last executing test programs: 1m33.379598864s ago: executing program 4 (id=73): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c601"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x200, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084503, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) 1m29.721197204s ago: executing program 4 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x18) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040afb07020a000000040000a118000200fe80ffff00000e1208000f01008104017f0016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x2400c080) 1m29.024828906s ago: executing program 4 (id=87): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2200840, &(0x7f0000000140)) (fail_nth: 11) 1m28.069204891s ago: executing program 4 (id=89): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file1\x00', 0x10048, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getxattr(0x0, &(0x7f00000000c0)=@random={'user.', 'udf\x00'}, &(0x7f0000000100), 0x0) 1m27.101202663s ago: executing program 4 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0x0, 0x99, {0x6, 0x1e}}}}}, 0x12}}, 0x0) syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0\x00', 0x1, &(0x7f0000000380)=ANY=[], 0x1, 0x1cd, &(0x7f0000002180)="$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") r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x5, 0x12) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x16c, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x78, 0x13, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [{0xa, 0x1, 'minix\x00'}, {0xa, 0x1, 'minix\x00'}, {0xf, 0x1, 'memory.low\x00'}, {0x4}, {0xa, 0x1, 'wlan1\x00'}, {0xa, 0x1, 'wlan1\x00'}, {0xa, 0x1, 'wlan1\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'minix\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x4}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_SDP={0xcc, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xa, 0x1, 'minix\x00'}]}, {0x50, 0x0, 0x0, 0x1, [{0xf, 0x1, 'memory.low\x00'}, {0x7, 0x1, '[/:'}, {0xc, 0x1, 'nl80211\x00'}, {0xa, 0x1, 'minix\x00'}, {0x5, 0x1, '\xa2'}, {0xc, 0x1, 'nl80211\x00'}, {0x7, 0x1, '{\\^'}]}, {0x50, 0x0, 0x0, 0x1, [{0xa, 0x1, 'minix\x00'}, {0x5, 0x1, '.'}, {0xa, 0x1, 'wlan1\x00'}, {0x5, 0x1, '\\'}, {0x6, 0x1, '#@'}, {0xd, 0x1, '%+#u:[\xb6{8'}, {0xa, 0x1, 'minix\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x16c}}, 0x840) 1m26.326644905s ago: executing program 4 (id=97): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040afb07020a000000040000a118000200fe80ffff00000e1208000f01008104017f0016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m22.995726293s ago: executing program 32 (id=97): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040afb07020a000000040000a118000200fe80ffff00000e1208000f01008104017f0016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 17.782314493s ago: executing program 3 (id=292): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x185483) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYRESDEC=r1], 0x94}}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x1000007c, 0xfe4d) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001a000100000000000000000002002000", @ANYRES32=0x0, @ANYBLOB="000000000800020000e70000140006"], 0x38}}, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000640)={0xffffffffffffffff, 0x2e3800, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5995ba224d775e2e, 0xd, 0x4, "5a57a693ef525c144706d5c2edd9ba522f43cc2ea4043a7cedb37c6388f87c4814185bd1e910986ce40900", "00060017718c38f10003e3f8ef0c7b7037a3c76da0dcda7c54445143c53046585f54b565f57bdb16adf8a5ab034d74deaeff7d6000faff00", "906800b430d943cac3e9452a165f5adaa1f72700000000086e24f42ab2b35acc", [0x5, 0x2]}}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/44) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3560023809690000"], 0x14}}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000100)={[{@grpjquota, 0x4a}, {@debug}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noquota}, {@nodiscard}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) lseek(r4, 0x7fff, 0x0) write$P9_RLERROR(r4, 0x0, 0xa) 17.050701131s ago: executing program 3 (id=295): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r3, &(0x7f00000000c0), 0x28) recvmmsg(r3, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002000, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r5 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3a60, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x5c}) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='shortname=win95,usefree,shortname=win95,iocharset=iso8859-14,shortname=lower,tz=UTC,utf8=0,utf8=0,uni_xlate=1,uni_xlate=1,shortname=winnt,uni_xlate=1,shortname=winnt,flush,shortname=loweate=1,\x00'], 0x6, 0x2a4, &(0x7f0000000440)="$eJzs3b9re1UUAPDz0jSJOiSDkwg+0MGptF1dUqSFYiYlgzposS1IE4QWCv7A2MnVxdG/QBDc/CdcHNwFV8HNDoUn7+U9k9QkNtK0+v1+Pktv7z3n3nNvX1sy5Ob9F4dnx2mcXn32S7RaSdS60Y3rJDpRi8oXMaP7VQAA/2fXWRa/Z2Or5CUR0VpfWQDAGq38///7tZcEAKzZW2+/88Zer7f/Zpq24mD45WU/f2Wffx2P753GhzGIk9iOdtxEZH8Ztw+yLBvV01wnXhmOLvt55vC9H8v5936LKPJ3oh2doms2/7C3v5OOTeWP8jqeLdfv5vm70Y7n56x/2NvfnZMf/Ua8+vJU/VvRjp8+iI9iEMdFEZP8z3fS9PXs6z8+fTcvL89PRpf9ZhE3kW088I8GAAAAAAAAAAAAAAAAAAAAAIAn2FZ5d04zivt78q7y/p2Nm/ybzUgrndn7ecb5STXRrfuBRll8U92vs52maVYGTvLr8UI96o+zawAAAAAAAAAAAAAAAAAAAPhvufj4k7OjweDk/F4a1W0A1dv6/+083amel2J5cHOyVq1sLpk5NqqYJGJpGfkm7ulYikZz8dAzi2r+9rtV12r9c8zmsvO5n0b1dJ0dJfPPsBlVT6t6SH6YjmnEHddqLBrKVnr8GnOH2ivvvfFc0RgtiYlkWWGv/To+ubInub2LRnGqc9M3y8ZU+mxMbaXf97//rUjc1gEAAAAAAAAAAAAAAAAAAGs1edPvnMGrBUk/H44/5L+55uIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4IFMPv9/hcaoTL5DcCPOLx55iwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwF/gwAAP//v5pmyg==") syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000a40)='./file3\x00', 0x80, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x6a0, &(0x7f0000000f80)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x320, &(0x7f0000000280)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) 14.41610674s ago: executing program 2 (id=300): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x4d, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd2(0x72, 0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x59, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, 0x0, &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 14.10413381s ago: executing program 3 (id=301): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, 0x2a, 0xb, 0x0, 0x25dfdbff, {0x3}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="2b9d45c9"]}]}, 0x1c}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xfffffff7}]}}]}, 0x38}}, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x6}, 0x8) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000cc0)=""/161, 0xa1}], 0x1) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000000)) connect$netrom(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="766572626f73656a6f75726e616c5f7472616e736163735d60b65f6e616d65732c6e6f7265636f766572792c636f6d7072657373696f6c7a342c657261737572655f636f64652c636f6de512657373696f6e3d7a7374642c696e6c696e655f646174612c7265636f6e7374727563745f617072657373696f6e3d677a69702c6e6f636f772c72772c736d61636b5e5b402d6673636f6e746578743d756e636f6e66e9fe0a645f752c6170707261690200626a5f726f6c653d2c6f626a5f757365723d2c00cceb994f8efdbbc6ae4181a26bbff460c1c8ed816462d332da99e1c9d501b2f84401795039cbed6e6bdb8b98cafc2fc66729648fd8244e38a8ad980cdef833014e304f756960f2584bf7275e4b37d13a426e4e2a2d93218f5e4a81f5baf87c4fab66d374902a56a667b4922816529ad484fab6ab007b93cdced73d03040000000000000000000000000000000000000000000000000019c4277c4d2e96d1dcd16563a14b130bda5d889bd58ba50b97f065cce24e6dc61254f44888e00ae531c6c4358c0be3cd09d5cc920b7dedc2a86e8b70dc9df9ba790bace81fa504d9d3a4840fe2f17a400afea4266379fcfdf8292027f4780275e2cc5517bcd09f30a39e45349a89e4219573ef", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="8bc2e8ee7032225ca99d1f616eb269c3f770179f574bfb6f8241aef087bda6616493bf2e322377b61ca60749b1c7e9a7d025bede48ffef709e57ecbbf4fd4c1012be6466fd4fce8a9371c63b4c27a03ff38966a0e5acdcd6e79706e1e38e0115abd668a81dc1b3845df85f0e6afdbcf2e39f1e3860cc1e9e356cba75c24cab9a3544334aa6a3fec809e9c3134068e984f9b9678898d489d33892eee3b85695f24f5d9141bc8bd489b5d4b0e8e3c34c49d44d8137bc63ed141473108ac2590ea205371f4783b234f5ca5a2f9c41cc7d9e260730c069357fcdd8537de229aa38120ad7e4", @ANYRESHEX], 0xff, 0x59dd, &(0x7f0000000580)="$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") 12.604188714s ago: executing program 0 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x4, 0x4, 0xa, 0xa, 0xa}}]}}]}, 0x150}}, 0x0) (fail_nth: 11) 10.976946731s ago: executing program 2 (id=305): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x185483) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYRESDEC=r1], 0x94}}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x1000007c, 0xfe4d) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001a000100000000000000000002002000", @ANYRES32=0x0, @ANYBLOB="000000000800020000e70000140006"], 0x38}}, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000640)={0xffffffffffffffff, 0x2e3800, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5995ba224d775e2e, 0xd, 0x4, "5a57a693ef525c144706d5c2edd9ba522f43cc2ea4043a7cedb37c6388f87c4814185bd1e910986ce40900", "00060017718c38f10003e3f8ef0c7b7037a3c76da0dcda7c54445143c53046585f54b565f57bdb16adf8a5ab034d74deaeff7d6000faff00", "906800b430d943cac3e9452a165f5adaa1f72700000000086e24f42ab2b35acc", [0x5, 0x2]}}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/44) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3560023809690000"], 0x14}}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000100)={[{@grpjquota, 0x4a}, {@debug}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noquota}, {@nodiscard}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) lseek(r4, 0x7fff, 0x0) write$P9_RLERROR(r4, 0x0, 0xa) 10.940613366s ago: executing program 1 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x3ffe, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x101, 0x4, 0x6, 0x0, 0x200000}, 0x1}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x850a532ec58c68ea, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) fcntl$dupfd(r2, 0x406, r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r2, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f00000000c0)=""/18, 0x12}], 0x5, &(0x7f0000000200)=""/44, 0x2c}, 0x180c0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r10, 0x0) accept4(r10, 0x0, 0x0, 0x0) close(0x3) 10.884732919s ago: executing program 0 (id=307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x88462705c4e1cf3c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe0, &(0x7f0000000240), &(0x7f00000003c0)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f000010d000/0x4000)=nil, 0x4000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dc, &(0x7f0000000500)="01f7923290b46f9f49cacaa12641451ad6626a60ff0c02c6fe1bb40b3ceff473e2fd1d1f96caa57117c06311bbb02c3c89a6fbd1353c60b91858eebfef8b314a78c496ba3b9d329b9fbe4d7ec9be0d80b1505ccae9c0f275ab4584dfcb9b") r5 = io_uring_setup(0x3450, &(0x7f0000000100)={0x0, 0x3c, 0x0, 0x0, 0xc0}) r6 = syz_io_uring_setup(0x6df3, &(0x7f00000002c0)={0x0, 0xea7e, 0x200, 0x1, 0x0, 0x0, r5}, &(0x7f0000000380), &(0x7f00000004c0)) r7 = syz_mount_image$fuse(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8000}}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0xa8}}], [{@subj_type={'subj_type', 0x3d, 'syzkaller\x00'}}, {@audit}, {@appraise}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xee00}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '\\\'#'}}]}}, 0x0, 0x0, &(0x7f00000007c0)="3c8aa96a38b825d7bb88e442721b6959e66be68b8db284081f55be93b629bf9627ad96cf6ef01f115e813f8a931d4b5f0c49194165077e97c5469ad92c5e2d04f7e300e97679a574e4c328e195ce55d58e58f4da7d6957dc3182b480cba9e612394c936a8ef7c3046e30e57befc2558054359009e9bdc42423f3e34a073b14e1571bf1") openat(r7, &(0x7f0000000880)='./file0\x00', 0x40, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000500), 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 10.774483885s ago: executing program 3 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2804440, &(0x7f0000004680)=ANY=[@ANYBLOB="61636c2c6e6f696e74722c6174696d655f7175616e74756d3d30303030303030303030303030303030303030372c6c6f63616c666c6f636b732c6c6f63616c616c6c6f633d30303030303030303030303030303030303030332c6c6f63616c666c6f636b732c696e74722c6865617274626561743d6e6f6e652c0024855616ead4c7dc9e9da093713b0e6a6e67e1af8e4f5d7cbff1185218b41bcefa2f4f41b8212051258a0a6168526c8eef9d759bbb36a4b49ff8042320899ca9b6e9fa68a0abe364e0e2d46408f18da37d557aa1ebb8aa29451a584f1980dc477bd97f6a0446b8957872e51c2adf98e1acff806babdc9d58bc06d6d0b19476862cebe64cafa5a069852602786f40bf6a1bf7594e171d16ced9409b168ef591c2f5b676a2eb18e8a3b91275fd4467aea2037bd9790e240137bc7c80cc99e9dd662a5f"], 0x5, 0x4430, &(0x7f0000004840)="$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") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x11, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x44) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 10.377583834s ago: executing program 2 (id=310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029600030100d0000904000000010100000a24010000000201020d240600fe03080000000000000c24020202020608000010000c240200000003000000000009240303000000050009240705"], 0x0) 10.139592404s ago: executing program 1 (id=311): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000117000/0x4000)=nil, 0x400000, 0x3, 0x2}) (async) syz_clone3(&(0x7f00000002c0)={0x80000000, 0x0, 0x0, &(0x7f0000000140), {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r2) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x49d, &(0x7f0000000740)="$eJzs3M9vFFUcAPDv7LallR+tiCgIWkEj8UdLCyoHD2o08aCJiR7wWNuCyEINrQmQRosxeDQk3o1HE/8Cb16MejAmXjXxaEiINiYUTzWzM0OX7bZ0S9uV7ueTbPe9nZl97zvz3u6beZ0NoG31p3+SiG0R8VtE9GbZW1foz57mZqdHb8xOjyYxP//WX0l1veuz06PFqsV2W/PMoVJE6dMkXkwWlzt54eLpkUpl/FyeH5w688Hg5IWLz5w6M3Jy/OT42eFjx44eGXr+ueFn1yTONK7rez+a2LfntXeuvDF6/Mq7P36TVmv3/mx5bRy3daNBQA30p3vt7/mq+mWPN1H3u8H2mnTS0cKK0JRyRKSHq7Pa/3ujHAsHrzde/aSllQPWVfrdtGXpxTPzwCaWRKtrALRG8UWfnv8Wjw0aevwvXHspoitPz81Oj87djL8jSvnrnetYfn9EHJ/598v0Ec1ehwAAWIXq2ObpRuO/UuyuPmdzHTvyOZS+iLg3InZGxH0RsSsi7o+orvtARDyYbTzfu8Ly++vyi8c/pasN67xG0vHfCzVjv7ma+POnvnKe216NvzM5caoyfjjfJ4eic0uaH1qmjO9e+fXzpZbVjv/SR1p+MRbMK3C1o+4C3djI1Mha7YRrlyL2djSKP7k5E5C2gD0Rsbe5t95RJE49+fW+pVa6ffzLWIN5pvmvIp7Ijv9M1MVfSJafnxzsjsr44cGiVSz20y+X31yq/DuKfw1cO/BQllg4/nVr9P6T9OTJSmX83GTzZVz+/bMlz2lW2/67krerc9Y/v5e9dn5kaurcUERX8no1X5zTVV8fXtj2/MhUT5ov1k/b/6GDjfv/znyb9PineyltxPsj4uGIeCSv+6MRcSAiDi4T/w8vP/b+MvEnkUTrjv+liLGGn383239fUjtfv4pE+fT33y41Y76y4380ZqqftZnq599trLSCd7j7AAAA4K5QiohtkZQGsnT/tiiVBgay/+HfFfeUKhOTU0+dmPjw7Fh2j0BfdJaKK129NddDh5KZ/B2z/HB+rbhYfiS/bvxFuaeaHxidqIy1OHZod1tv7f9R9P/Un+VW1w5Yd+7XgvZV3/9LLaoHsPFW8v3vXAA2p1v7f3f6p6dVdQE2lvN/aF+N+v/HdXnjf9icFvf/Pxr8ZB2wGRn/Q/vS/6F96f/Qlu7kvv6FRHdENLNVcbPA6gvtXvEd/u2SKH7xYj3L6omLp7vyV6LUokjLTTa2TZFIe8zGFrrwGyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3s/8CAAD//90I3/s=") (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001, 0x0, 0x10000}) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) sendto$packet(r1, 0x0, 0x0, 0x4, 0x0, 0x0) (async) open(0x0, 0x0, 0x104) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000421c17240007000000692a04de1c7635fa18b9be0505030000000700"/54], 0x0) 10.0955866s ago: executing program 5 (id=312): prctl$PR_SET_NAME(0xf, 0x0) r0 = open(0x0, 0x800, 0x49) preadv2(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001400), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r1, &(0x7f00000015c0)=[{0x0, 0x1800}], 0x1, 0x0, 0x0) 8.767084904s ago: executing program 5 (id=313): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x200, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084503, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) 8.690428097s ago: executing program 1 (id=314): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000007c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xc4}, 0x1, 0x0, 0x0, 0x4040070}, 0x44) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x5) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x8, 0x0, 0x2}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001fc0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="3f47863dbeb32abe60293bf016bf28e1566c87e65d9628ace0c28bccfd0aa6b90d48defa6a67bffba1836afde131b2e6866048daaca018c6715ca50147f139fcc66ea611c6ac42a470b0698fd94c088c90d97ba4d739f066f16f02e9c7615b6cd43b879079f0a15fb939950692", @ANYRES8=r1, @ANYBLOB="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", @ANYRESHEX, @ANYRES64], 0x8, 0x2eb, &(0x7f0000001cc0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x101280, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ftruncate(r2, 0x5) 8.531799175s ago: executing program 0 (id=315): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x4d, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd2(0x72, 0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x59, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, &(0x7f0000000340), &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 8.277865949s ago: executing program 2 (id=316): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a0000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000940)='asymmetric\x00', &(0x7f0000000900)=@chain={'key_or_keyring:', r3}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 7.472553239s ago: executing program 1 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffe, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x1000, 0x0, 0xfffc}}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2804440, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x5, 0x4430, &(0x7f0000004840)="$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") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x11, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x44) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) 7.243975732s ago: executing program 2 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c6d6f64653d61646170746976652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d656e61626c652c6163746976655f6c6f67733d362c6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f61636c2c6d6f64653d61646170746976652c6e6f696e6c696e655f78617474722c6e6f657874656e745f63616368652c6e6f757365725f78617474722c6a71666d743d7666736f6c642c66617374626f6f742c67727071756f74613d2f6465762f75686964002c61636c2c0032f4ee2f6560cdca2b9483944e9645733866c506b49c56b50344a658491dfe1afc3bb0de511c48132c86a775315723c53de2957513b9e639dfab8b7e4f4097c16f12b630a63e3ee7aa89cfa87acb9e9436e3d4feae3c1c3fedb8759e622019ece82c31d9fe60c2e3300afffbbda9aa8515e815ffc77756449aee7d4dc8354a136775201fe90e0663c422eb5a7e10e72601606e640c6714946801fccf68f802ff1c466e968c229e988c70dbe2c74169c0e96f9117a800ef78cef7bea512401010266195fc419fabbb4304582cd727de0f01694c0e22f6bca0650e3f3e4c4aefef27a417b89a0ce12bce1898cc08bbacc339f2655241746a085213fe4d6edc276928e230d4663583ccad22e450718285ed6a84bad0c7d117de297a02d83173a5a3d62192e8b6882f1a34b2200fdb7de25a9c0657778fdf670dfbd28483194c7b288bd257fa84f4a9564651ee61761f4a364803b5aea822e4c5b52b5676bdba4d9bdcbf1b7ddda716f223a1bc6d1c5a150fa64e72f580f7bf672ce6c6d30f8bcf091186a89ff219d2272ff5f2c0b4f63cb92f4708d6d81bc1935a791bd1c3670ba93b4a4db772e29f150122528cbe24284f0d1064ba237debaa65d481756e427ad570171d1e9445fe5c06dd6335167686a2cf8f226eb57ebe530d4e72"], 0x1, 0x5505, &(0x7f0000002480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) creat(&(0x7f0000000400)='./bus\x00', 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010e01000009210000000122050009058103"], 0x0) 5.76576238s ago: executing program 0 (id=319): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 5.012126129s ago: executing program 0 (id=320): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x185483) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYRESDEC=r1], 0x94}}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x1000007c, 0xfe4d) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001a000100000000000000000002002000", @ANYRES32=0x0, @ANYBLOB="000000000800020000e70000140006"], 0x38}}, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000640)={0xffffffffffffffff, 0x2e3800, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5995ba224d775e2e, 0xd, 0x4, "5a57a693ef525c144706d5c2edd9ba522f43cc2ea4043a7cedb37c6388f87c4814185bd1e910986ce40900", "00060017718c38f10003e3f8ef0c7b7037a3c76da0dcda7c54445143c53046585f54b565f57bdb16adf8a5ab034d74deaeff7d6000faff00", "906800b430d943cac3e9452a165f5adaa1f72700000000086e24f42ab2b35acc", [0x5, 0x2]}}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/44) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3560023809690000"], 0x14}}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000100)={[{@grpjquota, 0x4a}, {@debug}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noquota}, {@nodiscard}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2804440, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x5, 0x4430, &(0x7f0000004840)="$eJzs3c9PHNcdAPA3A67BtV1wfXClSl2pllq1FQKf2mKpGGNjsKkrt7aqXNYLrG2ShbVgiXLwgdws5RQphygHK5Fy42RxyNX5E3LJ0TlbSg65RIpkhWh3Z2FndldsEAux8/kcGOb9Zr8zb98chhcnKg+W1nJLa7nCSq68cG/tQu7tcml9uRjiQ9K2/2OH1z/d6cV1ctTX3i/ZzctX/3vnQgifL375Ynt7eztU9Ye2xpp+/+7bRwvNx4Y4U6fabvvWDsobIYSzLeOq6gsh/P+zEKIQwqUkbTI5DoYQToV63p1H793NHdBonj4vXsy/nHu8NX5+dvPJVue/PQrho9Lv/nZ/+es/9o1/9ZcD6h4AAAAAAAAAAAAAAAAAgFfc9K2bt/8zOhaeRaF/M2p9X3c6OXZ6P3b7wPyh938sAAAAAAAAAAAAAAAAAAAA/Eztvv+fi860ef9/KjlOdKi//a/ej5Hemfn3zakro2PJ/u9RS/7fk6RvLvWF4Tb7vmf3f7+Uqd9+//fWfvarMb5Gv0MhikdS53E8MhLCJ8nG7+eiE3GpvFb5673y+srigQ3jlZWOf333/lR0kg39u43/ZKb93u///9uWq6l6fvfgLrHXWjr+fR3Lffpu1FX8L2fqHUb82b90/PtraYPNBSbqE0A1/u/37x3/qUz7vYr/6RBCLqqONZeaAaprmGp6p/UKaen4H6ulpabO5IPsdP9/n4n/lUz7RzX/b2S/iGgrHf9f1dIGUiV27//heO/7/2qm/aOIf3X8G77/u5KO//F6Yn+qSO2T7Hb+n86036v4346TcZ6OUlfAZlRP7/T/6khLx3+gJX/3+S/uav13LVP/sJ7/Gv02nv8a0/+fo/rzH+2l4z/YsVy39/9Mpl6v5/+J2vqP/UrH/0QtLb12Hqr97Db+s5n2exX/2qpkoBH/3fnkh+P19I+t/7qSjv+v64lxc4mN2s/a+i/ae/1/PdP+Uaz/quPfiHvb6+siHf+THctV4/9FF9//NzL1muLfurg4IKPW+vuWjv+pjuVq9//A3vGfy9Tr9f3/p142DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAKmEyOQyEaSp/H8chICJeT83PhRDRfWMzPl8oLb62FMJWk58KZ6H6pPF8o5ZdWyovFfKFUKi+EcCXJPxsGorVSuZJfLjy8utPWYPSgWFitzBcLlRDCdJL++3Cq0db8UmW58DCEcG0n7zdxefXhg8JKfnFp9Z+jo6OjYWZnDMNR8Z1KcaVS772eG8LsTt2hqGlwtezrO2M5Gb1ZXl9dKZRq6Tea6pTKC4VSU525JO+DMBxVVtdXFgqVYr5Uvt/o7yhNJMepmVv/u3VjrCX/blQ/Th7usAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4iZ6N/+PDEEJ//SwOIUw0fonalX/6vHgx/3Lu8db4+dnNJ1svOpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ed24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsEvHKA0EURiA34yF2nkMq2W3s11RRAtXBE+gx/AwehQv4R1SpEibIgSSWQibXdgmqb6veTA/M+/BPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//9kGHvg=") r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) lseek(r4, 0x7fff, 0x0) write$P9_RLERROR(r4, 0x0, 0xa) 4.854846322s ago: executing program 5 (id=321): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) (fail_nth: 2) 4.255779444s ago: executing program 5 (id=322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x66382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xee00}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '\\\'#'}}]}}, 0x0, 0x0, &(0x7f00000007c0)="3c8aa96a38b825d7bb88e442721b6959e66be68b8db284081f55be93b629bf9627ad96cf6ef01f115e813f8a931d4b5f0c49194165077e97c5469ad92c5e2d04f7e300e97679a574e4c328e195ce55d58e58f4da7d6957dc3182b480cba9e612394c936a8ef7c3046e30e57befc2558054359009e9bdc42423f3e34a073b14e1571bf1") openat(r7, &(0x7f0000000880)='./file0\x00', 0x40, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000500), 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 2.285344238s ago: executing program 5 (id=326): r0 = socket$inet6_sctp(0xa, 0xbbb486253381f527, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) capget(&(0x7f0000000000)={0x20080522}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x8002, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a69bbc104f9599760f010203010902240001040000000904330202020c070009450102100000fa0009058202400000000000"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0xa502, 0x20}, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pptp(0x18, 0x1, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3, &(0x7f0000000540), 0x1, 0x4a1, &(0x7f0000000000)="$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") mount$nfs(&(0x7f00000000c0)='/.//', &(0x7f0000000300)='./file0\x00', 0x0, 0x2009000, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="20f801"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="00082cbd7000fedbdf250200000008000100000000000a000a005c232b3a2e7d00000c000500000100000000000006000a00242d00000c000200feedc05b00000000700007800c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c000180280001003ea42d50a82ede44435ade329eb5e4c3410070df81b281e9b50d4b56e2e90135da84030bdba6a1ba502d24d2ce5b3e556536139ed75040628f0811277c3e894dbe2bcf40a8c6978f91de5d17eb06a8b0ffb3877d407526a78b7da360a7908e0632adad218a50e01cd40d60f4405a430ef2fdd391279def73cb4f088343f43c68e76fed3460d0ace3e650db652a16aa71044ac312a8f5543fb9331b3b1b265dd674f3004d54d5e64ea1bd450f5b7fc2c250ea446b1e3d0afdc3c44ccb07740c9465489cb65aeaea23cb6268e45115285fb1a1", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00030006000000000000000c0003000100000000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r10, @ANYRESDEC=r2, @ANYBLOB="f8956c1a88d31de72123d8229bcf98cf6ed6fa112942ed7443ad83147597d3e09167fd2ffd9fcfadc23ba58e6b938e152c67e1927243201aede33a", @ANYRESOCT=r11], 0x240}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.124405432s ago: executing program 3 (id=327): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 493.364721ms ago: executing program 3 (id=328): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x8b, 0x2a7, &(0x7f0000000180)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESOCT, @ANYRES64, @ANYBLOB="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", @ANYRES8, @ANYRES32], 0xfd, 0x1e6, &(0x7f0000000880)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80800, 0x1) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000001140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x46) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x40106e80, &(0x7f0000000280)={@desc={0x1, 0x0, @desc1}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x2, @empty, 0x7}, @in={0x2, 0x4e22, @empty}], 0x5c) 244.156973ms ago: executing program 0 (id=329): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x4d, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd2(0x72, 0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x59, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, &(0x7f0000000340), &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 0s ago: executing program 1 (id=330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x10, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004810) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") r1 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="a4da78", 0x3}], 0x1, 0xfffffff7, 0x1, 0x4) kernel console output (not intermixed with test programs): valid bInterval 0, changing to 7 [ 448.855752][ T3072] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.870266][ T3072] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 448.881368][ T3072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.898629][ T6115] netlink: 'syz.4.34': attribute type 6 has an invalid length. [ 449.008622][ T3072] usb 1-1: config 0 descriptor?? [ 449.118015][ T6115] loop4: detected capacity change from 0 to 512 [ 449.173435][ T6115] EXT4-fs: journaled quota format not specified [ 449.281514][ T5866] DVB: Unable to find symbol tda10046_attach() [ 449.288159][ T5866] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 449.297925][ T5866] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 450.226829][ T6115] loop4: detected capacity change from 0 to 32768 [ 450.235898][ T6115] ======================================================= [ 450.235898][ T6115] WARNING: The mand mount option has been deprecated and [ 450.235898][ T6115] and is ignored by this kernel. Remove the mand [ 450.235898][ T6115] option from the mount to silence this warning. [ 450.235898][ T6115] ======================================================= [ 450.429872][ T6110] loop3: detected capacity change from 0 to 128 [ 450.506136][ T6115] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 450.577530][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.590247][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.685572][ T6115] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 450.704451][ T6115] syz_tun: entered promiscuous mode [ 450.735894][ T6115] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 450.799199][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 451.008967][ T5866] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 451.073778][ T5866] usb 4-1: USB disconnect, device number 2 [ 451.248722][ T5815] ocfs2: Unmounting device (7,4) on (node local) [ 452.928369][ T6132] loop1: detected capacity change from 0 to 8 [ 452.981992][ T3072] usbhid 1-1:0.0: can't add hid device: -71 [ 452.988739][ T3072] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 453.040786][ T6128] loop2: detected capacity change from 0 to 1024 [ 453.100417][ T3072] usb 1-1: USB disconnect, device number 3 [ 453.106933][ T6132] SQUASHFS error: Failed to read block 0x1e8: -5 [ 453.114080][ T6132] unable to read xattr id index table [ 453.204088][ T6132] No such timeout policy "syz0" [ 453.332644][ T5866] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 453.632534][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 453.855612][ T5902] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 453.871501][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.882311][ T5902] usb 1-1: Product: syz [ 453.886858][ T5902] usb 1-1: Manufacturer: syz [ 453.892136][ T5902] usb 1-1: SerialNumber: syz [ 453.902205][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 453.927049][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 453.957442][ T5866] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 453.970269][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.979725][ T5866] usb 4-1: Product: syz [ 453.984384][ T5866] usb 4-1: Manufacturer: syz [ 453.989257][ T5866] usb 4-1: SerialNumber: syz [ 454.040776][ T5902] usb 1-1: config 0 descriptor?? [ 454.208924][ T5866] usb 4-1: config 0 descriptor?? [ 454.254740][ T5866] hub 4-1:0.0: bad descriptor, ignoring hub [ 454.261147][ T5866] hub 4-1:0.0: probe with driver hub failed with error -5 [ 454.287816][ T5866] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 454.342120][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.353134][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.670848][ T5866] usb 4-1: USB disconnect, device number 3 [ 454.818709][ T1826] hfsplus: b-tree write err: -5, ino 4 [ 454.946675][ T5902] usb 1-1: Firmware version (0.0) predates our first public release. [ 454.956410][ T5902] usb 1-1: Please update to version 0.2 or newer [ 455.341718][ T5902] usb 1-1: USB disconnect, device number 4 [ 456.173910][ T6151] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 456.351546][ T6143] loop1: detected capacity change from 0 to 32768 [ 456.434219][ T6143] XFS: attr2 mount option is deprecated. [ 456.533693][ T6143] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 456.830426][ T6163] FAULT_INJECTION: forcing a failure. [ 456.830426][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 456.846709][ T6163] CPU: 1 UID: 0 PID: 6163 Comm: syz.0.46 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 456.846867][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 456.846952][ T6163] Call Trace: [ 456.847007][ T6163] [ 456.847059][ T6163] dump_stack_lvl+0x216/0x2d0 [ 456.847261][ T6163] dump_stack+0x1e/0x24 [ 456.847425][ T6163] should_fail_ex+0x77b/0x840 [ 456.847631][ T6163] should_failslab+0x17f/0x210 [ 456.847826][ T6163] kmem_cache_alloc_noprof+0xee/0xe20 [ 456.847976][ T6163] ? __msan_memcpy+0x108/0x1c0 [ 456.848132][ T6163] ? alloc_pid+0xdc/0x1450 [ 456.848325][ T6163] ? kmsan_get_metadata+0x13e/0x1c0 [ 456.848529][ T6163] alloc_pid+0xdc/0x1450 [ 456.848727][ T6163] ? copy_thread+0xa6b/0xe40 [ 456.848935][ T6163] ? kmsan_get_metadata+0x13e/0x1c0 [ 456.849121][ T6163] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 456.849325][ T6163] copy_process+0x2a55/0x5c40 [ 456.849533][ T6163] ? kmsan_get_metadata+0x13e/0x1c0 [ 456.849791][ T6163] vhost_task_create+0x240/0x3f0 [ 456.850016][ T6163] ? __pfx_vhost_task_fn+0x10/0x10 [ 456.850224][ T6163] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 456.850424][ T6163] kvm_mmu_post_init_vm+0x1a1/0x390 [ 456.850633][ T6163] kvm_arch_vcpu_ioctl_run+0x73/0x25c0 [ 456.850805][ T6163] ? kmsan_get_metadata+0x13e/0x1c0 [ 456.850990][ T6163] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 456.851197][ T6163] ? tomoyo_path_number_perm+0x730/0x7d0 [ 456.851402][ T6163] ? kmsan_get_metadata+0x13e/0x1c0 [ 456.851579][ T6163] ? kmsan_get_metadata+0x13e/0x1c0 [ 456.851770][ T6163] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 456.851947][ T6163] ? kmsan_get_metadata+0x13e/0x1c0 [ 456.852150][ T6163] kvm_vcpu_ioctl+0xe77/0x1cb0 [ 456.852353][ T6163] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 456.852507][ T6163] __se_sys_ioctl+0x241/0x430 [ 456.852705][ T6163] __x64_sys_ioctl+0x96/0xe0 [ 456.852877][ T6163] x64_sys_call+0x1a16/0x3c80 [ 456.853075][ T6163] do_syscall_64+0xcd/0x1e0 [ 456.853248][ T6163] ? clear_bhb_loop+0x25/0x80 [ 456.853406][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.853558][ T6163] RIP: 0033:0x7f4c6018d169 [ 456.853674][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.853800][ T6163] RSP: 002b:00007f4c60fec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.853937][ T6163] RAX: ffffffffffffffda RBX: 00007f4c603a5fa0 RCX: 00007f4c6018d169 [ 456.854043][ T6163] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 456.854130][ T6163] RBP: 00007f4c60fec090 R08: 0000000000000000 R09: 0000000000000000 [ 456.854221][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.854307][ T6163] R13: 0000000000000000 R14: 00007f4c603a5fa0 R15: 00007ffe901cbe18 [ 456.854441][ T6163] [ 457.226375][ T6143] XFS (loop1): Ending clean mount [ 457.298110][ T6168] netlink: 'syz.2.47': attribute type 6 has an invalid length. [ 457.313786][ T6143] XFS (loop1): Quotacheck needed: Please wait. [ 457.332263][ T6168] loop2: detected capacity change from 0 to 512 [ 457.514004][ T6168] EXT4-fs: journaled quota format not specified [ 457.537635][ T6143] XFS (loop1): Quotacheck: Done. [ 458.493276][ T6168] loop2: detected capacity change from 0 to 32768 [ 458.518454][ T5803] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 458.603968][ T6168] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 458.650499][ T6173] loop4: detected capacity change from 0 to 128 [ 458.852962][ T6173] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 458.863495][ T6173] FAT-fs (loop4): bogus number of directory entries (203) [ 458.870997][ T6173] FAT-fs (loop4): Can't find a valid FAT filesystem [ 459.027643][ T5807] ocfs2: Unmounting device (7,2) on (node local) [ 459.108248][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 461.019185][ T5902] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 461.281472][ T5902] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 461.291445][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.300094][ T5902] usb 3-1: Product: syz [ 461.304916][ T5902] usb 3-1: Manufacturer: syz [ 461.309836][ T5902] usb 3-1: SerialNumber: syz [ 461.399227][ T5902] usb 3-1: config 0 descriptor?? [ 461.408978][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 461.580119][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 461.640730][ T9] usb 1-1: config 0 has an invalid interface number: 248 but max is 0 [ 461.655729][ T9] usb 1-1: config 0 has no interface number 0 [ 461.664820][ T9] usb 1-1: config 0 interface 248 altsetting 2 bulk endpoint 0xB has invalid maxpacket 8 [ 461.675306][ T9] usb 1-1: config 0 interface 248 has no altsetting 0 [ 461.708162][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.818307][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.875705][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=7c.bc [ 461.885660][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.894463][ T9] usb 1-1: Product: syz [ 461.899162][ T9] usb 1-1: Manufacturer: syz [ 461.904809][ T9] usb 1-1: SerialNumber: syz [ 462.050914][ T9] usb 1-1: config 0 descriptor?? [ 462.072680][ T6192] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 462.204294][ T6197] FAULT_INJECTION: forcing a failure. [ 462.204294][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 462.217803][ T6197] CPU: 1 UID: 0 PID: 6197 Comm: syz.4.58 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 462.217961][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 462.218043][ T6197] Call Trace: [ 462.218098][ T6197] [ 462.218152][ T6197] dump_stack_lvl+0x216/0x2d0 [ 462.218360][ T6197] dump_stack+0x1e/0x24 [ 462.218526][ T6197] should_fail_ex+0x77b/0x840 [ 462.218725][ T6197] should_failslab+0x17f/0x210 [ 462.218918][ T6197] __kvmalloc_node_noprof+0x244/0x13d0 [ 462.219083][ T6197] ? alloc_netdev_mqs+0x1706/0x21b0 [ 462.219264][ T6197] ? kmsan_get_metadata+0x13e/0x1c0 [ 462.219474][ T6197] alloc_netdev_mqs+0x1706/0x21b0 [ 462.219658][ T6197] ? kmsan_get_metadata+0x13e/0x1c0 [ 462.219860][ T6197] rtnl_create_link+0x50f/0x14a0 [ 462.220024][ T6197] ? __pfx_gtp_link_setup+0x10/0x10 [ 462.220243][ T6197] rtnl_newlink_create+0x31c/0x12c0 [ 462.220522][ T6197] ? kmsan_get_metadata+0x13e/0x1c0 [ 462.220723][ T6197] rtnl_newlink+0x2996/0x3880 [ 462.221009][ T6197] ? kmsan_get_metadata+0x13e/0x1c0 [ 462.221204][ T6197] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 462.221389][ T6197] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 462.221574][ T6197] ? apparmor_capable+0x355/0x400 [ 462.221756][ T6197] ? kmsan_get_metadata+0x13e/0x1c0 [ 462.221944][ T6197] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 462.222145][ T6197] ? kmsan_get_metadata+0x13e/0x1c0 [ 462.222331][ T6197] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 462.222545][ T6197] ? __rcu_read_unlock+0x7b/0xe0 [ 462.222692][ T6197] ? __pfx_rtnl_newlink+0x10/0x10 [ 462.222879][ T6197] rtnetlink_rcv_msg+0x1067/0x1420 [ 462.223069][ T6197] ? stack_depot_save_flags+0x37/0x7e0 [ 462.223245][ T6197] ? kmsan_get_metadata+0x13e/0x1c0 [ 462.223478][ T6197] netlink_rcv_skb+0x375/0x650 [ 462.223695][ T6197] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 462.223912][ T6197] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 462.224095][ T6197] rtnetlink_rcv+0x34/0x40 [ 462.224277][ T6197] netlink_unicast+0xf52/0x1260 [ 462.224476][ T6197] netlink_sendmsg+0x10da/0x11e0 [ 462.224684][ T6197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.224858][ T6197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.225033][ T6197] __sock_sendmsg+0x30f/0x380 [ 462.225251][ T6197] ____sys_sendmsg+0x890/0xda0 [ 462.225474][ T6197] ___sys_sendmsg+0x28d/0x3c0 [ 462.225675][ T6197] ? __rcu_read_unlock+0x7b/0xe0 [ 462.225825][ T6197] ? __fget_files+0x443/0x520 [ 462.226036][ T6197] ? kmsan_get_metadata+0x13e/0x1c0 [ 462.226225][ T6197] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 462.226439][ T6197] __x64_sys_sendmsg+0x212/0x3c0 [ 462.226635][ T6197] ? kmsan_get_metadata+0x13e/0x1c0 [ 462.226839][ T6197] x64_sys_call+0x2e0f/0x3c80 [ 462.227041][ T6197] do_syscall_64+0xcd/0x1e0 [ 462.227216][ T6197] ? clear_bhb_loop+0x25/0x80 [ 462.227384][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.227543][ T6197] RIP: 0033:0x7f9ee5b8d169 [ 462.227655][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.227782][ T6197] RSP: 002b:00007f9ee6945038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.227920][ T6197] RAX: ffffffffffffffda RBX: 00007f9ee5da5fa0 RCX: 00007f9ee5b8d169 [ 462.228027][ T6197] RDX: 000000002400c080 RSI: 0000200000000280 RDI: 0000000000000003 [ 462.228123][ T6197] RBP: 00007f9ee6945090 R08: 0000000000000000 R09: 0000000000000000 [ 462.228215][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 462.228301][ T6197] R13: 0000000000000000 R14: 00007f9ee5da5fa0 R15: 00007ffefc407ff8 [ 462.228441][ T6197] [ 462.330247][ T9] hackrf 1-1:0.248: usb_control_msg() failed -71 request 0e [ 462.655817][ T9] hackrf 1-1:0.248: Could not detect board [ 462.662173][ T9] hackrf 1-1:0.248: probe with driver hackrf failed with error -71 [ 463.074159][ T6199] loop1: detected capacity change from 0 to 512 [ 463.187432][ T6199] EXT4-fs (loop1): DAX unsupported by block device. [ 463.897281][ T5902] usb 3-1: Firmware version (0.0) predates our first public release. [ 463.918209][ T5902] usb 3-1: Please update to version 0.2 or newer [ 463.929346][ T9] usb 1-1: USB disconnect, device number 5 [ 463.947281][ T6201] loop4: detected capacity change from 0 to 32768 [ 463.978246][ T6201] XFS: attr2 mount option is deprecated. [ 464.093616][ T5902] usb 3-1: USB disconnect, device number 2 [ 464.118574][ T6201] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 464.435691][ T6201] XFS (loop4): Ending clean mount [ 464.457742][ T6201] XFS (loop4): Quotacheck needed: Please wait. [ 464.578013][ T6201] XFS (loop4): Quotacheck: Done. [ 465.052426][ T5815] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 465.163400][ T6219] netlink: 'syz.3.63': attribute type 6 has an invalid length. [ 465.431033][ T6219] loop3: detected capacity change from 0 to 512 [ 465.586838][ T6219] EXT4-fs: journaled quota format not specified [ 465.691963][ T3072] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 466.115768][ T3072] usb 1-1: device not accepting address 6, error -71 [ 466.123894][ T5866] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 466.483727][ T5866] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 466.493348][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.501841][ T5866] usb 5-1: Product: syz [ 466.506270][ T5866] usb 5-1: Manufacturer: syz [ 466.511475][ T5866] usb 5-1: SerialNumber: syz [ 466.542094][ T6219] loop3: detected capacity change from 0 to 32768 [ 466.644305][ T5866] usb 5-1: config 0 descriptor?? [ 466.721961][ T6219] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 466.750185][ T6234] syz.1.68 uses obsolete (PF_INET,SOCK_PACKET) [ 466.965189][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.985970][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.147881][ T5810] ocfs2: Unmounting device (7,3) on (node local) [ 467.522055][ T5797] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 467.560652][ T6239] loop0: detected capacity change from 0 to 1024 [ 467.625065][ T6239] hfsplus: Unknown parameter '0x00000000ffffffffKRAٌvK' [ 467.691754][ T5866] usb 5-1: Firmware version (0.0) predates our first public release. [ 467.700279][ T5866] usb 5-1: Please update to version 0.2 or newer [ 467.752252][ T5797] usb 3-1: Using ep0 maxpacket: 8 [ 467.821776][ T5797] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 467.836036][ T5797] usb 3-1: config 0 interface 0 has no altsetting 0 [ 467.843442][ T5797] usb 3-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 467.853790][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.975257][ T5866] usb 5-1: USB disconnect, device number 2 [ 468.059796][ T5797] usb 3-1: config 0 descriptor?? [ 468.597066][ T5994] udevd[5994]: failed to send result of seq 10961 to main daemon: Connection refused [ 468.620311][ T5797] nintendo 0003:057E:2017.0002: unknown main item tag 0x0 [ 468.628663][ T5797] nintendo 0003:057E:2017.0002: unbalanced delimiter at end of report description [ 468.849669][ T5797] nintendo 0003:057E:2017.0002: HID parse failed [ 468.920024][ T5797] nintendo 0003:057E:2017.0002: probe - fail = -22 [ 468.927472][ T5797] nintendo 0003:057E:2017.0002: probe with driver nintendo failed with error -22 [ 468.990125][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 469.002433][ T5797] usb 3-1: USB disconnect, device number 3 [ 469.143176][ T6255] loop0: detected capacity change from 0 to 128 [ 469.178535][ T6255] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 469.188438][ T6255] FAT-fs (loop0): bogus number of directory entries (203) [ 469.196569][ T6255] FAT-fs (loop0): Can't find a valid FAT filesystem [ 469.241591][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 469.246487][ T6255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.75'. [ 469.267276][ T5902] usb 5-1: no configurations [ 469.272549][ T5902] usb 5-1: can't read configurations, error -22 [ 469.911105][ T6262] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 469.968028][ T6262] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 470.201559][ T5797] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 470.227118][ T6258] loop3: detected capacity change from 0 to 32768 [ 470.371745][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 470.392377][ T5797] usb 1-1: Using ep0 maxpacket: 8 [ 470.466273][ T6258] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 470.480799][ T5797] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 470.491098][ T6258] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 470.499751][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.509588][ T6258] bcachefs (loop3): Version upgrade required: [ 470.509588][ T6258] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 470.509588][ T6258] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags [ 470.509588][ T6258] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 470.516424][ T5797] usb 1-1: Product: syz [ 470.594852][ T5797] usb 1-1: Manufacturer: syz [ 470.596829][ T6258] bcachefs (loop3): dropping and reconstructing all alloc info [ 470.599685][ T5797] usb 1-1: SerialNumber: syz [ 470.668110][ T6258] bcachefs (loop3): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 470.668230][ T6258] mode=100755 [ 470.668296][ T6258] flags=(15300000) [ 470.668363][ T6258] journal_seq=4 [ 470.668432][ T6258] hash_seed=d483206f1ed95abf [ 470.668510][ T6258] hash_type=siphash [ 470.668578][ T6258] bi_size=100 [ 470.668643][ T6258] bi_sectors=8 [ 470.668710][ T6258] bi_version=1126999418470400 [ 470.668788][ T6258] bi_atime=0 [ 470.668851][ T6258] bi_ctime=0 [ 470.668916][ T6258] bi_mtime=0 [ 470.668980][ T6258] bi_otime=2780562352 [ 470.669049][ T6258] bi_uid=2780562352 [ 470.669115][ T6258] bi_gid=0 [ 470.669180][ T6258] bi_nlink=2780562352 [ 470.669248][ T6258] bi_generation=0 [ 470.669314][ T6258] bi_dev=0 [ 470.669377][ T6258] bi_data_checksum=0 [ 470.669445][ T6258] bi_compression=56 [ 470.669560][ T6258] bi_project=0 [ 470.669630][ T6258] bi_background_compression=0 [ 470.669701][ T6258] bi_data_replicas=0 [ 470.669777][ T6258] bi_promote_target=0 [ 470.669846][ T6258] bi_foreground_target=0 [ 470.669917][ T6258] bi_background_target=0 [ 470.669988][ T6258] bi_erasure_code=0 [ 470.670055][ T6258] bi_fields_set=0 [ 470.670122][ T6258] bi_dir=0 [ 470.670186][ T6258] bi_dir_offset=0 [ 470.670253][ T6258] bi_subvol=0 [ 470.670320][ T6258] bi_parent_subvol=0 [ 470.670389][ T6258] bi_nocow=0 [ 470.670454][ T6258] bi_depth=0 [ 470.670518][ T6258] bi_inodes_32bit=0 [ 470.670588][ T6258] invalid compression opt 55, deleting [ 470.915077][ T6258] bcachefs (loop3): accounting_read... [ 470.936310][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 470.953259][ T6258] done [ 470.956496][ T6258] bcachefs (loop3): alloc_read... done [ 470.972218][ T6258] bcachefs (loop3): snapshots_read... done [ 470.979624][ T6258] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 470.993306][ T6258] bcachefs (loop3): done starting filesystem [ 471.023248][ T5902] usb 5-1: no configurations [ 471.028232][ T5902] usb 5-1: can't read configurations, error -22 [ 471.046598][ T5902] usb usb5-port1: attempt power cycle [ 471.082733][ T5797] usb 1-1: config 0 descriptor?? [ 471.106877][ T5797] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 471.193070][ T5810] bcachefs (loop3): shutting down [ 471.298836][ T5810] bcachefs (loop3): shutdown complete [ 471.412234][ T5902] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 471.547065][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 471.572248][ T5902] usb 5-1: no configurations [ 471.577153][ T5902] usb 5-1: can't read configurations, error -22 [ 471.762683][ T5902] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 472.176248][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 472.197399][ T5902] usb 5-1: device descriptor read/8, error -71 [ 472.312705][ T5902] usb usb5-port1: unable to enumerate USB device [ 472.434449][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 472.444589][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.453076][ T9] usb 3-1: Product: syz [ 472.457594][ T9] usb 3-1: Manufacturer: syz [ 472.462708][ T9] usb 3-1: SerialNumber: syz [ 472.521579][ T6288] netlink: 'syz.4.85': attribute type 11 has an invalid length. [ 472.529559][ T6288] netlink: 132 bytes leftover after parsing attributes in process `syz.4.85'. [ 472.582989][ T6288] team0: Device gtp0 is of different type [ 472.639339][ T9] usb 3-1: config 0 descriptor?? [ 472.718675][ T5797] gspca_sonixj: reg_w1 err -71 [ 472.772671][ T5797] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 472.823360][ T5797] usb 1-1: USB disconnect, device number 8 [ 472.950173][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.960190][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.223168][ T6296] FAULT_INJECTION: forcing a failure. [ 473.223168][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 473.236625][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.4.87 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 473.236784][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 473.236870][ T6296] Call Trace: [ 473.236925][ T6296] [ 473.236980][ T6296] dump_stack_lvl+0x216/0x2d0 [ 473.237182][ T6296] dump_stack+0x1e/0x24 [ 473.237357][ T6296] should_fail_ex+0x77b/0x840 [ 473.237560][ T6296] should_failslab+0x17f/0x210 [ 473.237759][ T6296] __kmalloc_cache_noprof+0xc5/0xe00 [ 473.237918][ T6296] ? alloc_fs_context+0x6b/0xda0 [ 473.238105][ T6296] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 473.238282][ T6296] ? kmsan_get_metadata+0x13e/0x1c0 [ 473.238475][ T6296] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 473.238681][ T6296] alloc_fs_context+0x6b/0xda0 [ 473.238861][ T6296] ? _raw_read_unlock+0x38/0x50 [ 473.239003][ T6296] ? get_fs_type+0x8be/0x960 [ 473.239146][ T6296] ? kmsan_get_metadata+0x13e/0x1c0 [ 473.239348][ T6296] fs_context_for_mount+0x3d/0x50 [ 473.239539][ T6296] do_new_mount+0x26f/0x15e0 [ 473.239726][ T6296] ? kmsan_get_metadata+0x13e/0x1c0 [ 473.239949][ T6296] path_mount+0x742/0x1f10 [ 473.240141][ T6296] ? user_path_at+0x321/0x410 [ 473.240335][ T6296] __se_sys_mount+0x71f/0x800 [ 473.240530][ T6296] ? fput+0x12f/0x170 [ 473.240697][ T6296] __x64_sys_mount+0xe4/0x150 [ 473.240908][ T6296] x64_sys_call+0xed5/0x3c80 [ 473.241109][ T6296] do_syscall_64+0xcd/0x1e0 [ 473.241284][ T6296] ? clear_bhb_loop+0x25/0x80 [ 473.241450][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.241608][ T6296] RIP: 0033:0x7f9ee5b8d169 [ 473.241720][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.241843][ T6296] RSP: 002b:00007f9ee6945038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 473.241978][ T6296] RAX: ffffffffffffffda RBX: 00007f9ee5da5fa0 RCX: 00007f9ee5b8d169 [ 473.242079][ T6296] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 473.242177][ T6296] RBP: 00007f9ee6945090 R08: 0000200000000140 R09: 0000000000000000 [ 473.242273][ T6296] R10: 0000000002200840 R11: 0000000000000246 R12: 0000000000000002 [ 473.242369][ T6296] R13: 0000000000000000 R14: 00007f9ee5da5fa0 R15: 00007ffefc407ff8 [ 473.242501][ T6296] [ 473.683437][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 473.692306][ T9] usb 3-1: Please update to version 0.2 or newer [ 473.806562][ T9] usb 3-1: USB disconnect, device number 4 [ 474.200816][ T6304] loop4: detected capacity change from 0 to 128 [ 474.290103][ T6304] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 474.398332][ T6304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.808747][ T6311] team0: Device gtp0 is of different type [ 475.101550][ T5815] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh [ 475.110721][ T5815] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh [ 475.290850][ T6317] loop2: detected capacity change from 0 to 256 [ 475.337488][ T6317] exfat: Deprecated parameter 'namecase' [ 475.345125][ T6317] exfat: Deprecated parameter 'utf8' [ 475.384277][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.391015][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.422643][ T5815] bond0: (slave syz_tun): Releasing backup interface [ 475.475216][ T5797] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 475.504820][ T6317] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 475.607492][ T5874] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.683618][ T5797] usb 2-1: too many configurations: 89, using maximum allowed: 8 [ 475.857067][ T5797] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 475.867537][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.877681][ T5797] usb 2-1: Product: syz [ 475.884789][ T5797] usb 2-1: Manufacturer: syz [ 475.891456][ T5797] usb 2-1: SerialNumber: syz [ 475.920927][ T5874] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.043173][ T5797] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 476.098280][ T5874] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.305686][ T5874] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.406035][ T5866] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 476.844115][ T5902] usb 2-1: USB disconnect, device number 6 [ 476.983957][ T5874] bridge_slave_1: left allmulticast mode [ 476.989940][ T5874] bridge_slave_1: left promiscuous mode [ 476.997059][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.017201][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 477.042741][ T5874] bridge_slave_0: left allmulticast mode [ 477.048773][ T5874] bridge_slave_0: left promiscuous mode [ 477.057457][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.522133][ T5866] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 477.530006][ T5866] ath9k_htc: Failed to initialize the device [ 477.616346][ T5902] usb 2-1: ath9k_htc: USB layer deinitialized [ 477.692646][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.709146][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 477.719451][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.734122][ T9] usb 3-1: Product: syz [ 477.738599][ T9] usb 3-1: Manufacturer: syz [ 477.745921][ T9] usb 3-1: SerialNumber: syz [ 477.768272][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.780702][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 477.815436][ T5874] bond0 (unregistering): Released all slaves [ 477.955471][ T5870] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 478.577475][ T5874] hsr_slave_0: left promiscuous mode [ 478.600774][ T5874] hsr_slave_1: left promiscuous mode [ 478.609468][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.617634][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.662174][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.670079][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.715360][ T5874] veth1_macvtap: left promiscuous mode [ 478.722195][ T5874] veth0_macvtap: left promiscuous mode [ 478.728198][ T5874] veth1_vlan: left promiscuous mode [ 478.734618][ T5874] veth0_vlan: left promiscuous mode [ 479.042900][ T5870] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 479.053369][ T5870] ath9k_htc: Failed to initialize the device [ 479.307395][ T5870] usb 3-1: ath9k_htc: USB layer deinitialized [ 479.547676][ T5866] usb 3-1: USB disconnect, device number 5 [ 479.553532][ T6332] loop0: detected capacity change from 0 to 128 [ 479.693009][ T6332] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 479.703634][ T6332] FAT-fs (loop0): Filesystem has been set read-only [ 479.793545][ T5870] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 479.850316][ T6332] netlink: 79 bytes leftover after parsing attributes in process `syz.0.101'. [ 479.945611][ T5874] team0 (unregistering): Port device team_slave_1 removed [ 480.076006][ T5874] team0 (unregistering): Port device team_slave_0 removed [ 480.367026][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.377618][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.396603][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.423771][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.436317][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.834816][ T5870] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 480.844548][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.853173][ T5870] usb 4-1: Product: syz [ 480.857818][ T5870] usb 4-1: Manufacturer: syz [ 480.862952][ T5870] usb 4-1: SerialNumber: syz [ 481.027339][ T5870] usb 4-1: config 0 descriptor?? [ 481.346766][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.356946][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.862129][ T6352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.933524][ T6335] chnl_net:caif_netlink_parms(): no params data found [ 482.001844][ T6356] loop0: detected capacity change from 0 to 256 [ 482.010859][ T5870] usb 4-1: Firmware version (0.0) predates our first public release. [ 482.020344][ T5870] usb 4-1: Please update to version 0.2 or newer [ 482.035919][ T6356] exfat: Deprecated parameter 'namecase' [ 482.042535][ T6356] exfat: Deprecated parameter 'utf8' [ 482.198357][ T6356] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 482.297357][ T5870] usb 4-1: USB disconnect, device number 4 [ 482.556183][ T5821] Bluetooth: hci4: command tx timeout [ 483.156592][ T5870] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 483.239064][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.247703][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.258848][ T6335] bridge_slave_0: entered allmulticast mode [ 483.269309][ T6335] bridge_slave_0: entered promiscuous mode [ 483.307672][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.315948][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.324143][ T6335] bridge_slave_1: entered allmulticast mode [ 483.334305][ T6335] bridge_slave_1: entered promiscuous mode [ 483.348461][ T5870] usb 3-1: too many configurations: 89, using maximum allowed: 8 [ 483.491668][ T5864] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 483.572714][ T5870] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 483.582501][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.590976][ T5870] usb 3-1: Product: syz [ 483.595822][ T5870] usb 3-1: Manufacturer: syz [ 483.600771][ T5870] usb 3-1: SerialNumber: syz [ 483.600974][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.658916][ T5870] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 483.712045][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 483.733978][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.746127][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.751762][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.115'. [ 483.756496][ T5864] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 483.768655][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.115'. [ 483.792079][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.825208][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.890631][ T5864] usb 1-1: config 0 descriptor?? [ 483.913542][ T5902] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 484.139457][ T6335] team0: Port device team_slave_0 added [ 484.210517][ T5866] usb 3-1: USB disconnect, device number 6 [ 484.302381][ T6335] team0: Port device team_slave_1 added [ 484.456093][ T6373] fuse: Bad value for 'fd' [ 484.532279][ T5864] usbhid 1-1:0.0: can't add hid device: -71 [ 484.539330][ T5864] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 484.623574][ T5864] usb 1-1: USB disconnect, device number 9 [ 484.635272][ T5821] Bluetooth: hci4: command tx timeout [ 484.664596][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.672959][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.699239][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.708106][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.876314][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.883942][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.912905][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.002436][ T6386] 9pnet_fd: Insufficient options for proto=fd [ 485.035021][ T5902] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 485.044547][ T5902] ath9k_htc: Failed to initialize the device [ 485.126078][ T5866] usb 3-1: ath9k_htc: USB layer deinitialized [ 485.400928][ T6335] hsr_slave_0: entered promiscuous mode [ 485.420458][ T6335] hsr_slave_1: entered promiscuous mode [ 485.429824][ T6335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.437938][ T6335] Cannot create hsr debugfs directory [ 485.445202][ T5864] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 485.499574][ T6393] loop0: detected capacity change from 0 to 256 [ 485.516186][ T6393] exfat: Deprecated parameter 'namecase' [ 485.523524][ T6393] exfat: Deprecated parameter 'utf8' [ 485.565307][ T6393] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 485.673164][ T5866] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 485.686614][ T5864] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 485.697150][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.705757][ T5864] usb 4-1: Product: syz [ 485.715351][ T5864] usb 4-1: Manufacturer: syz [ 485.720234][ T5864] usb 4-1: SerialNumber: syz [ 485.741487][ T5797] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 485.750404][ T5864] usb 4-1: config 0 descriptor?? [ 485.861932][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 485.930415][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.942777][ T5866] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 485.952677][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.998928][ T5797] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 486.008803][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.019185][ T5797] usb 2-1: Product: syz [ 486.024520][ T5797] usb 2-1: Manufacturer: syz [ 486.030251][ T5797] usb 2-1: SerialNumber: syz [ 486.041034][ T5866] usb 3-1: config 0 descriptor?? [ 486.052192][ T5797] usb 2-1: config 0 descriptor?? [ 486.066798][ T5866] hub 3-1:0.0: USB hub found [ 486.298819][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.308455][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.449163][ T5866] hub 3-1:0.0: 1 port detected [ 486.603915][ T6396] loop0: detected capacity change from 0 to 256 [ 486.711801][ T5821] Bluetooth: hci4: command tx timeout [ 486.884632][ T6396] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe1cea053, utbl_chksum : 0x7319d30d) [ 487.188179][ T5797] usb 2-1: Firmware version (0.0) predates our first public release. [ 487.197158][ T5797] usb 2-1: Please update to version 0.2 or newer [ 487.287047][ T6335] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 487.312797][ T6335] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 487.359614][ T6335] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 487.500408][ T3072] usb 3-1: USB disconnect, device number 7 [ 487.520877][ T5866] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 487.529888][ T6335] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 487.604912][ T5797] usb 2-1: USB disconnect, device number 7 [ 488.462247][ T6406] loop2: detected capacity change from 0 to 128 [ 488.494537][ T5797] usb 4-1: USB disconnect, device number 5 [ 488.659542][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.795745][ T5821] Bluetooth: hci4: command tx timeout [ 488.970409][ T6335] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.183000][ T6413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.127'. [ 489.407306][ T6335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.418676][ T6335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.616126][ T6410] loop3: detected capacity change from 0 to 32768 [ 489.677733][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.685646][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.709760][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.717801][ T5868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.224469][ T5902] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 490.432585][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 490.530112][ T5902] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 490.541949][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.550295][ T5902] usb 2-1: Product: syz [ 490.557233][ T5902] usb 2-1: Manufacturer: syz [ 490.562383][ T5902] usb 2-1: SerialNumber: syz [ 490.579630][ T5902] usb 2-1: config 0 descriptor?? [ 490.598172][ T5902] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 490.761811][ T3072] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 491.006415][ T3072] usb 1-1: Using ep0 maxpacket: 8 [ 491.054529][ T3072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.066071][ T3072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.076419][ T3072] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 491.085910][ T3072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.256702][ T3072] usb 1-1: config 0 descriptor?? [ 491.262862][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.397605][ T6431] loop2: detected capacity change from 0 to 256 [ 491.485999][ T6431] exfat: Deprecated parameter 'namecase' [ 491.493186][ T6431] exfat: Deprecated parameter 'utf8' [ 491.723737][ T6431] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 491.745818][ T6427] fuse: Bad value for 'fd' [ 491.834447][ T3072] usbhid 1-1:0.0: can't add hid device: -71 [ 491.841487][ T3072] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 491.933339][ T3072] usb 1-1: USB disconnect, device number 10 [ 492.124296][ T5902] gspca_sonixj: reg_w1 err -71 [ 492.182935][ T5902] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 492.216192][ T5902] usb 2-1: USB disconnect, device number 8 [ 493.127098][ T5902] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 493.371030][ T5902] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 493.383011][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.399581][ T6440] loop2: detected capacity change from 0 to 32768 [ 493.408732][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.419159][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 493.542981][ T6440] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 493.657082][ T6440] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 493.735108][ T6440] veth0_macvtap: left promiscuous mode [ 493.772822][ T5902] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 493.782888][ T5902] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 493.798988][ T5902] usb 1-1: Manufacturer: syz [ 493.976550][ T5902] usb 1-1: config 0 descriptor?? [ 494.021805][ T6452] loop3: detected capacity change from 0 to 64 [ 494.347240][ T5807] ocfs2: Unmounting device (7,2) on (node local) [ 494.439631][ T5902] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 494.478975][ T5902] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 494.579925][ T5902] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 494.683437][ T6458] tun0: tun_chr_ioctl cmd 1074025675 [ 494.689410][ T6458] tun0: persist enabled [ 494.698885][ T6458] tun0: tun_chr_ioctl cmd 1074025675 [ 494.704860][ T6458] tun0: persist enabled [ 494.955783][ T6335] veth0_vlan: entered promiscuous mode [ 495.040392][ T6335] veth1_vlan: entered promiscuous mode [ 495.266464][ T6464] loop0: detected capacity change from 0 to 512 [ 495.285678][ T6466] loop3: detected capacity change from 0 to 256 [ 495.333628][ T6466] exfat: Deprecated parameter 'namecase' [ 495.346080][ T6466] exfat: Deprecated parameter 'utf8' [ 495.359587][ T6464] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 495.381093][ T6335] veth0_macvtap: entered promiscuous mode [ 495.420364][ T6335] veth1_macvtap: entered promiscuous mode [ 495.476381][ T6464] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 495.584246][ T6466] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 495.623788][ T6464] EXT4-fs error (device loop0): ext4_orphan_get:1390: comm syz.0.134: inode #15: comm syz.0.134: iget: illegal inode # [ 495.696599][ T6464] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.134: couldn't read orphan inode 15 (err -117) [ 495.709887][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.721125][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.731984][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.743013][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.760206][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.773145][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.783773][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.794669][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.810300][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.869686][ T6464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.910210][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.922121][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.925771][ T5797] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 495.932696][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.957645][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.969976][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.980874][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.991478][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.003102][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.018687][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.083531][ T3072] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 496.282502][ T3072] usb 2-1: Using ep0 maxpacket: 8 [ 496.288689][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.315505][ T6335] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.326216][ T6335] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.341796][ T6335] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.350924][ T6335] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.391611][ T3072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.403473][ T3072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.414275][ T3072] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 496.424073][ T3072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.274403][ T6473] loop2: detected capacity change from 0 to 32768 [ 497.292781][ T3072] usb 2-1: config 0 descriptor?? [ 497.770990][ T6470] fuse: Bad value for 'fd' [ 497.830804][ T3072] usbhid 2-1:0.0: can't add hid device: -71 [ 497.837813][ T3072] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 497.889107][ T3072] usb 2-1: USB disconnect, device number 9 [ 497.947301][ T5876] usb 1-1: USB disconnect, device number 11 [ 498.905045][ T6477] sctp: [Deprecated]: syz.3.145 (pid 6477) Use of int in maxseg socket option. [ 498.905045][ T6477] Use struct sctp_assoc_value instead [ 499.973766][ T6499] loop1: detected capacity change from 0 to 256 [ 500.035663][ T6493] loop0: detected capacity change from 0 to 32768 [ 500.074711][ T6493] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 500.122137][ T6499] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 500.135999][ T6499] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 500.197994][ T6493] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 500.237604][ T6493] veth0_macvtap: left promiscuous mode [ 500.531844][ T5902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 500.608639][ T5811] ocfs2: Unmounting device (7,0) on (node local) [ 500.742584][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 500.757713][ T5864] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 500.793918][ T5902] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 500.805212][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.816883][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 1024 [ 500.828464][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 500.839102][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.945692][ T5902] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 500.956576][ T5902] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 500.972372][ T5902] usb 3-1: Manufacturer: syz [ 500.981842][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 501.033236][ T5902] usb 3-1: config 0 descriptor?? [ 501.063801][ T5864] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 501.078997][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.089993][ T5864] usb 4-1: Product: syz [ 501.094853][ T5864] usb 4-1: Manufacturer: syz [ 501.099972][ T5864] usb 4-1: SerialNumber: syz [ 501.215881][ T5864] usb 4-1: config 0 descriptor?? [ 501.288811][ T5864] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 501.693633][ T5902] rc_core: IR keymap rc-hauppauge not found [ 501.700127][ T5902] Registered IR keymap rc-empty [ 501.747761][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 501.771752][ T6519] loop1: detected capacity change from 0 to 256 [ 501.794800][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 501.832781][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 501.852681][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 501.903872][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.029139][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.062377][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.113182][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.152155][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.183625][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.198689][ T6519] FAT-fs (loop1): Directory bread(block 64) failed [ 502.204706][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.205798][ T6519] FAT-fs (loop1): Directory bread(block 65) failed [ 502.220117][ T6519] FAT-fs (loop1): Directory bread(block 66) failed [ 502.227359][ T6519] FAT-fs (loop1): Directory bread(block 67) failed [ 502.238426][ T6519] FAT-fs (loop1): Directory bread(block 68) failed [ 502.243747][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.245990][ T6519] FAT-fs (loop1): Directory bread(block 69) failed [ 502.259310][ T6519] FAT-fs (loop1): Directory bread(block 70) failed [ 502.267160][ T6519] FAT-fs (loop1): Directory bread(block 71) failed [ 502.274434][ T6519] FAT-fs (loop1): Directory bread(block 72) failed [ 502.281530][ T6519] FAT-fs (loop1): Directory bread(block 73) failed [ 502.380594][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.439461][ T5902] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.467917][ T5902] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 502.478991][ T5902] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 502.545869][ T6523] loop0: detected capacity change from 0 to 128 [ 502.637735][ T6523] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 502.769807][ T6523] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 502.870020][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.882124][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.967580][ T6523] FAULT_INJECTION: forcing a failure. [ 502.967580][ T6523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.976785][ T5832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.981932][ T6523] CPU: 0 UID: 0 PID: 6523 Comm: syz.0.153 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 502.982127][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 502.982219][ T6523] Call Trace: [ 502.982278][ T6523] [ 502.982336][ T6523] dump_stack_lvl+0x216/0x2d0 [ 502.982550][ T6523] dump_stack+0x1e/0x24 [ 502.982726][ T6523] should_fail_ex+0x77b/0x840 [ 502.982939][ T6523] should_fail+0x2a/0x40 [ 502.983119][ T6523] should_fail_usercopy+0x2e/0x40 [ 502.983315][ T6523] strncpy_from_user+0x39/0x540 [ 502.983485][ T6523] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 502.983704][ T6523] getname_flags+0x18d/0xa40 [ 502.983945][ T6523] __x64_sys_renameat2+0xc1/0x1f0 [ 502.984191][ T6523] x64_sys_call+0x3a5d/0x3c80 [ 502.984401][ T6523] do_syscall_64+0xcd/0x1e0 [ 502.984585][ T6523] ? clear_bhb_loop+0x25/0x80 [ 502.984754][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.984921][ T6523] RIP: 0033:0x7f4c6018d169 [ 502.985037][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.985179][ T6523] RSP: 002b:00007f4c60fec038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 502.985328][ T6523] RAX: ffffffffffffffda RBX: 00007f4c603a5fa0 RCX: 00007f4c6018d169 [ 502.985442][ T6523] RDX: ffffffffffffff9c RSI: 0000200000000080 RDI: ffffffffffffff9c [ 502.985555][ T6523] RBP: 00007f4c60fec090 R08: 0000000000000004 R09: 0000000000000000 [ 502.985651][ T6523] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 502.985748][ T6523] R13: 0000000000000000 R14: 00007f4c603a5fa0 R15: 00007ffe901cbe18 [ 502.985888][ T6523] [ 503.168177][ T5832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.420704][ T5811] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.029223][ T5902] usb 3-1: USB disconnect, device number 8 [ 504.323004][ T6532] loop1: detected capacity change from 0 to 32768 [ 504.661621][ T5876] usb 4-1: USB disconnect, device number 6 [ 504.921977][ T5902] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 504.988834][ T6538] loop5: detected capacity change from 0 to 2048 [ 505.049972][ T6538] udf: Unknown parameter '' [ 505.092917][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 505.108103][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.119659][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.130202][ T5902] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 505.139938][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.219157][ T5902] usb 3-1: config 0 descriptor?? [ 505.287704][ T6538] loop5: detected capacity change from 0 to 256 [ 505.383636][ T6538] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d) [ 505.649891][ T6534] fuse: Bad value for 'fd' [ 505.763270][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 505.770049][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 505.818112][ T5902] usb 3-1: USB disconnect, device number 9 [ 505.951783][ T5876] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 506.553638][ T6550] FAULT_INJECTION: forcing a failure. [ 506.553638][ T6550] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 506.568201][ T6550] CPU: 0 UID: 0 PID: 6550 Comm: syz.5.163 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 506.568359][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 506.568444][ T6550] Call Trace: [ 506.568498][ T6550] [ 506.568551][ T6550] dump_stack_lvl+0x216/0x2d0 [ 506.568763][ T6550] dump_stack+0x1e/0x24 [ 506.568930][ T6550] should_fail_ex+0x77b/0x840 [ 506.569132][ T6550] should_fail_alloc_page+0x235/0x2b0 [ 506.569344][ T6550] __alloc_frozen_pages_noprof+0x32e/0xe30 [ 506.569598][ T6550] alloc_pages_mpol+0x4cd/0x890 [ 506.569794][ T6550] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 506.570000][ T6550] vma_alloc_folio_noprof+0x44e/0x820 [ 506.570223][ T6550] handle_mm_fault+0xa82d/0xe360 [ 506.570450][ T6550] ? kmsan_report+0x280/0x2d0 [ 506.570725][ T6550] exc_page_fault+0x41e/0x750 [ 506.570903][ T6550] asm_exc_page_fault+0x2b/0x30 [ 506.571048][ T6550] RIP: 0033:0x7f19cd73a78b [ 506.571163][ T6550] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 506.571280][ T6550] RSP: 002b:00007f19ce655e10 EFLAGS: 00010246 [ 506.571401][ T6550] RAX: 00007f19ce657f30 RBX: 00007f19cd97d620 RCX: 0000000000000000 [ 506.571498][ T6550] RDX: 00007f19ce657f78 RSI: 00007f19cd7ecbd8 RDI: 00007f19ce655e30 [ 506.571609][ T6550] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 506.571694][ T6550] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 506.571781][ T6550] R13: 0000000000000000 R14: 00007f19cd9a5fa0 R15: 00007fff0a0e9bc8 [ 506.571915][ T6550] [ 506.743976][ T6550] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 506.943361][ T6547] loop3: detected capacity change from 0 to 32768 [ 506.988944][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 507.040605][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.062307][ T6547] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 507.172401][ T5876] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 507.182921][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.191411][ T5876] usb 1-1: Product: syz [ 507.195862][ T5876] usb 1-1: Manufacturer: syz [ 507.201013][ T5876] usb 1-1: SerialNumber: syz [ 507.343958][ T5876] usb 1-1: config 0 descriptor?? [ 507.371972][ T5876] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 507.462644][ T6547] XFS (loop3): Ending clean mount [ 507.480771][ T6547] XFS (loop3): Quotacheck needed: Please wait. [ 507.568241][ T6547] XFS (loop3): Quotacheck: Done. [ 507.605423][ T5876] gspca_sunplus: reg_r err -32 [ 507.736339][ T5810] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 508.521533][ T3072] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 508.735008][ T5876] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 508.746841][ T3072] usb 3-1: Using ep0 maxpacket: 8 [ 508.817660][ T5876] usb 1-1: USB disconnect, device number 12 [ 508.875918][ T3072] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 508.884903][ T3072] usb 3-1: can't read configurations, error -71 [ 509.155940][ T6586] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 509.199915][ T6584] loop0: detected capacity change from 0 to 1024 [ 509.400294][ T6584] loop0: detected capacity change from 0 to 512 [ 509.439773][ T6590] loop3: detected capacity change from 0 to 47 [ 509.747989][ T5876] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 509.840556][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.850893][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.925465][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.940267][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.972270][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.984252][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.994078][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 510.023188][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.035170][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.045659][ T5876] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 510.055300][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.113204][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.122633][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.174482][ T5876] usb 6-1: config 0 descriptor?? [ 510.261955][ T3072] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 510.268283][ T6601] netlink: 'syz.0.178': attribute type 6 has an invalid length. [ 510.379649][ T6601] loop0: detected capacity change from 0 to 512 [ 510.408364][ T6601] EXT4-fs: journaled quota format not specified [ 510.453011][ T3072] usb 3-1: Using ep0 maxpacket: 8 [ 510.488892][ T6591] fuse: Bad value for 'fd' [ 510.515988][ T3072] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 510.526905][ T3072] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.590458][ T5876] usbhid 6-1:0.0: can't add hid device: -71 [ 510.602754][ T5876] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 510.630856][ T3072] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.641014][ T3072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.649550][ T3072] usb 3-1: Product: ᠉ [ 510.654098][ T3072] usb 3-1: Manufacturer: 篱퉞ﻏ듲ꏧ㣥솾뻛鷜犃盇፵햼㛽ꨈ⾽毅砬ྊᜅ∙ᐼⓗࡔ䇡ᴾ佾᰾œ昁㦠䇑ꉕ簑ꮴ鼄錁㴬ꈎꣽ弹갪₻쩊䏚ﵦ턝꟦帿朎‎ᎍ舟뗾棑᳝娉氡鬆俱鿂䚊ᚦ៬퍄룴ॴ㜨퉗ದ恡탽㦐Ⲅ瑫뗮䱺阵蜰渪掻괞㓠㽘챓 [ 510.683550][ T3072] usb 3-1: SerialNumber: 땣㈆幁掎ꤪ庒씆异’딼犑鱋䓧槕蕄௾⢽肘ऊ햆檤⋀빝똣炵ও玆䉀ꁗ뒀뒠ঢ়췾꾜噀抣⯎ಳ亲ැⶐ쐶研㈻ﴚ숶䷮⤪馩鰵ퟋ竕曨褣౭蒱ꉩ䠓▃㐬姂Ἄ矅둜䕺䳥쀶ꇺဠ豤㌳狡뙛๴㷖솶బᭋﺍ㋯㯉燑塲ᑺﺍ뎫ᶸ쿔⨽ꛟ㊓ഝ傂鿢䈎 [ 510.774332][ T5876] usb 6-1: USB disconnect, device number 2 [ 511.383796][ T3072] usb 3-1: 0:2 : does not exist [ 511.487821][ T6601] loop0: detected capacity change from 0 to 32768 [ 511.560609][ T6601] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 511.562365][ T3072] usb 3-1: USB disconnect, device number 12 [ 511.766907][ T5811] ocfs2: Unmounting device (7,0) on (node local) [ 511.898286][ T6612] netlink: 40 bytes leftover after parsing attributes in process `syz.5.182'. [ 512.756982][ T6622] Invalid logical block size (254) [ 512.822240][ T3072] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 513.056003][ T3072] usb 6-1: Using ep0 maxpacket: 8 [ 513.130196][ T3072] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 513.140250][ T3072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.149858][ T3072] usb 6-1: Product: syz [ 513.158070][ T3072] usb 6-1: Manufacturer: syz [ 513.164040][ T3072] usb 6-1: SerialNumber: syz [ 513.283401][ T3072] usb 6-1: config 0 descriptor?? [ 513.320845][ T3072] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 513.517218][ T6631] loop1: detected capacity change from 0 to 512 [ 513.566509][ T6631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.776193][ T5902] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 513.920797][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.988509][ T6636] netlink: 'syz.0.193': attribute type 6 has an invalid length. [ 514.041924][ T6636] loop0: detected capacity change from 0 to 512 [ 514.048855][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 514.101711][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.113444][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.123865][ T5902] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 514.133504][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.162822][ T6636] EXT4-fs: journaled quota format not specified [ 514.550626][ T6640] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 515.067423][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.196'. [ 515.103768][ T6636] loop0: detected capacity change from 0 to 32768 [ 515.124608][ T5902] usb 4-1: config 0 descriptor?? [ 515.258835][ T6636] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 515.531133][ T6629] fuse: Bad value for 'fd' [ 515.566237][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 515.574388][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 515.588063][ T5811] ocfs2: Unmounting device (7,0) on (node local) [ 515.622789][ T5902] usb 4-1: USB disconnect, device number 7 [ 515.768496][ T6651] loop1: detected capacity change from 0 to 256 [ 515.905036][ T30] audit: type=1800 audit(1744276615.246:3): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.199" name="file2" dev="loop1" ino=38 res=0 errno=0 [ 516.163203][ T3072] usb 6-1: USB disconnect, device number 3 [ 517.401751][ T5902] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 517.710937][ T6677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.208'. [ 517.778759][ T5902] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 517.787677][ T5902] usb 6-1: config 0 has no interface number 0 [ 517.794333][ T5902] usb 6-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.805859][ T5902] usb 6-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 517.818496][ T5902] usb 6-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 517.830240][ T5902] usb 6-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.844996][ T5864] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 517.879029][ T5902] usb 6-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 517.888728][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.897278][ T5902] usb 6-1: Product: syz [ 517.898386][ T6678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.209'. [ 517.901852][ T5902] usb 6-1: Manufacturer: syz [ 517.915920][ T5902] usb 6-1: SerialNumber: syz [ 517.928334][ T5902] usb 6-1: config 0 descriptor?? [ 517.942817][ T6667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 517.950791][ T6667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 518.015066][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.027382][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.098884][ T5864] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 518.108805][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.117737][ T5864] usb 4-1: Product: syz [ 518.122532][ T5864] usb 4-1: Manufacturer: syz [ 518.127704][ T5864] usb 4-1: SerialNumber: syz [ 518.359044][ T5902] mct_u232 6-1:0.139: MCT U232 converter detected [ 518.405972][ T5902] usb 6-1: MCT U232 converter now attached to ttyUSB0 [ 518.449403][ T5902] usb 6-1: USB disconnect, device number 4 [ 518.546491][ T5902] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 518.557507][ T5902] mct_u232 6-1:0.139: device disconnected [ 518.738134][ T5864] usb 4-1: 0:2 : does not exist [ 518.883302][ T3072] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 518.945221][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.955337][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.101930][ T3072] usb 2-1: Using ep0 maxpacket: 8 [ 519.156761][ T3072] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 519.166662][ T3072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.175241][ T3072] usb 2-1: Product: syz [ 519.179687][ T3072] usb 2-1: Manufacturer: syz [ 519.184923][ T3072] usb 2-1: SerialNumber: syz [ 519.293815][ T3072] usb 2-1: config 0 descriptor?? [ 519.336617][ T3072] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 519.562207][ T6690] loop0: detected capacity change from 0 to 256 [ 519.678338][ T6690] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 519.682814][ T5864] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 519.891568][ T5864] usb 6-1: Using ep0 maxpacket: 8 [ 519.916892][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.931291][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.942101][ T5864] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 519.951747][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.012394][ T5864] usb 6-1: config 0 descriptor?? [ 520.043106][ T5876] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 520.265597][ T5876] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 520.274815][ T5876] usb 1-1: config 0 has no interface number 0 [ 520.281720][ T5876] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.316898][ T5876] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 520.329379][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.339267][ T5876] usb 1-1: Product: syz [ 520.344270][ T5876] usb 1-1: Manufacturer: syz [ 520.349442][ T5876] usb 1-1: SerialNumber: syz [ 520.404103][ T5876] usb 1-1: config 0 descriptor?? [ 520.446491][ T6688] fuse: Bad value for 'fd' [ 520.518726][ T5864] usbhid 6-1:0.0: can't add hid device: -71 [ 520.528849][ T5876] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 520.547650][ T5864] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 520.620014][ T5864] usb 6-1: USB disconnect, device number 5 [ 520.740048][ T5902] usb 4-1: USB disconnect, device number 8 [ 520.928667][ T6697] ipip0: entered promiscuous mode [ 520.982817][ T3072] gspca_sonixj: i2c_w8 err -71 [ 521.043110][ T3072] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 521.065592][ T3072] usb 2-1: USB disconnect, device number 10 [ 522.187258][ T5876] usb 1-1: USB disconnect, device number 13 [ 522.199885][ T5876] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 522.454371][ T6711] netlink: 40 bytes leftover after parsing attributes in process `syz.3.222'. [ 522.503075][ T6709] FAULT_INJECTION: forcing a failure. [ 522.503075][ T6709] name failslab, interval 1, probability 0, space 0, times 0 [ 522.516487][ T6709] CPU: 0 UID: 0 PID: 6709 Comm: syz.1.221 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 522.516652][ T6709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 522.516735][ T6709] Call Trace: [ 522.516790][ T6709] [ 522.516844][ T6709] dump_stack_lvl+0x216/0x2d0 [ 522.517043][ T6709] dump_stack+0x1e/0x24 [ 522.517206][ T6709] should_fail_ex+0x77b/0x840 [ 522.517404][ T6709] should_failslab+0x17f/0x210 [ 522.517606][ T6709] __kmalloc_noprof+0x17c/0x1260 [ 522.517754][ T6709] ? tomoyo_encode+0x5fc/0xa50 [ 522.517913][ T6709] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 522.518111][ T6709] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 522.518313][ T6709] tomoyo_encode+0x5fc/0xa50 [ 522.518509][ T6709] tomoyo_realpath_from_path+0x9dd/0xaa0 [ 522.518699][ T6709] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 522.518917][ T6709] tomoyo_path_number_perm+0x1cf/0x7d0 [ 522.519125][ T6709] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 522.519316][ T6709] ? kmsan_get_metadata+0x13e/0x1c0 [ 522.519499][ T6709] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 522.519754][ T6709] tomoyo_file_ioctl+0x3f/0x50 [ 522.519943][ T6709] security_file_ioctl+0x145/0x590 [ 522.520175][ T6709] __se_sys_ioctl+0xd0/0x430 [ 522.520351][ T6709] __x64_sys_ioctl+0x96/0xe0 [ 522.520520][ T6709] x64_sys_call+0x1a16/0x3c80 [ 522.520720][ T6709] do_syscall_64+0xcd/0x1e0 [ 522.520891][ T6709] ? clear_bhb_loop+0x25/0x80 [ 522.521048][ T6709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.521207][ T6709] RIP: 0033:0x7f040418d169 [ 522.521315][ T6709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.521438][ T6709] RSP: 002b:00007f040509c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.521575][ T6709] RAX: ffffffffffffffda RBX: 00007f04043a5fa0 RCX: 00007f040418d169 [ 522.521688][ T6709] RDX: 0000200000005700 RSI: 000000004080aebf RDI: 0000000000000005 [ 522.521781][ T6709] RBP: 00007f040509c090 R08: 0000000000000000 R09: 0000000000000000 [ 522.521871][ T6709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.521955][ T6709] R13: 0000000000000000 R14: 00007f04043a5fa0 R15: 00007fffe316fef8 [ 522.522087][ T6709] [ 522.760138][ T6709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 523.302855][ T6714] loop5: detected capacity change from 0 to 32768 [ 523.461692][ T6714] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 523.519457][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.223'. [ 524.229200][ T5902] IPVS: starting estimator thread 0... [ 524.341955][ T6727] IPVS: using max 192 ests per chain, 9600 per kthread [ 524.571659][ T5902] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 524.878746][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 524.890709][ T5902] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 524.900713][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.960536][ T30] audit: type=1800 audit(1744276624.296:4): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.223" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 525.056351][ T5902] usb 3-1: config 0 descriptor?? [ 525.093317][ T6714] overlayfs: upper fs does not support tmpfile. [ 525.103013][ T6714] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 525.110883][ T6714] overlayfs: failed to set xattr on upper [ 525.117044][ T6714] overlayfs: ...falling back to redirect_dir=nofollow. [ 525.124365][ T6714] overlayfs: ...falling back to index=off. [ 525.130499][ T6714] overlayfs: ...falling back to uuid=null. [ 525.140635][ T6714] overlayfs: upper fs missing required features. [ 525.145744][ T6735] overlay: ./file1 is not a directory [ 525.232239][ T5864] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 525.298944][ T6726] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 525.388736][ T6726] No control pipe specified [ 525.421731][ T6726] trusted_key: encrypted_key: insufficient parameters specified [ 525.499254][ T5902] ath6kl: Failed to submit usb control message: -71 [ 525.506760][ T5902] ath6kl: unable to send the bmi data to the device: -71 [ 525.515868][ T5902] ath6kl: Unable to send get target info: -71 [ 525.524518][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 525.558337][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.570345][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.580772][ T5864] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 525.590457][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.625620][ T5902] ath6kl: Failed to init ath6kl core: -71 [ 525.639158][ T5902] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 525.696668][ T5864] usb 1-1: config 0 descriptor?? [ 525.720276][ T5902] usb 3-1: USB disconnect, device number 13 [ 525.805381][ T6335] ocfs2: Unmounting device (7,5) on (node local) [ 525.972205][ T6732] fuse: Bad value for 'fd' [ 525.993163][ T5864] usbhid 1-1:0.0: can't add hid device: -71 [ 526.000064][ T5864] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 526.053058][ T5864] usb 1-1: USB disconnect, device number 14 [ 526.204759][ T6743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.234'. [ 526.295753][ T6745] netlink: 'syz.3.235': attribute type 6 has an invalid length. [ 526.403729][ T6745] loop3: detected capacity change from 0 to 512 [ 526.427146][ T6745] EXT4-fs: journaled quota format not specified [ 527.177410][ T5864] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 527.287551][ T6745] loop3: detected capacity change from 0 to 32768 [ 527.500568][ T5864] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 527.511449][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.516155][ T6745] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 527.519642][ T5864] usb 2-1: Product: syz [ 527.534499][ T5864] usb 2-1: Manufacturer: syz [ 527.539402][ T5864] usb 2-1: SerialNumber: syz [ 527.730575][ T6758] loop5: detected capacity change from 0 to 64 [ 527.741023][ T5810] ocfs2: Unmounting device (7,3) on (node local) [ 527.765677][ T5864] usb 2-1: config 0 descriptor?? [ 528.662976][ T5864] usb 2-1: Firmware version (0.0) predates our first public release. [ 528.671924][ T5864] usb 2-1: Please update to version 0.2 or newer [ 528.734170][ T6765] netlink: 776 bytes leftover after parsing attributes in process `syz.5.243'. [ 528.868086][ T5864] usb 2-1: USB disconnect, device number 11 [ 529.500305][ T6776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.247'. [ 529.982717][ T5876] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 530.026594][ T6777] loop5: detected capacity change from 0 to 4096 [ 530.074505][ T6777] EXT4-fs (loop5): #clusters per group too big: 32768 [ 530.169497][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 530.183211][ T6788] netlink: 'syz.0.251': attribute type 6 has an invalid length. [ 530.246469][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.261510][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.272806][ T5876] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 530.282421][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.401671][ T6788] loop0: detected capacity change from 0 to 512 [ 530.434987][ T5876] usb 2-1: config 0 descriptor?? [ 530.448383][ T6788] EXT4-fs: journaled quota format not specified [ 531.394100][ T6788] loop0: detected capacity change from 0 to 32768 [ 531.561129][ T6788] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 531.619764][ T6780] fuse: Bad value for 'fd' [ 531.639544][ T5876] usbhid 2-1:0.0: can't add hid device: -71 [ 531.646540][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 531.661965][ T5876] usb 2-1: USB disconnect, device number 12 [ 531.794715][ T5811] ocfs2: Unmounting device (7,0) on (node local) [ 532.912088][ T5876] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 533.072027][ T3072] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 533.160701][ T5876] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 533.170786][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.179403][ T5876] usb 2-1: Product: syz [ 533.183999][ T5876] usb 2-1: Manufacturer: syz [ 533.188878][ T5876] usb 2-1: SerialNumber: syz [ 533.225879][ T5876] usb 2-1: config 0 descriptor?? [ 533.293319][ T3072] usb 4-1: Using ep0 maxpacket: 32 [ 533.346497][ T3072] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.357798][ T3072] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 533.398516][ T3072] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 533.408622][ T3072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.417513][ T3072] usb 4-1: Product: syz [ 533.422370][ T3072] usb 4-1: Manufacturer: syz [ 533.430116][ T3072] usb 4-1: SerialNumber: syz [ 533.484700][ T3072] usb 4-1: config 0 descriptor?? [ 533.685468][ T5876] usb 2-1: Firmware version (0.0) predates our first public release. [ 533.694061][ T5876] usb 2-1: Please update to version 0.2 or newer [ 533.755826][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 533.756013][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 533.762343][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 533.768542][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 533.822805][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.5.261'. [ 534.028195][ T5876] usb 2-1: USB disconnect, device number 13 [ 534.969326][ T6824] loop2: detected capacity change from 0 to 32768 [ 535.162070][ T6824] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 535.213151][ T30] audit: type=1800 audit(1744276634.556:5): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.263" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 535.233873][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.245701][ T5864] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 535.402028][ T5902] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 535.453858][ T5807] ocfs2: Unmounting device (7,2) on (node local) [ 535.494797][ T5864] usb 6-1: too many configurations: 89, using maximum allowed: 8 [ 535.625987][ T5902] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 535.636600][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.656752][ T5902] usb 2-1: config 0 descriptor?? [ 535.705324][ T5864] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 535.715435][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.724085][ T5864] usb 6-1: Product: syz [ 535.728539][ T5864] usb 6-1: Manufacturer: syz [ 535.733784][ T5864] usb 6-1: SerialNumber: syz [ 535.749160][ T5902] cp210x 2-1:0.0: cp210x converter detected [ 535.792660][ T5864] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 535.912433][ T5870] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 536.122042][ T5876] usb 4-1: USB disconnect, device number 9 [ 536.169100][ T5902] usb 2-1: cp210x converter now attached to ttyUSB0 [ 536.246443][ T5902] usb 2-1: USB disconnect, device number 14 [ 536.279068][ T3072] usb 6-1: USB disconnect, device number 6 [ 536.335024][ T5902] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 536.345507][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 536.354726][ T5902] cp210x 2-1:0.0: device disconnected [ 536.712497][ T5876] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 536.834323][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.841563][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.941869][ T5876] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.951864][ T5870] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 536.952791][ T5870] ath9k_htc: Failed to initialize the device [ 536.959270][ T5876] usb 4-1: config 0 interface 0 has no altsetting 0 [ 536.973117][ T5876] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 536.982621][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.055646][ T3072] usb 6-1: ath9k_htc: USB layer deinitialized [ 537.087561][ T5876] usb 4-1: config 0 descriptor?? [ 537.511763][ T6840] netlink: 'syz.2.266': attribute type 6 has an invalid length. [ 537.542439][ T5902] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 537.590652][ T6840] loop2: detected capacity change from 0 to 512 [ 537.618745][ T5876] hid-alps 0003:044E:120B.0004: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 537.649687][ T6840] EXT4-fs: journaled quota format not specified [ 537.735733][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 537.895524][ T5870] usb 4-1: USB disconnect, device number 10 [ 537.930707][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.950148][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.964148][ T5902] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 537.974927][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.216650][ T5902] usb 2-1: config 0 descriptor?? [ 538.496735][ T6840] loop2: detected capacity change from 0 to 32768 [ 538.702157][ T6838] fuse: Bad value for 'fd' [ 538.724602][ T6840] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 538.804474][ T5902] usbhid 2-1:0.0: can't add hid device: -71 [ 538.811583][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 538.897512][ T5902] usb 2-1: USB disconnect, device number 15 [ 538.976112][ T5807] ocfs2: Unmounting device (7,2) on (node local) [ 539.644635][ T6854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.274'. [ 539.922031][ T5876] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 540.162351][ T5876] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 540.172531][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.180909][ T5876] usb 6-1: Product: syz [ 540.188304][ T5876] usb 6-1: Manufacturer: syz [ 540.194200][ T5876] usb 6-1: SerialNumber: syz [ 540.227379][ T6861] Zero length message leads to an empty skb [ 540.274253][ T5876] usb 6-1: config 0 descriptor?? [ 540.361727][ T3072] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 540.361986][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 540.542366][ T3072] usb 1-1: Using ep0 maxpacket: 32 [ 540.568409][ T3072] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.580010][ T3072] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 540.663210][ T3072] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 540.673091][ T3072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.681924][ T3072] usb 1-1: Product: syz [ 540.686594][ T3072] usb 1-1: Manufacturer: syz [ 540.691943][ T3072] usb 1-1: SerialNumber: syz [ 540.739500][ T3072] usb 1-1: config 0 descriptor?? [ 540.768691][ T5876] usb 6-1: Firmware version (0.0) predates our first public release. [ 540.777523][ T5876] usb 6-1: Please update to version 0.2 or newer [ 541.084145][ T5876] usb 6-1: USB disconnect, device number 7 [ 541.402355][ T6877] netlink: 'syz.2.281': attribute type 6 has an invalid length. [ 541.428894][ T6876] loop3: detected capacity change from 0 to 256 [ 541.471009][ T6877] loop2: detected capacity change from 0 to 512 [ 541.487681][ T6877] EXT4-fs: journaled quota format not specified [ 541.506947][ T3072] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 541.630536][ T30] audit: type=1800 audit(1744276640.966:6): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.280" name="file2" dev="loop3" ino=41 res=0 errno=0 [ 541.709932][ T6876] syz.3.280: attempt to access beyond end of device [ 541.709932][ T6876] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 541.715895][ T3072] usb 2-1: too many configurations: 89, using maximum allowed: 8 [ 541.862455][ T6881] loop5: detected capacity change from 0 to 256 [ 541.951918][ T3072] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 541.961714][ T3072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.965966][ T6883] loop2: detected capacity change from 0 to 512 [ 541.969941][ T3072] usb 2-1: Product: syz [ 541.970053][ T3072] usb 2-1: Manufacturer: syz [ 541.970163][ T3072] usb 2-1: SerialNumber: syz [ 542.044761][ T3072] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 542.135912][ T6883] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 542.184891][ T5876] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 542.257163][ T6883] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 542.313686][ T6883] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 542.366944][ T30] audit: type=1800 audit(1744276641.686:7): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.284" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 542.394684][ T6883] System zones: 0-2, 18-18, 34-34 [ 542.435903][ T6883] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 542.528279][ T6888] loop3: detected capacity change from 0 to 512 [ 542.556594][ T5902] usb 2-1: USB disconnect, device number 16 [ 542.597233][ T6883] EXT4-fs (loop2): 1 truncate cleaned up [ 542.605956][ T6883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.656980][ T6883] EXT4-fs error (device loop2): ext4_find_dest_de:2054: inode #2: block 3: comm syz.2.282: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 542.677938][ T6883] EXT4-fs (loop2): Remounting filesystem read-only [ 542.766894][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.780635][ T6888] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 542.923401][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.254677][ T5797] usb 1-1: USB disconnect, device number 15 [ 543.279091][ T5876] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 543.287555][ T5876] ath9k_htc: Failed to initialize the device [ 543.307038][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.372751][ T5902] usb 2-1: ath9k_htc: USB layer deinitialized [ 543.502411][ T3072] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 543.660849][ T5821] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 543.707670][ T3072] usb 6-1: Using ep0 maxpacket: 8 [ 543.772807][ T3072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.784547][ T3072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.795018][ T3072] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 543.804532][ T3072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.993341][ T3072] usb 6-1: config 0 descriptor?? [ 544.317315][ T6898] fuse: Bad value for 'fd' [ 544.355460][ T3072] usbhid 6-1:0.0: can't add hid device: -71 [ 544.363439][ T3072] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 544.430338][ T3072] usb 6-1: USB disconnect, device number 8 [ 544.484180][ T6907] loop0: detected capacity change from 0 to 4096 [ 544.525313][ T6916] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.291' sets config #-318767105 [ 544.576076][ T6917] netlink: 'syz.3.292': attribute type 6 has an invalid length. [ 544.643121][ T6918] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 544.690366][ T6917] loop3: detected capacity change from 0 to 512 [ 544.785907][ T6917] EXT4-fs: journaled quota format not specified [ 545.007094][ T5902] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 545.111132][ T6922] FAULT_INJECTION: forcing a failure. [ 545.111132][ T6922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.125405][ T6922] CPU: 0 UID: 0 PID: 6922 Comm: syz.1.294 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 545.125551][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 545.125626][ T6922] Call Trace: [ 545.125677][ T6922] [ 545.125733][ T6922] dump_stack_lvl+0x216/0x2d0 [ 545.125941][ T6922] dump_stack+0x1e/0x24 [ 545.126099][ T6922] should_fail_ex+0x77b/0x840 [ 545.126303][ T6922] should_fail+0x2a/0x40 [ 545.126463][ T6922] should_fail_usercopy+0x2e/0x40 [ 545.126653][ T6922] strncpy_from_user+0x39/0x540 [ 545.126831][ T6922] ? __msan_memcpy+0x108/0x1c0 [ 545.127005][ T6922] __se_sys_memfd_create+0x5c2/0x11e0 [ 545.127252][ T6922] __x64_sys_memfd_create+0x6c/0xa0 [ 545.127474][ T6922] x64_sys_call+0x13f7/0x3c80 [ 545.127670][ T6922] do_syscall_64+0xcd/0x1e0 [ 545.127853][ T6922] ? clear_bhb_loop+0x25/0x80 [ 545.128015][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.128174][ T6922] RIP: 0033:0x7f040418d169 [ 545.128282][ T6922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.128413][ T6922] RSP: 002b:00007f040509be18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 545.128555][ T6922] RAX: ffffffffffffffda RBX: 00000000000059dd RCX: 00007f040418d169 [ 545.128670][ T6922] RDX: 00007f040509bef0 RSI: 0000000000000000 RDI: 00007f040420f0cc [ 545.128788][ T6922] RBP: 0000200000000580 R08: 00007f040509bbb7 R09: 00007f040509be40 [ 545.129003][ T6922] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 545.129096][ T6922] R13: 00007f040509bef0 R14: 00007f040509beb0 R15: 0000200000000280 [ 545.129237][ T6922] [ 545.301587][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.480912][ T5902] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 545.490746][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.499338][ T5902] usb 3-1: Product: syz [ 545.502514][ T3072] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 545.503851][ T5902] usb 3-1: Manufacturer: syz [ 545.524269][ T5902] usb 3-1: SerialNumber: syz [ 545.538959][ T5902] usb 3-1: config 0 descriptor?? [ 545.691763][ T3072] usb 4-1: Using ep0 maxpacket: 8 [ 545.785449][ T3072] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 545.795572][ T3072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.804077][ T3072] usb 4-1: Product: syz [ 545.808515][ T3072] usb 4-1: Manufacturer: syz [ 545.814594][ T3072] usb 4-1: SerialNumber: syz [ 545.911530][ T5876] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 545.954000][ T3072] usb 4-1: config 0 descriptor?? [ 546.006354][ T3072] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 546.067531][ T5902] usb 3-1: Firmware version (0.0) predates our first public release. [ 546.076307][ T5902] usb 3-1: Please update to version 0.2 or newer [ 546.109364][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 546.175356][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 546.188002][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 546.199461][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 546.209768][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 546.221646][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 546.357937][ T5876] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 546.367971][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.376782][ T5876] usb 6-1: Product: syz [ 546.381549][ T5876] usb 6-1: Manufacturer: syz [ 546.386689][ T5876] usb 6-1: SerialNumber: syz [ 546.405129][ T5876] usb 6-1: config 0 descriptor?? [ 546.407046][ T5902] usb 3-1: USB disconnect, device number 14 [ 546.441547][ T3072] gspca_sonixj: reg_r err -32 [ 546.447163][ T3072] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 546.482057][ T5870] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 546.520984][ T6924] loop3: detected capacity change from 0 to 256 [ 546.578567][ T6924] vfat: Bad value for 'shortname' [ 546.666454][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 546.697327][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.708554][ T5870] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 546.825954][ T6924] loop3: detected capacity change from 0 to 1024 [ 547.110003][ T6936] loop5: detected capacity change from 0 to 256 [ 547.165403][ T6936] exfat: Unknown parameter '' [ 547.257715][ T3072] usb 4-1: USB disconnect, device number 11 [ 547.471092][ T5870] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 547.480828][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.489442][ T5870] usb 1-1: Product: syz [ 547.494058][ T5870] usb 1-1: Manufacturer: syz [ 547.498996][ T5870] usb 1-1: SerialNumber: syz [ 547.524885][ T5870] usb 1-1: config 0 descriptor?? [ 547.605391][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -110 [ 547.633128][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.666803][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.690216][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.710578][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.731560][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.742854][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.759548][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.835927][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.844748][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.853271][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.862926][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.878466][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.891529][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.912071][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.934216][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.942120][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 547.967360][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 548.009100][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 548.026959][ T5876] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 548.034025][ T5876] input input7: Timeout waiting for response from device. [ 548.175675][ T5876] usb 6-1: USB disconnect, device number 9 [ 548.254149][ T3072] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 548.498995][ T3072] usb 3-1: too many configurations: 89, using maximum allowed: 8 [ 548.743632][ T3072] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 548.753438][ T3072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.762058][ T3072] usb 3-1: Product: syz [ 548.766503][ T3072] usb 3-1: Manufacturer: syz [ 548.771856][ T3072] usb 3-1: SerialNumber: syz [ 548.900301][ T6947] netlink: 'syz.5.302': attribute type 14 has an invalid length. [ 549.047777][ T3072] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 549.215607][ T6943] loop3: detected capacity change from 0 to 32768 [ 549.268931][ T5876] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 549.391846][ T5870] usb 1-1: USB disconnect, device number 16 [ 549.738914][ T6943] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,norecovery,nojournal_transaction_names,nocow [ 549.759988][ T6943] bcachefs (loop3): invalid bkey in superblock btree=dirents level=1: u64s 11 type extent SPOS_MAX len 0 ver 281474976710656: durability: 0 (invalid extent entry 0000000000000000) [ 549.760141][ T6943] invalid key type for btree internal btree node (extent), deleting [ 549.789154][ T6943] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 549.798507][ T6943] bcachefs (loop3): Version upgrade from 1.20: directory_size to 1.7: mi_btree_bitmap incomplete [ 549.798507][ T6943] Doing compatible version upgrade from 1.20: directory_size to 1.25: extent_flags [ 549.798507][ T6943] running recovery passes: check_extents_to_backpointers [ 549.897298][ T5870] usb 3-1: USB disconnect, device number 15 [ 549.959387][ T6943] bcachefs (loop3): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870913:U32_MAX len 0 ver 0: (unpack error) [ 549.959524][ T6943] invalid variable length fields, deleting [ 550.028363][ T6948] loop5: detected capacity change from 0 to 64 [ 550.047252][ T6943] bcachefs (loop3): bcachefs (loop3): error validating btree node at btree alloc level 0/0 [ 550.047370][ T6943] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 550.047509][ T6943] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 550.090740][ T6943] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree alloc level 0/0 [ 550.090865][ T6943] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 550.090984][ T6943] node offset 16/24 bset u64s 0: unsupported bset version 3.519 [ 550.132184][ T6943] bcachefs (loop3): flagging btree alloc lost data [ 550.144794][ T6943] bcachefs (loop3): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 550.160299][ T6943] bcachefs (loop3): running explicit recovery pass check_allocations (8), currently at recovery_pass_empty (0) [ 550.173287][ T6943] bcachefs (loop3): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 550.185039][ T6943] bcachefs (loop3): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 550.198489][ T6943] bcachefs (loop3): running explicit recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 550.212787][ T6943] bcachefs (loop3): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 550.258145][ T6943] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree freespace level 0/0 [ 550.258275][ T6943] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 550.258402][ T6943] node offset 0/32 bset u64s 0: checksum error, type none: got should be , shutting down [ 550.258513][ T6943] inconsistency detected - emergency read only at journal seq 10 [ 550.305983][ T6943] bcachefs (loop3): flagging btree freespace lost data [ 550.315498][ T6943] bcachefs (loop3): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 550.331573][ T5876] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 550.332352][ T5876] ath9k_htc: Failed to initialize the device [ 550.352928][ T5870] usb 3-1: ath9k_htc: USB layer deinitialized [ 550.370381][ T6943] bcachefs (loop3): bcachefs (loop3): error validating btree node at btree backpointers level 0/0 [ 550.370509][ T6943] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 550.370642][ T6943] node offset 8/24 bset u64s 42 bset byte offset 264: keys out of order: u64s 9 type backpointer 9223090561878065152:8912896:0 len 0 ver 0 > u64s 9 type backpointer 0:8921088:0 len 0 ver 0, fixing [ 550.419581][ T6943] bcachefs (loop3): btree_node_read_work: rewriting btree node at due to error [ 550.419581][ T6943] btree=backpointers level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 550.437074][ T6961] FAULT_INJECTION: forcing a failure. [ 550.437074][ T6961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.444685][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.465388][ T6961] CPU: 1 UID: 0 PID: 6961 Comm: syz.0.303 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 550.465553][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 550.465640][ T6961] Call Trace: [ 550.465697][ T6961] [ 550.465750][ T6961] dump_stack_lvl+0x216/0x2d0 [ 550.465951][ T6961] dump_stack+0x1e/0x24 [ 550.466111][ T6961] should_fail_ex+0x77b/0x840 [ 550.466316][ T6961] should_fail+0x2a/0x40 [ 550.466489][ T6961] should_fail_usercopy+0x2e/0x40 [ 550.466679][ T6961] _copy_from_user+0x35/0x110 [ 550.466854][ T6961] kstrtouint_from_user+0x75/0x140 [ 550.467009][ T6961] ? proc_fail_nth_write+0x43/0x2e0 [ 550.467174][ T6961] ? vfs_write+0x48a/0x1540 [ 550.467341][ T6961] proc_fail_nth_write+0x62/0x2e0 [ 550.467521][ T6961] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 550.467690][ T6961] vfs_write+0x48a/0x1540 [ 550.467849][ T6961] ? stack_depot_save_flags+0x37/0x7e0 [ 550.468056][ T6943] bcachefs (loop3): check_topology... [ 550.468019][ T6961] ? kmsan_get_metadata+0x13e/0x1c0 [ 550.468208][ T6961] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 550.468434][ T6961] ksys_write+0x240/0x4b0 [ 550.468603][ T6961] ? kmsan_get_metadata+0x13e/0x1c0 [ 550.468840][ T6961] __x64_sys_write+0x93/0xe0 [ 550.469028][ T6961] x64_sys_call+0x34de/0x3c80 [ 550.469239][ T6961] do_syscall_64+0xcd/0x1e0 [ 550.469444][ T6961] ? clear_bhb_loop+0x25/0x80 [ 550.469623][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.469793][ T6961] RIP: 0033:0x7f4c6018bc1f [ 550.469915][ T6961] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 550.470060][ T6961] RSP: 002b:00007f4c60fec030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 550.470212][ T6961] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c6018bc1f [ 550.470321][ T6961] RDX: 0000000000000001 RSI: 00007f4c60fec0a0 RDI: 0000000000000005 [ 550.470429][ T6961] RBP: 00007f4c60fec090 R08: 0000000000000000 R09: 0000000000000000 [ 550.470527][ T6961] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 550.470620][ T6961] R13: 0000000000000000 R14: 00007f4c603a5fa0 R15: 00007ffe901cbe18 [ 550.470764][ T6961] [ 550.722845][ T6943] done [ 550.725847][ T6943] bcachefs (loop3): accounting_read... done [ 550.741119][ T6943] bcachefs (loop3): alloc_read... done [ 550.749440][ T6943] bcachefs (loop3): snapshots_read... done [ 550.765263][ T6943] bcachefs (loop3): done starting filesystem [ 551.222514][ T5810] bcachefs (loop3): shutting down [ 551.333610][ T6966] netlink: 'syz.2.305': attribute type 6 has an invalid length. [ 551.439096][ T5810] bcachefs (loop3): shutdown complete [ 551.449026][ T6966] loop2: detected capacity change from 0 to 512 [ 551.499927][ T6966] EXT4-fs: journaled quota format not specified [ 551.651531][ T5876] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 551.864014][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 551.915013][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.928104][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.938976][ T5876] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 551.948676][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.037688][ T5876] usb 1-1: config 0 descriptor?? [ 552.251678][ T3072] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 552.431854][ T3072] usb 3-1: Using ep0 maxpacket: 16 [ 552.489708][ T3072] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.500974][ T3072] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.560478][ T6969] fuse: Bad value for 'fd' [ 552.604687][ T3072] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.615121][ T3072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.624369][ T3072] usb 3-1: Product: syz [ 552.629051][ T3072] usb 3-1: Manufacturer: syz [ 552.634595][ T3072] usb 3-1: SerialNumber: syz [ 552.724687][ T5876] usbhid 1-1:0.0: can't add hid device: -71 [ 552.732392][ T5876] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 552.786625][ T5876] usb 1-1: USB disconnect, device number 17 [ 552.929480][ T3072] usb 3-1: 0:2 : does not exist [ 552.992915][ T3072] usb 3-1: USB disconnect, device number 16 [ 553.772759][ T6992] loop1: detected capacity change from 0 to 128 [ 553.821044][ T6992] vfat: Unknown parameter '00000000000000000000004?G' [ 553.992827][ T5870] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 554.081951][ T3072] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 554.222853][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 554.255693][ T3072] usb 1-1: too many configurations: 89, using maximum allowed: 8 [ 554.268334][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.337729][ T5870] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 554.347437][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.356127][ T5870] usb 6-1: Product: syz [ 554.360580][ T5870] usb 6-1: Manufacturer: syz [ 554.365649][ T5870] usb 6-1: SerialNumber: syz [ 554.456730][ T5870] usb 6-1: config 0 descriptor?? [ 554.469635][ T3072] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 554.479431][ T3072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.488304][ T3072] usb 1-1: Product: syz [ 554.492886][ T3072] usb 1-1: Manufacturer: syz [ 554.494978][ T5870] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 554.497645][ T3072] usb 1-1: SerialNumber: syz [ 554.596374][ T3072] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 554.717940][ T5870] gspca_sunplus: reg_r err -32 [ 554.766835][ T5797] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 555.071566][ C0] hrtimer: interrupt took 382279 ns [ 555.083978][ T5902] usb 1-1: USB disconnect, device number 18 [ 555.864952][ T5870] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 556.099004][ T5797] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 556.107073][ T5797] ath9k_htc: Failed to initialize the device [ 556.118825][ T5902] usb 1-1: ath9k_htc: USB layer deinitialized [ 556.167757][ T7001] loop2: detected capacity change from 0 to 40427 [ 556.193362][ T7001] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3fffff [ 556.272042][ T7001] F2FS-fs (loop2): invalid crc value [ 556.552418][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.319'. [ 556.607637][ T7001] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 556.708308][ T7001] F2FS-fs (loop2): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x8a/0x470 [ 556.983691][ T5797] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 557.107358][ T5902] usb 6-1: USB disconnect, device number 10 [ 557.137472][ T7015] netlink: 'syz.0.320': attribute type 6 has an invalid length. [ 557.171785][ T5797] usb 3-1: Using ep0 maxpacket: 16 [ 557.218244][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.229984][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.241376][ T5797] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 557.250800][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.403838][ T5797] usb 3-1: config 0 descriptor?? [ 557.439041][ T5797] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 557.446842][ T5797] usb 3-1: No valid video chain found. [ 557.464725][ T7015] loop0: detected capacity change from 0 to 512 [ 557.538636][ T7015] EXT4-fs: journaled quota format not specified [ 557.620534][ T5797] usb 3-1: USB disconnect, device number 17 [ 557.917277][ T7020] loop6: detected capacity change from 0 to 2 [ 558.494493][ T5807] syz-executor: attempt to access beyond end of device [ 558.494493][ T5807] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 558.509426][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 558.509597][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 558.509682][ T5807] Call Trace: [ 558.509737][ T5807] [ 558.509788][ T5807] dump_stack_lvl+0x216/0x2d0 [ 558.509987][ T5807] dump_stack+0x1e/0x24 [ 558.510145][ T5807] f2fs_handle_critical_error+0x9c6/0xc60 [ 558.510374][ T5807] f2fs_stop_checkpoint+0x60/0x70 [ 558.510566][ T5807] f2fs_write_end_io+0xd69/0x1e20 [ 558.510810][ T5807] ? f2fs_write_end_io+0x13a1/0x1e20 [ 558.511011][ T5807] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 558.511211][ T5807] bio_endio+0xdd2/0xfa0 [ 558.511410][ T5807] submit_bio_noacct+0x223/0x2710 [ 558.511674][ T5807] submit_bio+0x58a/0x5b0 [ 558.511865][ T5807] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.512077][ T5807] f2fs_submit_write_bio+0x9e/0x270 [ 558.512262][ T5807] __submit_merged_bio+0x175/0x6b0 [ 558.512442][ T5807] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.512660][ T5807] f2fs_submit_merged_write_cond+0x406/0x510 [ 558.512876][ T5807] f2fs_write_data_pages+0x5103/0x58b0 [ 558.513224][ T5807] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.513413][ T5807] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.513630][ T5807] ? folios_put_refs+0x73/0xbf0 [ 558.513813][ T5807] ? filter_irq_stacks+0x60/0x1b0 [ 558.514021][ T5807] ? stack_depot_save_flags+0x37/0x7e0 [ 558.514214][ T5807] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 558.514398][ T5807] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.514594][ T5807] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.514793][ T5807] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 558.514991][ T5807] do_writepages+0x427/0xc30 [ 558.515191][ T5807] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 558.515374][ T5807] ? _raw_spin_unlock+0x30/0x50 [ 558.515557][ T5807] filemap_fdatawrite+0x1fe/0x250 [ 558.515806][ T5807] f2fs_sync_dirty_inodes+0x2d8/0xa30 [ 558.516047][ T5807] f2fs_write_checkpoint+0x1052/0x2c00 [ 558.516400][ T5807] kill_f2fs_super+0x3ac/0x8e0 [ 558.516563][ T5807] ? __pfx_kill_f2fs_super+0x10/0x10 [ 558.516715][ T5807] deactivate_locked_super+0xe0/0x3f0 [ 558.516871][ T5807] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 558.517065][ T5807] deactivate_super+0x14f/0x160 [ 558.517226][ T5807] cleanup_mnt+0x6c2/0x740 [ 558.517386][ T5807] ? __pfx___cleanup_mnt+0x10/0x10 [ 558.517542][ T5807] __cleanup_mnt+0x22/0x30 [ 558.517679][ T5807] task_work_run+0x268/0x310 [ 558.517851][ T5807] syscall_exit_to_user_mode+0xbf/0x160 [ 558.518034][ T5807] do_syscall_64+0xda/0x1e0 [ 558.518209][ T5807] ? clear_bhb_loop+0x25/0x80 [ 558.518368][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.518533][ T5807] RIP: 0033:0x7fb43638e497 [ 558.518646][ T5807] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 558.518781][ T5807] RSP: 002b:00007ffe705417e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 558.518923][ T5807] RAX: 0000000000000000 RBX: 00007fb43640e51c RCX: 00007fb43638e497 [ 558.519019][ T5807] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe705418a0 [ 558.519111][ T5807] RBP: 00007ffe705418a0 R08: 0000000000000000 R09: 0000000000000000 [ 558.519204][ T5807] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe70542930 [ 558.519304][ T5807] R13: 00007fb43640e51c R14: 000000000008834a R15: 00007ffe70542970 [ 558.519441][ T5807] [ 558.867467][ T5807] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 558.876485][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 558.876653][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 558.876751][ T5807] Call Trace: [ 558.876808][ T5807] [ 558.876861][ T5807] dump_stack_lvl+0x216/0x2d0 [ 558.877066][ T5807] dump_stack+0x1e/0x24 [ 558.877232][ T5807] f2fs_handle_critical_error+0x9c6/0xc60 [ 558.877464][ T5807] f2fs_stop_checkpoint+0x60/0x70 [ 558.877660][ T5807] f2fs_write_end_io+0xd69/0x1e20 [ 558.877909][ T5807] ? f2fs_write_end_io+0x13a1/0x1e20 [ 558.878113][ T5807] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 558.878309][ T5807] bio_endio+0xdd2/0xfa0 [ 558.878511][ T5807] submit_bio_noacct+0x223/0x2710 [ 558.878775][ T5807] submit_bio+0x58a/0x5b0 [ 558.878969][ T5807] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.879182][ T5807] f2fs_submit_write_bio+0x9e/0x270 [ 558.879377][ T5807] __submit_merged_bio+0x175/0x6b0 [ 558.879577][ T5807] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.879799][ T5807] f2fs_submit_merged_write_cond+0x406/0x510 [ 558.880019][ T5807] f2fs_write_data_pages+0x5103/0x58b0 [ 558.880368][ T5807] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.880556][ T5807] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.880760][ T5807] ? folios_put_refs+0x73/0xbf0 [ 558.880946][ T5807] ? filter_irq_stacks+0x60/0x1b0 [ 558.881156][ T5807] ? stack_depot_save_flags+0x37/0x7e0 [ 558.881333][ T5807] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 558.881504][ T5807] ? kmsan_get_metadata+0x13e/0x1c0 [ 558.881686][ T5807] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 558.881896][ T5807] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 558.882096][ T5807] do_writepages+0x427/0xc30 [ 558.882303][ T5807] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 558.882493][ T5807] ? _raw_spin_unlock+0x30/0x50 [ 558.882667][ T5807] filemap_fdatawrite+0x1fe/0x250 [ 558.882927][ T5807] f2fs_sync_dirty_inodes+0x2d8/0xa30 [ 558.883176][ T5807] f2fs_write_checkpoint+0x1052/0x2c00 [ 558.883527][ T5807] kill_f2fs_super+0x3ac/0x8e0 [ 558.883696][ T5807] ? __pfx_kill_f2fs_super+0x10/0x10 [ 558.883846][ T5807] deactivate_locked_super+0xe0/0x3f0 [ 558.884006][ T5807] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 558.884202][ T5807] deactivate_super+0x14f/0x160 [ 558.884365][ T5807] cleanup_mnt+0x6c2/0x740 [ 558.884527][ T5807] ? __pfx___cleanup_mnt+0x10/0x10 [ 558.884683][ T5807] __cleanup_mnt+0x22/0x30 [ 558.884827][ T5807] task_work_run+0x268/0x310 [ 558.885033][ T5807] syscall_exit_to_user_mode+0xbf/0x160 [ 558.885215][ T5807] do_syscall_64+0xda/0x1e0 [ 558.885391][ T5807] ? clear_bhb_loop+0x25/0x80 [ 558.885554][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.885730][ T5807] RIP: 0033:0x7fb43638e497 [ 558.885843][ T5807] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 558.885977][ T5807] RSP: 002b:00007ffe705417e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 558.886118][ T5807] RAX: 0000000000000000 RBX: 00007fb43640e51c RCX: 00007fb43638e497 [ 558.886218][ T5807] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe705418a0 [ 558.886313][ T5807] RBP: 00007ffe705418a0 R08: 0000000000000000 R09: 0000000000000000 [ 558.886406][ T5807] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe70542930 [ 558.886505][ T5807] R13: 00007fb43640e51c R14: 000000000008834a R15: 00007ffe70542970 [ 558.886643][ T5807] [ 559.233797][ T5807] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 560.355979][ T5797] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 560.561706][ T5797] usb 2-1: Using ep0 maxpacket: 8 [ 560.603564][ T5797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.615221][ T5797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.626101][ T5797] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 560.635667][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.681845][ T3072] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 560.774594][ T5797] usb 2-1: config 0 descriptor?? [ 560.882164][ T3072] usb 6-1: Using ep0 maxpacket: 16 [ 560.894305][ T3072] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 560.966799][ T3072] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 560.978090][ T3072] usb 6-1: can't read configurations, error -61 [ 561.152571][ T7028] fuse: Bad value for 'fd' [ 561.162263][ T3072] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 561.203387][ T5797] usbhid 2-1:0.0: can't add hid device: -71 [ 561.210374][ T5797] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 561.253949][ T5797] usb 2-1: USB disconnect, device number 17 [ 561.387437][ T3072] usb 6-1: Using ep0 maxpacket: 16 [ 561.402531][ T3072] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 561.440705][ T3072] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 561.449178][ T3072] usb 6-1: can't read configurations, error -61 [ 561.503780][ T3072] usb usb6-port1: attempt power cycle [ 561.661512][ T7032] loop3: detected capacity change from 0 to 64 [ 561.759286][ T7032] hfs: keylen 94 too large [ 561.764546][ T7032] hfs: request for non-existent node 1818584064 in B*Tree [ 561.774552][ T7032] hfs: request for non-existent node 1818584064 in B*Tree [ 561.881639][ T3072] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 561.945746][ T3072] usb 6-1: Using ep0 maxpacket: 16 [ 561.967199][ T7032] hfs: keylen 94 too large [ 561.972275][ T7032] ===================================================== [ 561.979743][ T7032] BUG: KMSAN: uninit-value in hfs_brec_find+0x65e/0x980 [ 561.987753][ T7032] hfs_brec_find+0x65e/0x980 [ 561.992729][ T7032] hfs_brec_read+0x3f/0x1a0 [ 562.000515][ T7032] hfs_lookup+0x1ce/0x3d0 [ 562.006242][ T7032] lookup_one_qstr_excl+0x216/0x710 [ 562.011826][ T7032] filename_create+0x2ee/0x5b0 [ 562.016839][ T7032] do_symlinkat+0x9b/0x8a0 [ 562.021836][ T7032] __x64_sys_symlink+0xe0/0x140 [ 562.027050][ T7032] x64_sys_call+0x3547/0x3c80 [ 562.032357][ T7032] do_syscall_64+0xcd/0x1e0 [ 562.037132][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.043777][ T7032] [ 562.046240][ T7032] Local variable fd created at: [ 562.051554][ T7032] hfs_lookup+0x5b/0x3d0 [ 562.056047][ T7032] lookup_one_qstr_excl+0x216/0x710 [ 562.061687][ T7032] [ 562.064179][ T7032] CPU: 1 UID: 0 PID: 7032 Comm: syz.3.328 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 562.076782][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 562.087279][ T7032] ===================================================== [ 562.094661][ T7032] Disabling lock debugging due to kernel taint [ 562.104079][ T7032] Kernel panic - not syncing: kmsan.panic set ... [ 562.110893][ T7032] CPU: 1 UID: 0 PID: 7032 Comm: syz.3.328 Tainted: G B 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(undef) [ 562.125334][ T7032] Tainted: [B]=BAD_PAGE [ 562.129970][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 562.140191][ T7032] Call Trace: [ 562.143609][ T7032] [ 562.146668][ T7032] dump_stack_lvl+0x216/0x2d0 [ 562.151693][ T7032] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 562.157800][ T7032] dump_stack+0x1e/0x24 [ 562.162203][ T7032] panic+0x4e5/0xcf0 [ 562.166335][ T7032] ? kmsan_internal_poison_memory+0x80/0x90 [ 562.172489][ T7032] kmsan_report+0x2ca/0x2d0 [ 562.177339][ T7032] ? vprintk_default+0x3e/0x50 [ 562.182465][ T7032] ? __msan_warning+0x95/0x120 [ 562.187444][ T7032] ? hfs_brec_find+0x65e/0x980 [ 562.192501][ T7032] ? hfs_brec_read+0x3f/0x1a0 [ 562.197453][ T7032] ? hfs_lookup+0x1ce/0x3d0 [ 562.202178][ T7032] ? lookup_one_qstr_excl+0x216/0x710 [ 562.207783][ T7032] ? filename_create+0x2ee/0x5b0 [ 562.212954][ T7032] ? do_symlinkat+0x9b/0x8a0 [ 562.217814][ T7032] ? __x64_sys_symlink+0xe0/0x140 [ 562.223157][ T7032] ? x64_sys_call+0x3547/0x3c80 [ 562.228257][ T7032] ? do_syscall_64+0xcd/0x1e0 [ 562.233446][ T7032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.239751][ T7032] ? kmsan_get_metadata+0x13e/0x1c0 [ 562.245188][ T7032] ? hfs_brec_keylen+0x398/0x610 [ 562.250448][ T7032] ? hfs_brec_keylen+0x58f/0x610 [ 562.255703][ T7032] ? __hfs_brec_find+0x426/0x830 [ 562.260844][ T7032] ? __pfx_hfs_cat_keycmp+0x10/0x10 [ 562.266275][ T7032] ? kmsan_get_metadata+0x13e/0x1c0 [ 562.271716][ T7032] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 562.277769][ T7032] __msan_warning+0x95/0x120 [ 562.285271][ T7032] hfs_brec_find+0x65e/0x980 [ 562.290110][ T7032] hfs_brec_read+0x3f/0x1a0 [ 562.294818][ T7032] ? hfs_cat_build_key+0xa5/0xd0 [ 562.299979][ T7032] hfs_lookup+0x1ce/0x3d0 [ 562.304556][ T7032] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 562.310891][ T7032] ? kmsan_get_metadata+0x13e/0x1c0 [ 562.316349][ T7032] ? __pfx_hfs_lookup+0x10/0x10 [ 562.321444][ T7032] lookup_one_qstr_excl+0x216/0x710 [ 562.326863][ T7032] filename_create+0x2ee/0x5b0 [ 562.331853][ T7032] do_symlinkat+0x9b/0x8a0 [ 562.336600][ T7032] __x64_sys_symlink+0xe0/0x140 [ 562.341698][ T7032] x64_sys_call+0x3547/0x3c80 [ 562.346648][ T7032] do_syscall_64+0xcd/0x1e0 [ 562.351697][ T7032] ? clear_bhb_loop+0x25/0x80 [ 562.356610][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.362724][ T7032] RIP: 0033:0x7f04ec18d169 [ 562.367307][ T7032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.387326][ T7032] RSP: 002b:00007f04ecf46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 562.395966][ T7032] RAX: ffffffffffffffda RBX: 00007f04ec3a5fa0 RCX: 00007f04ec18d169 [ 562.404126][ T7032] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000080 [ 562.412293][ T7032] RBP: 00007f04ec20e730 R08: 0000000000000000 R09: 0000000000000000 [ 562.420451][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.428610][ T7032] R13: 0000000000000000 R14: 00007f04ec3a5fa0 R15: 00007ffd9ff0dae8 [ 562.436837][ T7032] [ 562.440445][ T7032] Kernel Offset: disabled [ 562.444970][ T7032] Rebooting in 86400 seconds..