5749] usb 2-1: config 0 has no interface number 0 [ 436.423232][ T5749] usb 2-1: config 0 has no interface number 1 [ 436.423299][ T5749] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 436.423516][ T5749] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 436.423550][ T5749] usb 2-1: config 0 interface 255 has no altsetting 0 [ 436.425972][ T5749] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 436.425999][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.426019][ T5749] usb 2-1: Product: syz [ 436.426033][ T5749] usb 2-1: Manufacturer: syz [ 436.426047][ T5749] usb 2-1: SerialNumber: syz [ 436.496490][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.558376][ T5749] usb 2-1: config 0 descriptor?? [ 436.576811][ T8060] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 436.590741][ T5749] usb 2-1: selecting invalid altsetting 0 [ 436.590765][ T5749] usb 2-1: Could not set interface, error -22 [ 436.663103][ T9866] loop3: detected capacity change from 0 to 2048 [ 436.757724][ T9866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.785300][ T9856] netlink: 'syz.1.1267': attribute type 1 has an invalid length. [ 436.865878][ T9866] netlink: 'syz.3.1272': attribute type 49 has an invalid length. [ 437.068581][ T9868] loop2: detected capacity change from 0 to 256 [ 437.069910][ T9868] exfat: Deprecated parameter 'utf8' [ 437.071635][ T9868] exfat: Deprecated parameter 'namecase' [ 437.071713][ T9868] exfat: Deprecated parameter 'namecase' [ 437.146060][ T9868] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 437.170961][ T5725] usb 2-1: USB disconnect, device number 42 [ 437.412763][ T9879] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.546912][ T9868] FAULT_INJECTION: forcing a failure. [ 437.546912][ T9868] name failslab, interval 1, probability 0, space 0, times 0 [ 437.546956][ T9868] CPU: 0 UID: 0 PID: 9868 Comm: syz.2.1273 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 437.546990][ T9868] Tainted: [L]=SOFTLOCKUP [ 437.546998][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.547011][ T9868] Call Trace: [ 437.547021][ T9868] [ 437.547031][ T9868] dump_stack_lvl+0xe8/0x150 [ 437.547068][ T9868] should_fail_ex+0x46b/0x600 [ 437.547104][ T9868] should_failslab+0xa8/0x100 [ 437.547138][ T9868] __kmalloc_noprof+0xdf/0x7b0 [ 437.547166][ T9868] ? kfree+0x4d/0x6c0 [ 437.547191][ T9868] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 437.547230][ T9868] tomoyo_realpath_from_path+0xe3/0x5d0 [ 437.547264][ T9868] ? tomoyo_domain+0xd7/0x130 [ 437.547302][ T9868] ? tomoyo_path_number_perm+0x219/0x630 [ 437.547329][ T9868] tomoyo_path_number_perm+0x246/0x630 [ 437.547359][ T9868] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 437.547406][ T9868] ? rt_spin_lock+0x1e0/0x400 [ 437.547456][ T9868] ? __pfx_current_check_access_path+0x10/0x10 [ 437.547486][ T9868] ? d_alloc+0x144/0x190 [ 437.547520][ T9868] ? lookup_one_qstr_excl+0x1d4/0x360 [ 437.547557][ T9868] tomoyo_path_mkdir+0xb0/0xf0 [ 437.547590][ T9868] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 437.547627][ T9868] ? __pfx_filename_create+0x10/0x10 [ 437.547675][ T9868] security_path_mkdir+0x169/0x350 [ 437.547709][ T9868] filename_mkdirat+0x204/0x520 [ 437.547741][ T9868] ? __pfx_filename_mkdirat+0x10/0x10 [ 437.547778][ T9868] ? do_getname+0x151/0x250 [ 437.547803][ T9868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.547828][ T9868] __se_sys_mkdirat+0x35/0x150 [ 437.547852][ T9868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.547875][ T9868] do_syscall_64+0x174/0x580 [ 437.547898][ T9868] ? trace_irq_disable+0x3b/0x140 [ 437.547927][ T9868] ? clear_bhb_loop+0x40/0x90 [ 437.547956][ T9868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.547978][ T9868] RIP: 0033:0x7fecd5a7bcc7 [ 437.548000][ T9868] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.548021][ T9868] RSP: 002b:00007fecd3cd5e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 437.548047][ T9868] RAX: ffffffffffffffda RBX: 00007fecd3cd5ee0 RCX: 00007fecd5a7bcc7 [ 437.548064][ T9868] RDX: 00000000000001ff RSI: 0000200000000780 RDI: 00000000ffffff9c [ 437.548079][ T9868] RBP: 0000200000000100 R08: 0000200000000480 R09: 0000000000000000 [ 437.548094][ T9868] R10: 0000200000000100 R11: 0000000000000246 R12: 0000200000000780 [ 437.548109][ T9868] R13: 00007fecd3cd5ea0 R14: 0000000000000000 R15: 0000000000000000 [ 437.548145][ T9868] [ 437.565017][ T9868] ERROR: Out of memory at tomoyo_realpath_from_path. [ 438.326287][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1280'. [ 438.326839][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 438.951887][ T9876] loop4: detected capacity change from 0 to 32768 [ 439.303516][ T5749] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 439.651177][ T9884] loop1: detected capacity change from 0 to 131072 [ 439.671704][ T9884] F2FS-fs (loop1): invalid crc value [ 439.672091][ T5749] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 439.672288][ T5749] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 439.745083][ T5749] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 439.745118][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.745142][ T5749] usb 5-1: Product: syz [ 439.745157][ T5749] usb 5-1: Manufacturer: syz [ 439.745172][ T5749] usb 5-1: SerialNumber: syz [ 439.801027][ T5749] usb 5-1: config 0 descriptor?? [ 439.842136][ T5749] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 439.849388][ T9884] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 439.888120][ T9884] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 440.009544][ T37] kauditd_printk_skb: 71 callbacks suppressed [ 440.009672][ T37] audit: type=1800 audit(1780132872.811:2011): pid=9876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1275" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 440.140844][ T9903] loop2: detected capacity change from 0 to 1024 [ 440.366710][ T5749] gspca_sunplus: reg_r err -110 [ 440.366809][ T5749] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 440.406885][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.518894][ T9903] FAULT_INJECTION: forcing a failure. [ 440.518894][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 440.518943][ T9903] CPU: 1 UID: 0 PID: 9903 Comm: syz.2.1283 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 440.518968][ T9903] Tainted: [L]=SOFTLOCKUP [ 440.518975][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.518986][ T9903] Call Trace: [ 440.518993][ T9903] [ 440.519001][ T9903] dump_stack_lvl+0xe8/0x150 [ 440.519038][ T9903] should_fail_ex+0x46b/0x600 [ 440.519066][ T9903] should_failslab+0xa8/0x100 [ 440.519093][ T9903] kmem_cache_alloc_noprof+0x87/0x680 [ 440.519116][ T9903] ? lockdep_hardirqs_on+0x7a/0x110 [ 440.519133][ T9903] ? do_getname+0x2e/0x250 [ 440.519158][ T9903] do_getname+0x2e/0x250 [ 440.519177][ T9903] ? getname_flags+0x11/0x20 [ 440.519201][ T9903] do_sys_openat2+0xcc/0x200 [ 440.519228][ T9903] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.519250][ T9903] ? ksys_write+0x248/0x270 [ 440.519279][ T9903] ? __pfx_ksys_write+0x10/0x10 [ 440.519310][ T9903] __x64_sys_openat+0x138/0x170 [ 440.519336][ T9903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.519355][ T9903] do_syscall_64+0x174/0x580 [ 440.519371][ T9903] ? trace_irq_disable+0x3b/0x140 [ 440.519393][ T9903] ? clear_bhb_loop+0x40/0x90 [ 440.519418][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.519439][ T9903] RIP: 0033:0x7fecd5a7ce59 [ 440.519458][ T9903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.519474][ T9903] RSP: 002b:00007fecd3cd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 440.519494][ T9903] RAX: ffffffffffffffda RBX: 00007fecd5cf5fa0 RCX: 00007fecd5a7ce59 [ 440.519507][ T9903] RDX: 0000000000000000 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 440.519519][ T9903] RBP: 00007fecd3cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 440.519531][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.519541][ T9903] R13: 00007fecd5cf6038 R14: 00007fecd5cf5fa0 R15: 00007ffc5cd95be8 [ 440.519571][ T9903] [ 441.071741][ T9913] loop3: detected capacity change from 0 to 512 [ 441.079620][ T9913] EXT4-fs: Ignoring removed nobh option [ 441.247459][ T9913] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 441.247540][ T9913] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 441.247683][ T9913] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.1287: inode has both inline data and extents flags [ 441.247711][ T9913] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 441.262592][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 441.262632][ C0] EXT4-fs (loop3): initial error at time 1780132874: ext4_orphan_get:1397: inode 13 [ 441.262668][ C0] EXT4-fs (loop3): last error at time 1780132874: ext4_orphan_get:1397: inode 13 [ 441.335799][ T9913] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1287: couldn't read orphan inode 13 (err -117) [ 441.335840][ T9913] loop3: lost filesystem error report for type 5 error -117 [ 441.347661][ T9913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.359698][ T9913] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 441.365955][ T37] audit: type=1800 audit(1780132874.101:2012): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1275" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 441.385450][ T9913] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 441.389554][ T5725] usb 5-1: USB disconnect, device number 31 [ 441.523738][ T43] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 441.677152][ T43] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 441.677348][ T43] usb 3-1: config 0 has an invalid interface number: 255 but max is 1 [ 441.677373][ T43] usb 3-1: config 0 has no interface number 0 [ 441.677392][ T43] usb 3-1: config 0 has no interface number 1 [ 441.677442][ T43] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 441.677486][ T43] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 441.677517][ T43] usb 3-1: config 0 interface 255 has no altsetting 0 [ 441.687764][ T43] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 441.687795][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.687815][ T43] usb 3-1: Product: syz [ 441.687830][ T43] usb 3-1: Manufacturer: syz [ 441.687845][ T43] usb 3-1: SerialNumber: syz [ 441.782510][ T43] usb 3-1: config 0 descriptor?? [ 441.865345][ T43] usb 3-1: selecting invalid altsetting 0 [ 441.865375][ T43] usb 3-1: Could not set interface, error -22 [ 441.885102][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.993738][ T9918] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 442.268382][ T1010] usb 3-1: USB disconnect, device number 24 [ 442.523214][ T9935] loop3: detected capacity change from 0 to 2048 [ 442.539827][ T9935] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 442.539864][ T9935] NILFS (loop3): mounting unchecked fs [ 442.539879][ T9935] NILFS (loop3): recovery required for readonly filesystem [ 442.539894][ T9935] NILFS (loop3): write access will be enabled during recovery [ 442.731357][ T5802] udevd[5802]: incorrect nilfs2 checksum on /dev/loop3 [ 442.797317][ T9935] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 443.084411][ T9945] FAULT_INJECTION: forcing a failure. [ 443.084411][ T9945] name failslab, interval 1, probability 0, space 0, times 0 [ 443.084452][ T9945] CPU: 0 UID: 0 PID: 9945 Comm: syz.0.1301 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.084483][ T9945] Tainted: [L]=SOFTLOCKUP [ 443.084492][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.084505][ T9945] Call Trace: [ 443.084514][ T9945] [ 443.084524][ T9945] dump_stack_lvl+0xe8/0x150 [ 443.084560][ T9945] should_fail_ex+0x46b/0x600 [ 443.084594][ T9945] should_failslab+0xa8/0x100 [ 443.084629][ T9945] __kmalloc_noprof+0xdf/0x7b0 [ 443.084658][ T9945] ? bpf_test_init+0x9f/0x150 [ 443.084686][ T9945] bpf_test_init+0x9f/0x150 [ 443.084712][ T9945] bpf_prog_test_run_skb+0x392/0x2260 [ 443.084758][ T9945] ? __fget_files+0x3a6/0x420 [ 443.084786][ T9945] ? __fget_files+0x2a/0x420 [ 443.084819][ T9945] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 443.084843][ T9945] bpf_prog_test_run+0x2cd/0x340 [ 443.084878][ T9945] __sys_bpf+0xa20/0xd90 [ 443.084924][ T9945] ? __pfx___sys_bpf+0x10/0x10 [ 443.084961][ T9945] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.084982][ T9945] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.085038][ T9945] ? ksys_write+0x248/0x270 [ 443.085073][ T9945] ? __pfx_ksys_write+0x10/0x10 [ 443.085112][ T9945] __x64_sys_bpf+0xba/0xd0 [ 443.085137][ T9945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.085167][ T9945] do_syscall_64+0x174/0x580 [ 443.085188][ T9945] ? trace_irq_disable+0x3b/0x140 [ 443.085215][ T9945] ? clear_bhb_loop+0x40/0x90 [ 443.085242][ T9945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.085264][ T9945] RIP: 0033:0x7f837411ce59 [ 443.085284][ T9945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.085303][ T9945] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.085327][ T9945] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 443.085343][ T9945] RDX: 000000000000003d RSI: 0000200000002c00 RDI: 000000000000000a [ 443.085357][ T9945] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 443.085372][ T9945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.085384][ T9945] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 443.085419][ T9945] [ 443.624977][ T9950] FAULT_INJECTION: forcing a failure. [ 443.624977][ T9950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.625020][ T9950] CPU: 0 UID: 0 PID: 9950 Comm: syz.0.1303 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.625053][ T9950] Tainted: [L]=SOFTLOCKUP [ 443.625061][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.625075][ T9950] Call Trace: [ 443.625084][ T9950] [ 443.625094][ T9950] dump_stack_lvl+0xe8/0x150 [ 443.625131][ T9950] should_fail_ex+0x46b/0x600 [ 443.625167][ T9950] _copy_from_user+0x2d/0xb0 [ 443.625203][ T9950] video_usercopy+0x36f/0x1450 [ 443.625245][ T9950] ? __pfx___video_do_ioctl+0x10/0x10 [ 443.625281][ T9950] ? __pfx_video_usercopy+0x10/0x10 [ 443.625326][ T9950] ? __fget_files+0x2a/0x420 [ 443.625360][ T9950] ? __fget_files+0x2a/0x420 [ 443.625389][ T9950] ? __fget_files+0x3a6/0x420 [ 443.625422][ T9950] v4l2_ioctl+0x190/0x1e0 [ 443.625455][ T9950] ? __pfx_v4l2_ioctl+0x10/0x10 [ 443.625486][ T9950] __se_sys_ioctl+0xff/0x170 [ 443.625509][ T9950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.625536][ T9950] do_syscall_64+0x174/0x580 [ 443.625558][ T9950] ? trace_irq_disable+0x3b/0x140 [ 443.625594][ T9950] ? clear_bhb_loop+0x40/0x90 [ 443.625622][ T9950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.625645][ T9950] RIP: 0033:0x7f837411ce59 [ 443.625667][ T9950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.625687][ T9950] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.625712][ T9950] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 443.625729][ T9950] RDX: 0000200000000200 RSI: 00000000c0405602 RDI: 0000000000000003 [ 443.625745][ T9950] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 443.625760][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.625774][ T9950] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 443.625811][ T9950] [ 444.307515][ T9943] loop4: detected capacity change from 0 to 131072 [ 444.315098][ T9943] F2FS-fs (loop4): invalid crc value [ 444.436321][ T9961] loop1: detected capacity change from 0 to 256 [ 444.551263][ T9943] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 444.590036][ T9943] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 445.166385][ T9970] loop3: detected capacity change from 0 to 4096 [ 445.182433][ T9970] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 445.428184][ T9954] loop2: detected capacity change from 0 to 32768 [ 445.576269][ T9970] FAULT_INJECTION: forcing a failure. [ 445.576269][ T9970] name failslab, interval 1, probability 0, space 0, times 0 [ 445.576312][ T9970] CPU: 1 UID: 0 PID: 9970 Comm: syz.3.1308 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.576344][ T9970] Tainted: [L]=SOFTLOCKUP [ 445.576352][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 445.576366][ T9970] Call Trace: [ 445.576375][ T9970] [ 445.576384][ T9970] dump_stack_lvl+0xe8/0x150 [ 445.576422][ T9970] should_fail_ex+0x46b/0x600 [ 445.576464][ T9970] should_failslab+0xa8/0x100 [ 445.576499][ T9970] __kmalloc_cache_noprof+0x84/0x690 [ 445.576532][ T9970] ? dir_search_u+0x113/0x2e0 [ 445.576572][ T9970] dir_search_u+0x113/0x2e0 [ 445.576607][ T9970] ? __pfx_dir_search_u+0x10/0x10 [ 445.576639][ T9970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 445.576676][ T9970] ? lockdep_hardirqs_on+0x7a/0x110 [ 445.576700][ T9970] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 445.576736][ T9970] ? mutex_lock_nested+0x152/0x1d0 [ 445.576762][ T9970] ? ntfs_lookup+0xf3/0x1d0 [ 445.576796][ T9970] ntfs_lookup+0x100/0x1d0 [ 445.576834][ T9970] __lookup_slow+0x2d2/0x440 [ 445.576869][ T9970] ? __pfx___lookup_slow+0x10/0x10 [ 445.576916][ T9970] ? down_read+0x156/0x200 [ 445.576938][ T9970] ? __pfx_down_read+0x10/0x10 [ 445.576965][ T9970] ? lookup_fast+0x1a3/0x5b0 [ 445.577002][ T9970] lookup_slow+0x53/0x70 [ 445.577032][ T9970] link_path_walk+0xd1e/0x18d0 [ 445.577085][ T9970] path_lookupat+0xe4/0x8c0 [ 445.577132][ T9970] filename_lookup+0x256/0x5d0 [ 445.577170][ T9970] ? __pfx_filename_lookup+0x10/0x10 [ 445.577231][ T9970] ? strncpy_from_user+0x150/0x2b0 [ 445.577264][ T9970] ? do_getname+0x151/0x250 [ 445.577295][ T9970] user_path_at+0x40/0x160 [ 445.577329][ T9970] __se_sys_mount+0x2dc/0x420 [ 445.577367][ T9970] ? __pfx___se_sys_mount+0x10/0x10 [ 445.577404][ T9970] ? __x64_sys_mount+0x20/0xc0 [ 445.577432][ T9970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.577456][ T9970] do_syscall_64+0x174/0x580 [ 445.577480][ T9970] ? trace_irq_disable+0x3b/0x140 [ 445.577508][ T9970] ? clear_bhb_loop+0x40/0x90 [ 445.577536][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.577560][ T9970] RIP: 0033:0x7fa017d4ce59 [ 445.577582][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.577602][ T9970] RSP: 002b:00007fa015f9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 445.577626][ T9970] RAX: ffffffffffffffda RBX: 00007fa017fc5fa0 RCX: 00007fa017d4ce59 [ 445.577644][ T9970] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000000 [ 445.577659][ T9970] RBP: 00007fa015f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 445.577674][ T9970] R10: 0000000000100000 R11: 0000000000000246 R12: 0000000000000001 [ 445.577689][ T9970] R13: 00007fa017fc6038 R14: 00007fa017fc5fa0 R15: 00007fff84d12048 [ 445.577728][ T9970] [ 445.784986][ T9978] FAULT_INJECTION: forcing a failure. [ 445.784986][ T9978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.785027][ T9978] CPU: 0 UID: 0 PID: 9978 Comm: syz.0.1312 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.785056][ T9978] Tainted: [L]=SOFTLOCKUP [ 445.785063][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 445.785075][ T9978] Call Trace: [ 445.785084][ T9978] [ 445.785093][ T9978] dump_stack_lvl+0xe8/0x150 [ 445.785125][ T9978] should_fail_ex+0x46b/0x600 [ 445.785156][ T9978] _copy_from_user+0x2d/0xb0 [ 445.785187][ T9978] __se_sys_landlock_add_rule+0x1e4/0x790 [ 445.785218][ T9978] ? fput+0xa0/0xd0 [ 445.785243][ T9978] ? __pfx___se_sys_landlock_add_rule+0x10/0x10 [ 445.785277][ T9978] ? ksys_write+0x248/0x270 [ 445.785310][ T9978] ? __pfx_ksys_write+0x10/0x10 [ 445.785347][ T9978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.785368][ T9978] do_syscall_64+0x174/0x580 [ 445.785389][ T9978] ? trace_irq_disable+0x3b/0x140 [ 445.785414][ T9978] ? clear_bhb_loop+0x40/0x90 [ 445.785438][ T9978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.785458][ T9978] RIP: 0033:0x7f837411ce59 [ 445.785477][ T9978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.785495][ T9978] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bd [ 445.785518][ T9978] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 445.785533][ T9978] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 445.785547][ T9978] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 445.785560][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.785573][ T9978] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 445.785612][ T9978] [ 446.843379][ T9954] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 448.117470][ T5617] ocfs2: Unmounting device (7,2) on (node local) [ 448.270553][T10000] loop0: detected capacity change from 0 to 1024 [ 448.364070][T10000] FAULT_INJECTION: forcing a failure. [ 448.364070][T10000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.364115][T10000] CPU: 1 UID: 0 PID: 10000 Comm: syz.0.1323 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 448.364150][T10000] Tainted: [L]=SOFTLOCKUP [ 448.364159][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 448.364174][T10000] Call Trace: [ 448.364183][T10000] [ 448.364194][T10000] dump_stack_lvl+0xe8/0x150 [ 448.364234][T10000] should_fail_ex+0x46b/0x600 [ 448.364272][T10000] _copy_from_user+0x2d/0xb0 [ 448.364310][T10000] kstrtouint_from_user+0xd6/0x180 [ 448.364346][T10000] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 448.364398][T10000] proc_fail_nth_write+0x8e/0x210 [ 448.364431][T10000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 448.364470][T10000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 448.364505][T10000] vfs_write+0x2a3/0xba0 [ 448.364552][T10000] ? __pfx_vfs_write+0x10/0x10 [ 448.364589][T10000] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 448.364628][T10000] ? lockdep_hardirqs_on+0x7a/0x110 [ 448.364653][T10000] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 448.364690][T10000] ? mutex_lock_nested+0x152/0x1d0 [ 448.364720][T10000] ? fdget_pos+0x252/0x320 [ 448.364763][T10000] ksys_write+0x156/0x270 [ 448.364803][T10000] ? __pfx_ksys_write+0x10/0x10 [ 448.364857][T10000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.364884][T10000] do_syscall_64+0x174/0x580 [ 448.364908][T10000] ? trace_irq_disable+0x3b/0x140 [ 448.364938][T10000] ? clear_bhb_loop+0x40/0x90 [ 448.364968][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.364993][T10000] RIP: 0033:0x7f83740dd68e [ 448.365016][T10000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 448.365038][T10000] RSP: 002b:00007f8372375fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.365063][T10000] RAX: ffffffffffffffda RBX: 00007f83723766c0 RCX: 00007f83740dd68e [ 448.365081][T10000] RDX: 0000000000000001 RSI: 00007f83723760a0 RDI: 0000000000000005 [ 448.365097][T10000] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 448.365113][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.365129][T10000] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 448.365168][T10000] [ 448.593231][ T9986] loop3: detected capacity change from 0 to 32768 [ 448.729323][ T9986] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1313 (9986) [ 448.786160][ T5614] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 448.786186][ T5614] FAT-fs (loop1): Filesystem has been set read-only [ 449.023120][ T9986] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 449.023159][ T9986] BTRFS info (device loop3): using sha256 checksum algorithm [ 449.061314][T10006] loop2: detected capacity change from 0 to 512 [ 449.116341][ T5614] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 449.169543][T10006] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1318: corrupted in-inode xattr: e_value out of bounds [ 449.169585][T10006] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 449.170859][T10006] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1318: couldn't read orphan inode 15 (err -117) [ 449.170896][T10006] loop2: lost filesystem error report for type 5 error -117 [ 449.171849][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 449.171872][ C0] EXT4-fs (loop2): initial error at time 1780132881: ext4_iget_extra_inode:5128: inode 15 [ 449.171905][ C0] EXT4-fs (loop2): last error at time 1780132881: ext4_orphan_get:1402 [ 449.193895][T10006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.554887][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.834129][ T9986] BTRFS error (device loop3): open_ctree failed: -4 [ 450.260058][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 450.308047][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 450.914346][T10035] hpfs: Bad magic ... probably not HPFS [ 451.377484][T10046] loop2: detected capacity change from 0 to 1024 [ 452.787078][T10062] loop4: detected capacity change from 0 to 1764 [ 452.846999][T10068] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 452.943030][T10068] loop2: detected capacity change from 0 to 128 [ 453.116899][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.215637][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.217612][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.252148][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 453.280568][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 453.324062][T10050] loop3: detected capacity change from 0 to 32768 [ 455.425808][T10099] loop2: detected capacity change from 0 to 131072 [ 455.451589][T10099] F2FS-fs (loop2): invalid crc value [ 455.474064][ T5626] Bluetooth: hci1: command tx timeout [ 455.633920][T10099] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 455.649737][T10099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 455.702498][T10099] F2FS-fs (loop2): f2fs_lookup: inode (ino=4) has zero i_nlink [ 455.723264][ T37] audit: type=1326 audit(1780132888.533:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd5a7ce59 code=0x7ffc0000 [ 455.723329][ T37] audit: type=1326 audit(1780132888.533:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd5a7ce59 code=0x7ffc0000 [ 455.727233][ T37] audit: type=1326 audit(1780132888.533:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fecd5a7ce59 code=0x7ffc0000 [ 455.727289][ T37] audit: type=1326 audit(1780132888.533:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd5a7ce59 code=0x7ffc0000 [ 455.727337][ T37] audit: type=1326 audit(1780132888.533:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd5a7ce59 code=0x7ffc0000 [ 455.729456][ T37] audit: type=1326 audit(1780132888.533:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fecd5a7ce59 code=0x7ffc0000 [ 455.729511][ T37] audit: type=1326 audit(1780132888.533:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd5a7ce59 code=0x7ffc0000 [ 455.729562][ T37] audit: type=1326 audit(1780132888.533:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd5a7ce59 code=0x7ffc0000 [ 455.733520][ T37] audit: type=1326 audit(1780132888.543:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fecd5a7ce59 code=0x7ffc0000 [ 455.733578][ T37] audit: type=1326 audit(1780132888.543:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.2.1358" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecd5a7ce59 code=0x7ffc0000 [ 456.287175][T10121] FAULT_INJECTION: forcing a failure. [ 456.287175][T10121] name failslab, interval 1, probability 0, space 0, times 0 [ 456.287219][T10121] CPU: 0 UID: 0 PID: 10121 Comm: syz.4.1361 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.287252][T10121] Tainted: [L]=SOFTLOCKUP [ 456.287260][T10121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 456.287275][T10121] Call Trace: [ 456.287284][T10121] [ 456.287295][T10121] dump_stack_lvl+0xe8/0x150 [ 456.287332][T10121] should_fail_ex+0x46b/0x600 [ 456.287367][T10121] should_failslab+0xa8/0x100 [ 456.287403][T10121] __kmalloc_cache_noprof+0x84/0x690 [ 456.287435][T10121] ? __se_sys_memfd_create+0x227/0x420 [ 456.287481][T10121] __se_sys_memfd_create+0x227/0x420 [ 456.287513][T10121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.287539][T10121] do_syscall_64+0x174/0x580 [ 456.287562][T10121] ? trace_irq_disable+0x3b/0x140 [ 456.287590][T10121] ? clear_bhb_loop+0x40/0x90 [ 456.287617][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.287640][T10121] RIP: 0033:0x7f386e9fce59 [ 456.287660][T10121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.287679][T10121] RSP: 002b:00007f386cc55e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 456.287703][T10121] RAX: ffffffffffffffda RBX: 0000000000009e18 RCX: 00007f386e9fce59 [ 456.287720][T10121] RDX: 00007f386cc55ee0 RSI: 0000000000000000 RDI: 00007f386ea92f4f [ 456.287734][T10121] RBP: 00002000000013c0 R08: 00000000ffffffff R09: 0000000000000000 [ 456.287749][T10121] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 456.287764][T10121] R13: 00007f386cc55ee0 R14: 00007f386cc55ea0 R15: 00002000000004c0 [ 456.287797][T10121] [ 456.869751][T10071] wg1 speed is unknown, defaulting to 1000 [ 456.968801][T10126] loop3: detected capacity change from 0 to 128 [ 457.001085][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 457.523547][ T5626] Bluetooth: hci1: command tx timeout [ 459.341648][T10158] loop4: detected capacity change from 0 to 4096 [ 459.612926][ T5626] Bluetooth: hci1: command tx timeout [ 459.730754][ T5749] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 459.890914][ T5749] usb 1-1: Using ep0 maxpacket: 32 [ 459.893272][ T5749] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 459.893301][ T5749] usb 1-1: config 2 has no interface number 0 [ 459.893354][ T5749] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 459.893383][ T5749] usb 1-1: config 2 interface 88 has no altsetting 0 [ 459.896845][ T5749] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 459.896878][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.896902][ T5749] usb 1-1: Product: syz [ 459.896917][ T5749] usb 1-1: Manufacturer: syz [ 459.896934][ T5749] usb 1-1: SerialNumber: syz [ 459.930975][T10163] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 460.144922][T10163] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 460.756411][T10071] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.756861][T10071] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.757166][T10071] bridge_slave_0: entered allmulticast mode [ 460.762205][T10071] bridge_slave_0: entered promiscuous mode [ 460.766706][T10071] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.767092][T10071] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.767347][T10071] bridge_slave_1: entered allmulticast mode [ 460.771617][T10071] bridge_slave_1: entered promiscuous mode [ 461.338210][ T5749] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 461.338531][ T5749] asix 1-1:2.88: probe with driver asix failed with error -71 [ 461.390621][ T5749] usb 1-1: USB disconnect, device number 17 [ 461.433231][T10177] loop0: detected capacity change from 0 to 128 [ 461.457281][T10177] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 461.458382][T10177] ext4 filesystem being mounted at /570/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 461.464276][T10177] FAULT_INJECTION: forcing a failure. [ 461.464276][T10177] name failslab, interval 1, probability 0, space 0, times 0 [ 461.464311][T10177] CPU: 0 UID: 0 PID: 10177 Comm: syz.0.1380 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 461.464340][T10177] Tainted: [L]=SOFTLOCKUP [ 461.464348][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 461.464360][T10177] Call Trace: [ 461.464368][T10177] [ 461.464376][T10177] dump_stack_lvl+0xe8/0x150 [ 461.464410][T10177] should_fail_ex+0x46b/0x600 [ 461.464451][T10177] should_failslab+0xa8/0x100 [ 461.464481][T10177] __kmalloc_noprof+0xdf/0x7b0 [ 461.464506][T10177] ? kfree+0x4d/0x6c0 [ 461.464529][T10177] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 461.464563][T10177] tomoyo_realpath_from_path+0xe3/0x5d0 [ 461.464593][T10177] ? tomoyo_domain+0xd7/0x130 [ 461.464626][T10177] ? tomoyo_path_number_perm+0x219/0x630 [ 461.464650][T10177] tomoyo_path_number_perm+0x246/0x630 [ 461.464676][T10177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 461.464699][T10177] ? __lock_acquire+0x6b5/0x2d10 [ 461.464728][T10177] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.464783][T10177] ? __fget_files+0x2a/0x420 [ 461.464812][T10177] ? __fget_files+0x2a/0x420 [ 461.464836][T10177] ? __fget_files+0x3a6/0x420 [ 461.464860][T10177] ? __fget_files+0x2a/0x420 [ 461.464889][T10177] security_file_ioctl+0xc3/0x2a0 [ 461.464913][T10177] __se_sys_ioctl+0x47/0x170 [ 461.464933][T10177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.464956][T10177] do_syscall_64+0x174/0x580 [ 461.464977][T10177] ? trace_irq_disable+0x3b/0x140 [ 461.465001][T10177] ? clear_bhb_loop+0x40/0x90 [ 461.465026][T10177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.465046][T10177] RIP: 0033:0x7f837411ce59 [ 461.465066][T10177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.465084][T10177] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.465106][T10177] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 461.465121][T10177] RDX: 00002000000001c0 RSI: 0000000040286608 RDI: 0000000000000003 [ 461.465139][T10177] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 461.465152][T10177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.465164][T10177] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 461.465196][T10177] [ 461.526474][T10177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.526516][T10177] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 461.679462][ T5611] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 461.685491][ T5626] Bluetooth: hci1: command tx timeout [ 462.117802][T10071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.182841][T10071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.539611][T10192] loop0: detected capacity change from 0 to 128 [ 462.619426][T10192] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 463.005615][T10071] team0: Port device team_slave_0 added [ 463.038890][T10071] team0: Port device team_slave_1 added [ 463.345581][T10071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.345601][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.345642][T10071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.357375][T10071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.357392][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.357419][T10071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.804185][T10210] loop4: detected capacity change from 0 to 512 [ 463.839543][T10210] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 463.933631][T10210] EXT4-fs (loop4): invalid journal inode [ 463.933764][T10210] EXT4-fs (loop4): can't get journal size [ 464.048752][T10071] hsr_slave_0: entered promiscuous mode [ 464.056367][T10071] hsr_slave_1: entered promiscuous mode [ 464.062037][T10071] debugfs: 'hsr0' already exists in 'hsr' [ 464.062068][T10071] Cannot create hsr debugfs directory [ 464.195193][T10210] EXT4-fs (loop4): 1 truncate cleaned up [ 464.279350][T10210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.322880][T10203] loop2: detected capacity change from 0 to 32768 [ 465.269771][T10224] FAULT_INJECTION: forcing a failure. [ 465.269771][T10224] name failslab, interval 1, probability 0, space 0, times 0 [ 465.269814][T10224] CPU: 1 UID: 0 PID: 10224 Comm: syz.0.1396 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.269846][T10224] Tainted: [L]=SOFTLOCKUP [ 465.269860][T10224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.269874][T10224] Call Trace: [ 465.269884][T10224] [ 465.269894][T10224] dump_stack_lvl+0xe8/0x150 [ 465.269929][T10224] should_fail_ex+0x46b/0x600 [ 465.269963][T10224] should_failslab+0xa8/0x100 [ 465.269997][T10224] kmem_cache_alloc_noprof+0x87/0x680 [ 465.270026][T10224] ? create_new_namespaces+0x33/0x6a0 [ 465.270065][T10224] create_new_namespaces+0x33/0x6a0 [ 465.270100][T10224] ? __fget_files+0x3a6/0x420 [ 465.270129][T10224] ? __fget_files+0x2a/0x420 [ 465.270166][T10224] __se_sys_setns+0x2c3/0x1bb0 [ 465.270202][T10224] ? __pfx___se_sys_setns+0x10/0x10 [ 465.270238][T10224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.270264][T10224] do_syscall_64+0x174/0x580 [ 465.270287][T10224] ? trace_irq_disable+0x3b/0x140 [ 465.270316][T10224] ? clear_bhb_loop+0x40/0x90 [ 465.270344][T10224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.270367][T10224] RIP: 0033:0x7f837411ce59 [ 465.270390][T10224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.270411][T10224] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 465.270435][T10224] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 465.270452][T10224] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000003 [ 465.270467][T10224] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 465.270482][T10224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.270496][T10224] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 465.270534][T10224] [ 465.379543][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 465.421300][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 465.430152][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 465.444690][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 465.448909][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 465.645600][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 465.645622][ T37] audit: type=1800 audit(1780132898.434:2029): pid=10214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1388" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 466.176482][T10228] loop0: detected capacity change from 0 to 4096 [ 466.664802][T10243] loop2: detected capacity change from 0 to 64 [ 466.763567][T10243] FAULT_INJECTION: forcing a failure. [ 466.763567][T10243] name failslab, interval 1, probability 0, space 0, times 0 [ 466.763619][T10243] CPU: 0 UID: 0 PID: 10243 Comm: syz.2.1400 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 466.763651][T10243] Tainted: [L]=SOFTLOCKUP [ 466.763658][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.763671][T10243] Call Trace: [ 466.763680][T10243] [ 466.763691][T10243] dump_stack_lvl+0xe8/0x150 [ 466.763726][T10243] should_fail_ex+0x46b/0x600 [ 466.763761][T10243] should_failslab+0xa8/0x100 [ 466.763792][T10243] __kmalloc_noprof+0xdf/0x7b0 [ 466.763823][T10243] ? hfs_find_init+0xaa/0x300 [ 466.763844][T10243] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.763875][T10243] hfs_find_init+0xaa/0x300 [ 466.763907][T10243] hfs_lookup+0x175/0x320 [ 466.763937][T10243] ? __pfx_hfs_lookup+0x10/0x10 [ 466.763972][T10243] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 466.764014][T10243] ? rt_spin_unlock+0x160/0x200 [ 466.764043][T10243] ? d_alloc+0x144/0x190 [ 466.764079][T10243] lookup_one_qstr_excl+0x12d/0x360 [ 466.764117][T10243] filename_create+0x20e/0x370 [ 466.764159][T10243] ? __pfx_filename_create+0x10/0x10 [ 466.764199][T10243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.764229][T10243] filename_mkdirat+0xd2/0x520 [ 466.764259][T10243] ? __pfx_filename_mkdirat+0x10/0x10 [ 466.764287][T10243] ? do_getname+0x151/0x250 [ 466.764312][T10243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.764337][T10243] __se_sys_mkdirat+0x35/0x150 [ 466.764361][T10243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.764385][T10243] do_syscall_64+0x174/0x580 [ 466.764407][T10243] ? trace_irq_disable+0x3b/0x140 [ 466.764436][T10243] ? clear_bhb_loop+0x40/0x90 [ 466.764464][T10243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.764486][T10243] RIP: 0033:0x7fecd5a7bcc7 [ 466.764508][T10243] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.764529][T10243] RSP: 002b:00007fecd3cd5e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 466.764553][T10243] RAX: ffffffffffffffda RBX: 00007fecd3cd5ee0 RCX: 00007fecd5a7bcc7 [ 466.764569][T10243] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 466.764583][T10243] RBP: 0000200000000000 R08: 0000200000000140 R09: 0000000000000000 [ 466.764607][T10243] R10: 0000200000000000 R11: 0000000000000246 R12: 0000200000000280 [ 466.764622][T10243] R13: 00007fecd3cd5ea0 R14: 0000000000000000 R15: 0000000000000000 [ 466.764658][T10243] [ 467.361977][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.491235][T10251] loop2: detected capacity change from 0 to 64 [ 467.661752][T10251] MINIX-fs: mounting file system with errors, running fsck is recommended [ 467.770014][ T5626] Bluetooth: hci3: command tx timeout [ 468.265178][T10220] wg1 speed is unknown, defaulting to 1000 [ 468.537379][T10071] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 468.577857][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 468.803681][T10071] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.899294][T10071] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 469.004243][T10071] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.031226][T10071] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 469.100241][T10285] loop2: detected capacity change from 0 to 512 [ 469.103578][T10285] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 469.157582][T10071] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.316241][T10071] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 469.394929][T10071] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.398789][T10285] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1418: invalid indirect mapped block 4294967295 (level 0) [ 469.398832][T10285] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 469.415175][ C0] EXT4-fs (loop2): initial error at time 1780132902: ext4_free_branches:1023: inode 16 [ 469.415218][ C0] EXT4-fs (loop2): last error at time 1780132902: ext4_free_branches:1023: inode 16 [ 469.587163][T10270] loop4: detected capacity change from 0 to 32768 [ 469.643329][T10270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1410 (10270) [ 469.688251][T10285] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1418: invalid indirect mapped block 4294967295 (level 1) [ 469.688298][T10285] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 469.752542][T10270] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 469.752572][T10270] BTRFS info (device loop4): using crc32c checksum algorithm [ 469.844399][ T5626] Bluetooth: hci3: command tx timeout [ 470.220523][T10270] BTRFS info (device loop4): setting nodatasum [ 470.220556][T10270] BTRFS info (device loop4): enabling ssd optimizations [ 470.220577][T10270] BTRFS info (device loop4): disabling tree log [ 470.220595][T10270] BTRFS info (device loop4): turning on async discard [ 470.220622][T10270] BTRFS info (device loop4): enabling free space tree [ 470.220641][T10270] BTRFS info (device loop4): enabling auto defrag [ 470.248705][T10285] EXT4-fs (loop2): 1 orphan inode deleted [ 470.248730][T10285] EXT4-fs (loop2): 1 truncate cleaned up [ 470.251970][T10285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.545578][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.682325][T10321] BTRFS error (device loop4): balance: invalid convert system profile raid1 [ 471.074036][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 471.929467][ T5626] Bluetooth: hci3: command tx timeout [ 472.997550][T10071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.068594][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.089144][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.089520][T10220] bridge_slave_0: entered allmulticast mode [ 473.096151][T10220] bridge_slave_0: entered promiscuous mode [ 473.129328][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.129623][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.129945][T10220] bridge_slave_1: entered allmulticast mode [ 473.137806][T10220] bridge_slave_1: entered promiscuous mode [ 473.476332][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.550278][T10338] loop2: detected capacity change from 0 to 32768 [ 473.570190][T10338] overlay: Unknown parameter 'obj_role' [ 473.606967][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.903701][T10071] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.934244][T10220] team0: Port device team_slave_0 added [ 474.001740][ T5626] Bluetooth: hci3: command tx timeout [ 474.127602][T10220] team0: Port device team_slave_1 added [ 474.378695][T10372] loop2: detected capacity change from 0 to 4096 [ 474.439949][ T2264] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.440447][ T2264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.459724][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.459743][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.459770][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.610443][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.610462][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.610493][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.702830][T10378] FAULT_INJECTION: forcing a failure. [ 474.702830][T10378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.702868][T10378] CPU: 0 UID: 0 PID: 10378 Comm: syz.0.1447 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 474.702894][T10378] Tainted: [L]=SOFTLOCKUP [ 474.702901][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 474.702912][T10378] Call Trace: [ 474.702919][T10378] [ 474.702928][T10378] dump_stack_lvl+0xe8/0x150 [ 474.702957][T10378] should_fail_ex+0x46b/0x600 [ 474.702986][T10378] _copy_from_user+0x2d/0xb0 [ 474.703014][T10378] ___sys_sendmsg+0x1c6/0x360 [ 474.703033][T10378] ? __lock_acquire+0x6b5/0x2d10 [ 474.703061][T10378] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.703112][T10378] ? __fget_files+0x2a/0x420 [ 474.703141][T10378] ? __fget_files+0x3a6/0x420 [ 474.703173][T10378] __x64_sys_sendmsg+0x1c3/0x2a0 [ 474.703194][T10378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.703222][T10378] ? __pfx_ksys_write+0x10/0x10 [ 474.703257][T10378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.703278][T10378] do_syscall_64+0x174/0x580 [ 474.703297][T10378] ? trace_irq_disable+0x3b/0x140 [ 474.703320][T10378] ? clear_bhb_loop+0x40/0x90 [ 474.703343][T10378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.703362][T10378] RIP: 0033:0x7f837411ce59 [ 474.703379][T10378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.703395][T10378] RSP: 002b:00007f8372376028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.703417][T10378] RAX: ffffffffffffffda RBX: 00007f8374395fa0 RCX: 00007f837411ce59 [ 474.703431][T10378] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000004 [ 474.703444][T10378] RBP: 00007f8372376090 R08: 0000000000000000 R09: 0000000000000000 [ 474.703455][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.703466][T10378] R13: 00007f8374396038 R14: 00007f8374395fa0 R15: 00007ffea1d72fe8 [ 474.703496][T10378] [ 474.854555][T10372] ntfs3(loop2): Failed to load $Extend (-22). [ 474.854585][T10372] ntfs3(loop2): Failed to initialize $Extend. [ 474.875305][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.875759][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.357361][T10220] hsr_slave_0: entered promiscuous mode [ 475.434742][T10220] hsr_slave_1: entered promiscuous mode [ 475.450983][T10220] debugfs: 'hsr0' already exists in 'hsr' [ 475.451013][T10220] Cannot create hsr debugfs directory [ 477.037606][ T5616] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 477.948783][T10401] loop2: detected capacity change from 0 to 32768 [ 479.012117][T10401] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 479.014852][T10426] loop0: detected capacity change from 0 to 4096 [ 479.083340][T10426] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 479.499005][T10426] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 479.537136][T10426] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 479.715375][T10429] FAULT_INJECTION: forcing a failure. [ 479.715375][T10429] name failslab, interval 1, probability 0, space 0, times 0 [ 479.715456][T10429] CPU: 0 UID: 0 PID: 10429 Comm: syz.0.1469 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 479.715483][T10429] Tainted: [L]=SOFTLOCKUP [ 479.715490][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.715501][T10429] Call Trace: [ 479.715509][T10429] [ 479.715518][T10429] dump_stack_lvl+0xe8/0x150 [ 479.715549][T10429] should_fail_ex+0x46b/0x600 [ 479.715579][T10429] should_failslab+0xa8/0x100 [ 479.715607][T10429] kmem_cache_alloc_noprof+0x87/0x680 [ 479.715631][T10429] ? alloc_empty_file+0x5b/0x1d0 [ 479.715658][T10429] alloc_empty_file+0x5b/0x1d0 [ 479.715682][T10429] path_openat+0x11b/0x3960 [ 479.715710][T10429] ? __kernel_text_address+0xd/0x30 [ 479.715742][T10429] ? try_to_take_rt_mutex+0x840/0xb00 [ 479.715780][T10429] ? __lock_acquire+0x6b5/0x2d10 [ 479.715810][T10429] ? __pfx_path_openat+0x10/0x10 [ 479.715838][T10429] ? getname_long+0x50/0x130 [ 479.715859][T10429] ? do_getname+0x181/0x250 [ 479.715889][T10429] ? do_raw_spin_lock+0x12b/0x2f0 [ 479.715917][T10429] do_file_open+0x23e/0x4a0 [ 479.715943][T10429] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 479.715974][T10429] ? __pfx_do_file_open+0x10/0x10 [ 479.715997][T10429] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 479.716042][T10429] ? alloc_fd+0x679/0x6f0 [ 479.716078][T10429] do_sys_openat2+0x115/0x200 [ 479.716106][T10429] ? __pfx_do_sys_openat2+0x10/0x10 [ 479.716129][T10429] ? ksys_write+0x248/0x270 [ 479.716158][T10429] ? __pfx_ksys_write+0x10/0x10 [ 479.716186][T10429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.716207][T10429] __x64_sys_creat+0x8f/0xc0 [ 479.716233][T10429] do_syscall_64+0x174/0x580 [ 479.716251][T10429] ? trace_irq_disable+0x3b/0x140 [ 479.716273][T10429] ? clear_bhb_loop+0x40/0x90 [ 479.716295][T10429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.716313][T10429] RIP: 0033:0x7f837411ce59 [ 479.716331][T10429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.716348][T10429] RSP: 002b:00007f8372334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 479.716368][T10429] RAX: ffffffffffffffda RBX: 00007f8374396180 RCX: 00007f837411ce59 [ 479.716382][T10429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 479.716394][T10429] RBP: 00007f8372334090 R08: 0000000000000000 R09: 0000000000000000 [ 479.716405][T10429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.716416][T10429] R13: 00007f8374396218 R14: 00007f8374396180 R15: 00007ffea1d72fe8 [ 479.716455][T10429] [ 480.013132][ T5617] ocfs2: Unmounting device (7,2) on (node local) [ 480.590815][T10418] loop4: detected capacity change from 0 to 32768 [ 480.993714][T10220] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 481.175735][T10418] overlay: Unknown parameter 'obj_role' [ 481.297378][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.344863][T10220] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 481.447295][T10442] loop4: detected capacity change from 0 to 128 [ 481.464732][T10442] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 481.464768][T10442] hpfs: filesystem error: improperly stopped [ 481.464783][T10442] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 481.464800][T10442] hpfs: You really don't want any checks? You are crazy... [ 481.464812][T10442] hpfs: Code page index out of array [ 481.464820][T10442] hpfs: code page support is disabled [ 481.465279][T10442] hpfs: hpfs_map_4sectors(): unaligned read [ 481.465397][T10442] hpfs: hpfs_map_4sectors(): unaligned read [ 481.465408][T10442] hpfs: filesystem error: unable to find root dir [ 481.590566][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.610313][T10220] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 481.707632][T10447] loop2: detected capacity change from 0 to 1024 [ 482.013328][T10442] FAULT_INJECTION: forcing a failure. [ 482.013328][T10442] name failslab, interval 1, probability 0, space 0, times 0 [ 482.013372][T10442] CPU: 1 UID: 0 PID: 10442 Comm: syz.4.1474 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 482.013400][T10442] Tainted: [L]=SOFTLOCKUP [ 482.013407][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 482.013419][T10442] Call Trace: [ 482.013428][T10442] [ 482.013437][T10442] dump_stack_lvl+0xe8/0x150 [ 482.013483][T10442] should_fail_ex+0x46b/0x600 [ 482.013519][T10442] should_failslab+0xa8/0x100 [ 482.013550][T10442] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 482.013577][T10442] ? __d_alloc+0x37/0x6f0 [ 482.013611][T10442] __d_alloc+0x37/0x6f0 [ 482.013637][T10442] ? seqcount_lockdep_reader_access+0xea/0x100 [ 482.013671][T10442] d_alloc+0x4b/0x190 [ 482.013699][T10442] ? lookup_one_qstr_excl+0xc4/0x360 [ 482.013733][T10442] lookup_one_qstr_excl+0xd8/0x360 [ 482.013770][T10442] filename_create+0x20e/0x370 [ 482.013803][T10442] ? lockdep_hardirqs_on+0x7a/0x110 [ 482.013830][T10442] ? __pfx_filename_create+0x10/0x10 [ 482.013869][T10442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.013897][T10442] filename_mkdirat+0xd2/0x520 [ 482.013927][T10442] ? __pfx_filename_mkdirat+0x10/0x10 [ 482.013954][T10442] ? do_getname+0x151/0x250 [ 482.013980][T10442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.014005][T10442] __se_sys_mkdirat+0x35/0x150 [ 482.014027][T10442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.014051][T10442] do_syscall_64+0x174/0x580 [ 482.014072][T10442] ? trace_irq_disable+0x3b/0x140 [ 482.014099][T10442] ? clear_bhb_loop+0x40/0x90 [ 482.014127][T10442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.014150][T10442] RIP: 0033:0x7f386e9fbcc7 [ 482.014173][T10442] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.014192][T10442] RSP: 002b:00007f386cc55e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 482.014217][T10442] RAX: ffffffffffffffda RBX: 00007f386cc55ee0 RCX: 00007f386e9fbcc7 [ 482.014232][T10442] RDX: 00000000000001ff RSI: 0000200000000300 RDI: 00000000ffffff9c [ 482.014247][T10442] RBP: 0000000000000000 R08: 0000200000000300 R09: 0000000000000000 [ 482.014261][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000300 [ 482.014275][T10442] R13: 00007f386cc55ea0 R14: 0000000000000000 R15: 0000000000000000 [ 482.014310][T10442] [ 482.218908][T10452] FAULT_INJECTION: forcing a failure. [ 482.218908][T10452] name failslab, interval 1, probability 0, space 0, times 0 [ 482.218950][T10452] CPU: 1 UID: 0 PID: 10452 Comm: syz.2.1476 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 482.218982][T10452] Tainted: [L]=SOFTLOCKUP [ 482.218990][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 482.219004][T10452] Call Trace: [ 482.219013][T10452] [ 482.219021][T10452] dump_stack_lvl+0xe8/0x150 [ 482.219059][T10452] should_fail_ex+0x46b/0x600 [ 482.219095][T10452] should_failslab+0xa8/0x100 [ 482.219129][T10452] kmem_cache_alloc_noprof+0x87/0x680 [ 482.219161][T10452] ? do_getname_kernel+0x54/0x230 [ 482.219195][T10452] do_getname_kernel+0x54/0x230 [ 482.219219][T10452] ? kern_path+0x1b/0x150 [ 482.219248][T10452] kern_path+0x25/0x150 [ 482.219279][T10452] bdev_file_open_by_path+0xd5/0x480 [ 482.219310][T10452] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 482.219348][T10452] btrfs_scan_one_device+0xa8/0x680 [ 482.219371][T10452] ? btrfs_control_ioctl+0x21c/0x370 [ 482.219401][T10452] ? mutex_lock_nested+0x168/0x1d0 [ 482.219436][T10452] btrfs_control_ioctl+0x22a/0x370 [ 482.219476][T10452] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 482.219506][T10452] ? __fget_files+0x2a/0x420 [ 482.219538][T10452] ? bpf_lsm_file_ioctl+0x9/0x20 [ 482.219558][T10452] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 482.219590][T10452] __se_sys_ioctl+0xff/0x170 [ 482.219611][T10452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.219633][T10452] do_syscall_64+0x174/0x580 [ 482.219653][T10452] ? trace_irq_disable+0x3b/0x140 [ 482.219678][T10452] ? clear_bhb_loop+0x40/0x90 [ 482.219702][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.219723][T10452] RIP: 0033:0x7fecd5a7ce59 [ 482.219743][T10452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.219760][T10452] RSP: 002b:00007fecd3cb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.219783][T10452] RAX: ffffffffffffffda RBX: 00007fecd5cf6090 RCX: 00007fecd5a7ce59 [ 482.219798][T10452] RDX: 00002000000004c0 RSI: 0000000050009404 RDI: 0000000000000005 [ 482.219813][T10452] RBP: 00007fecd3cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 482.219826][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.219839][T10452] R13: 00007fecd5cf6128 R14: 00007fecd5cf6090 R15: 00007ffc5cd95be8 [ 482.219872][T10452] [ 482.236713][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.497123][T10220] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 482.781020][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.019602][T10460] loop2: detected capacity change from 0 to 4096 [ 483.432929][T10071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.173991][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.433171][T10507] loop4: detected capacity change from 0 to 512 [ 484.736038][T10507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.736209][T10507] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.903438][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.921353][T10507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.269079][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.269305][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.360237][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.360525][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.432282][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'. [ 486.725129][T10560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1504'. [ 486.814566][T10561] loop4: detected capacity change from 0 to 256 [ 486.865089][T10561] exFAT-fs (loop4): error, The cluster chain has a loop [ 486.865114][T10561] exFAT-fs (loop4): Filesystem has been set read-only [ 486.865126][T10561] exFAT-fs (loop4): failed to count the number of clusters in root [ 486.865138][T10561] exFAT-fs (loop4): failed to recognize exfat type [ 487.575662][ T37] audit: type=1400 audit(1780132920.387:2030): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=10576 comm="syz.4.1511" [ 487.657898][T10071] veth0_vlan: entered promiscuous mode [ 487.884287][T10555] loop2: detected capacity change from 0 to 32768 [ 487.890920][ T5749] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 487.927565][T10071] veth1_vlan: entered promiscuous mode [ 488.141112][ T5749] usb 5-1: Using ep0 maxpacket: 16 [ 488.164792][ T5749] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 488.164826][ T5749] usb 5-1: config 0 has no interface number 0 [ 488.164880][ T5749] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 488.164910][ T5749] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 488.207074][ T5749] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 488.207125][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.210780][ T5749] usb 5-1: Product: syz [ 488.210804][ T5749] usb 5-1: Manufacturer: syz [ 488.210820][ T5749] usb 5-1: SerialNumber: syz [ 488.306161][ T5749] usb 5-1: config 0 descriptor?? [ 488.312830][T10577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 488.312967][T10577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 488.516539][T10577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 488.516766][T10577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 488.634270][T10071] veth0_macvtap: entered promiscuous mode [ 488.734383][ T5749] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 489.130582][ T5749] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 489.131019][ T5749] asix 5-1:0.34: probe with driver asix failed with error -32 [ 489.223068][T10597] veth17: entered promiscuous mode [ 489.223101][T10597] veth17: entered allmulticast mode [ 489.241295][T10071] veth1_macvtap: entered promiscuous mode [ 489.553291][T10071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.572321][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.720139][T10071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.865972][ T5894] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.882172][ T5894] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.885052][ T8058] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.886216][ T8058] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.