last executing test programs: 2m10.782026209s ago: executing program 0 (id=60): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0xc, 0x4) write(r0, &(0x7f0000000040)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r0) sendto(r0, &(0x7f00000005c0)="120000001200e706017b00000000000000a1", 0x12, 0x240048d0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) 2m10.380424317s ago: executing program 0 (id=63): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000440)="0c904a6c118ae9", 0x7, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001800), 0x1, 0x40012021, 0x0) 2m10.082995311s ago: executing program 0 (id=66): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0x9}, {0x19, 0xb}, {0xffe0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) 2m8.784822892s ago: executing program 0 (id=69): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nomblk_io_submit}, {@usrquota}, {@grpid}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x75, 0x8005, 0x0, 0x0, 0x2, 0xd, "ef359f413bb90100010000000000fbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7a628a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263a9f53d11e72cb39b71038259ca1727e1a311ef545032d71e14ef3dc177e9b48b005d00", "f28359738ee6d60200000000000000010000000100", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 2m7.916803732s ago: executing program 0 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x6b, 0xa, 0x7, 0x0, 0x0, 0x0, 0x4, 0x7, 0xd, 0xa0, 0x3, 0x5, 0x0, 0x2, 0x8, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x40000800, 0xffffffffffffffff, 0x81, 0x4, 0x1, 0x0, 0x800000000003, 0x12, 0x1, 0x4, 0x10000, 0x7, 0x7, 0x4, 0x100000000001, 0x6], 0x1000, 0x47f00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m6.919244669s ago: executing program 0 (id=75): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) unshare(0x62000000) 2m6.294755327s ago: executing program 32 (id=75): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) unshare(0x62000000) 1m39.882874918s ago: executing program 1 (id=184): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m39.780484902s ago: executing program 3 (id=186): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 1m38.823373237s ago: executing program 1 (id=192): ftruncate(0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465") write(0xffffffffffffffff, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0', 0x33) ioctl(r0, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c010000380100000100000000000000003200"/42) 1m38.823245577s ago: executing program 3 (id=193): r0 = open$dir(0x0, 0x40001, 0xa0) mkdirat(r0, &(0x7f0000000080)='./proc_mnt/irq/26/smp_affinity\x00', 0x187) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='bfq', 0x3) sendfile(r1, r1, 0x0, 0x8) 1m38.313634191s ago: executing program 3 (id=196): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x4, 0x4, 0x3, {0xa, 0x4e21, 0xa, @mcast1, 0x6}}}, 0x32) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) 1m37.940893788s ago: executing program 1 (id=199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xffffffffffffffdf, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) 1m37.89314851s ago: executing program 3 (id=200): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000001000), 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 1m37.576820475s ago: executing program 1 (id=202): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000d4, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x243, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) pwrite64(r0, &(0x7f0000000140)='\"', 0x1, 0xe7c) 1m37.576053625s ago: executing program 3 (id=203): socket$alg(0x26, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=0x0, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, 0x0, 0x0) 1m36.280252935s ago: executing program 1 (id=208): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f00000005c0)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,iocharset=iso8859-13,utf8,allow_utime=00000000000000000000003,discard,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1548, &(0x7f0000003300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28242, 0x81) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)) 1m35.139595299s ago: executing program 3 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2\n', 0x3) write(r0, &(0x7f0000000240)='-3\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) 1m34.195453082s ago: executing program 1 (id=219): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000008e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x1, 0x14f3, &(0x7f0000005940)="$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") fstat(0xffffffffffffffff, &(0x7f0000003cc0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1m33.570871332s ago: executing program 33 (id=219): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000008e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x1, 0x14f3, &(0x7f0000005940)="$eJzs3Au0jtX2MPA511qPW9Kb5JY113x408YiSXJJyCVJkiTJLSFJkiQkNrklIQm5J7mH5BY7ud9vuSfJkSRJSEiyvqFzzl/ndL7R9x+n/+d/xp6/MdbYa+5nz/XO9c53vO/zPHvs/W3HwVXrV6tUl5nh34J//ZIKAJkAoB8AXAMAEQCUzF4y+6XjmTWm/nsPIv5cD0270hWIK0n6n75J/9M36X/6Jv1P36T/6Zv0P32T/qdv0n8h0rOt0/NcKyP9Drn/n57J53/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/0zfpvxDp2ZW+//yfMzL+7Rm70nX8ueMKv/yEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQT58JlBgD+Pr/SdQkhhBBCCCGEEOLPEzJe6QqEEEIIIYQQQgjxPw9BgQYDEWSAjJAJMkMWuAqywtWQDa6BBFwL2eE6yAHXQ07IBbkhD+SFGyAfWCBwwBBDfigASbgRCsJNkAKFoDAUAQ9FoRjcDMXhFigBt0JJuA1Kwe1QGspAWSgHd0B5uBMqQEWoBHdBZagCVaEa3A3V4R6oAfdCTbgPasH9cK70X6usCw9BPXgY6sMj0AAehYbQCBpDE2j6z/mIAL/Jrw0PQB148J/yX4Su8BJ0g+6QCj2gJ7wMvaA39IG+0A9egf7wKgyA12AgDILB8DoMgTdgKLwJw2A4jIC3YCSMgtEwBsbCOBgPb8MEeAcmwrswCSbDFJgK02A6zID3YCbMgtnwPsyBD2AuzIP5sAAWwoewCBZDGnwES+BjWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCp/ANtgOO2An7ILdsAc+hb3wGeyDz2E/fPHfzD/7T/mdEBBQoUKDBjNgBsyEmTALZsGsmBWzYTZMYAKzY/b/erHkxtyYF/NiPsyHhISMjPkxPyYxiQWxIKZgChbGwujRYzEshsXxFiyBJbAklsRSWApLYxksg+WwHJbH8lgBK2AlrISVsTJWxap4N96N92ANrIE1sSbWwlpYG2tjHayDdbEu1sN6WB/rYwNsgA2xITbGxtgUm2IzbIbNsTm2xJbYCltha2yNbbANtsW22A7bYXtsjx2wA3bEjtgJO2NnfBFfxJfwJeyOlVUP7Ik9sRf2wj7YF/viK9gfX8VX8TUciINwML6Or+MbOBTP4DAcjiNwBJZXo3A0jkFW43A8jscJOAEn4kSchJNxMk7FaTgdZ+AMnImzcBa+j3PwA/wA5+E8XIALcSEuwsWYhmm4BM/iUlyGy3EFrsRVuBLX4Fpcg+txA67HTbgJt+AW/AQ/we24HXfiTtyNu/FT/BQ/w89wIO7H/XgAD+BBPIiH8BAexsN4BI/gUTyKx/AYHsfjeAJP4ik8iafxNJ7Bs3gOz+F5PI8X8Pm8X9fbXWjdQFCXGGVUBpVBZVKZVBaVRWVVWVU2lU0lVEJlV9lVDpVD5VQ5VW6VW+VVeVU+lU+RIsUqVvlVfpVUSVVQFVQpKkUVVoWVV14VU8VUcVVclVAlVEl1myqlblelVRnVwpdT5VR51dJXUBVVJVVJVVZVVFVVTVVT1VV1VUPVUDVVTVVL1VK11QOqjuqBffAhdakz9dUgbKAGY0PVSDVWTdQb+JhqpoZic9VCtVRPqOE4DFurZr6Nelq1VaOxnXpWjcHnVAc1DjuqF1Qn1Vl1US+qrqq576a6q0nYQ/VUU7GX6q36qL5qJlZRlzpWVb2mBqpBarB6XS3AN9RQ9aYapoarEeotNVKNUqPVGDVWjVPj1dtqgnpHTVTvqklqspqipqpparqaod5TM9UsNVu9r+aoD9RcNU/NVwvUQvWhWqQWqzT1kVqiPlZL1TK1XK1QK9UqtVqtUWvVOrVebVAb1Sa1WW1RW9UnapvarnaonWqX2q32qE/VXvWZ2qc+V/vVF+qAwlSAL9Uh9ZU6rL5WR9Q36qj6Vh1T36nj6nt1Qp1Up9QP6rT6UZ359b0RANTP6oL6RV1UQYFGrbTWRkc6g86oM+nMOou+SmfVV+ts+hqd0Nfq7Po6nUNfr3PqXDq3zqPz6ht0Pm01aadZxzq/LqCT+kZdUN+kU3QhXVgX0V4X1cX0zbq4vkWX0Lfqkvo2XUrfrkvrMrqsLqfv0OX1nbqCrqgr6bt0ZV1FV9XV9N26ur5H19D36pr6Pl1L369r6wd0Hf2grqsf0vX0w7q+fkQ30I/qhrqRbqyb6Kb6Md1MP66b6xa6pX5Ct9JP6tb6Kd1GP63b6md0O/2sbq+f0x3087qjfkF30p11F/2LvqiD7qa761TdQ/fUL+teurfuo/vqfvoV3V+/qgfo1/RAPUgP1q/rIfoNPVS/qYfp4XqEfkuP1KP0aD1Gj9Xj9Hj9tp6g39ET9bt6kp6sp+ipepqervv8baXZ/w/57/yL/AG/PvoWvVV/orfp7XqH3ql36d16j96j9+q9ep/ep/fr/fqAPqAP6oP6kD6kD+vD+og+oo/qo/qYPqaP6+P6hD6pf9I/6NP6R31Gn9Vn9U/6vD6vL/ztOQCDRhltjIlMBpPRZDKZTRZzlclqrjbZzDUmYa412c11Joe53uQ0uUxuk8fkNTeYfMYaMs6wiU1+U8AkzY2moLnJpJhCprApYrwpaoqZm//t/D+qr6lpapqZZqa5aW5ampamlWllWpvWpo1pY9qatqadaWfam/amg+lgOpqOppPpZLqYLqar6Wq6mW4m1aSanuZl08v0Nn1MX9PPvGL6m/5mgBlgBpqBZrAZbIaYIWaoGWqGmWFmhBlhRpqRZrQZbcaasWa8GW8mmAlmoploJplJZoqZYqaZaWaGmWFmmplmtplt5pg5Zq6Za+ab+WahWWgWmUUmzaSZJWaJWWqWmWVmhVlhVplVZo1ZY9aZdWaD2WA2mU1mqdlqtpptZpvZYXaYXWaX2WP2mL1mr9ln9pn9Zr85YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvm4qXTvkhFKjKRiTJEGaJMUaYoS5QlyhpljbJF2aJElIiyR9mjHNH1Uc4oV5Q7yhPljW6I8kU2oshFHMVR/qhAlIxujApGN0UpUaGocFQk8lHRqFh0c1Q8uiUqEd0alYxui0pFt0elozJR2ahcdEdUProzqhBVjCpFd0WVoypR1ahadHdUPbonqhHdG9WM7otqRfdHtaMHojrRg1Hd6KGoXvRwVD96JGoQPRo1jBpFjaMmUdM/df0QzuR63Hez3W2q7WF72pdtL9vb9rF9bT/7iu1vX7UD7Gt2oB1kB9vX7RD7hh1q37TD7HA7wr5lR9pRdrQdY8facXa8fdtOsO/YifZdO8lOtlPsVDvNTrcz7Ht2pp1lZ9v37Rz7gZ1r59n5doFdaD+0i+xim2Y/skvsx3apXWaX2xV2pV1lV9s1dq1dZ9fbDXaj3WQ32y12q/3EbrPb7Q670+6yu+0e+6ndaz+z++zndr/9wh6wf7EKvrSH7Ff2sP3aHrHf2KP2W3vMfmeP2+/tCXvSnrI/2NP2R3vGnrXn7E/2vP3ZXrC/2Is2XDq5v/TxToYMZaAMlIkyURbKQlkpK2WjbJSgBGWn7JSDclBOykm5KTflpbyUj/LRJUxM+Sk/JSlJBakgpVAKFabC5MlTMSpGxak4laASVJJKUikqRaWpNJWlsnQH3UF30p1UkSrSXXQXVaEqVI2qUXWqTjWoBtWkmlSLalFtqk11qA7VpbpUj+pRfapPDagBNaSG1JgaU1NqSs2oGTWn5tSSWlIrakWtqTW1oTbUltpSO2pH7ak9daAO1JE6UifqRF2oC3WlrtSNulEqpVJP6km9qBf1oT7Uj/pRf+pPA2gADaSBNJgG0xAaQkNpKA2j4TSC3qKRNIpG0xgaS+NoPI2nCTSBJtJEmkSTaApNoWk0jWbQDJpJM2k2zaY5NIfm0lyaT/NpIS2kRbSI0iiNltASWkpLaTktp5W0klbTalpLa2k9raeNtJE202baSltpG22jHbSDdtEu2kN7aC/tpX20j/bTfjpAB+ggHaRDdIgO02E6QkfoKB2lY3SMjtNxOkEn6BSdotN0ms7QGTpH5+g8/UwX6Be6SIEyucwui7vKZXVXu2zuGvfPcW6Xx+V1N7h8zrqcLtc/xOScS3GFXGFXxHlX1BVzN/8uLu3KuLKunLvDlXd3ugq/i6u7e1wNd6+r6e5z1dzd/xDXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vlRTmvvILXEfu6VumVvuVriVbpVb7db8V60r3Ca32W1xe9ynbpvb7na4nW6X2/1rfGkf+9znbr/7wh1x37iD7kt3yB1zh93Xv8aX9nfMfeeOu+/dCXfSnXI/uNPuR3fGnf11/5f2/oP7xV10wQEjK9ZsOOIMnJEzcWbOwldxVr6as/E1nOBrOTtfxzn4es7JuTg35+G8fAPnY8vEjpljzs8FOMk3ckG+iVO4EBfmIuy5KBfjm7k438Il+FYuybdxKb6dS3MZLsvl+A4uz3dyBa7IlfgursxVuCpX47u5Ot/DNfhersn3cS2+n2vzA1yHH+S6/BDX44e5Pj/CDfhRbsiNuDE34ab8GDfjx7k5t+CW/AS34ie5NT/FbfhpbsvPcDt+ltvzc9yBn+eO/AJ34s7chV/krvwSd+PunMo9uCe/zL24N/fhvtyPX+H+/CoP4Nd4IA/iwfw6D+E3eCi/ycN4OI/gt3gkj+LRPIbH8jgez2/zBH6HJ/K7PIkn8xSeytN4Os/g93gmz+LZ/D7P4Q94Ls/j+byAF/KHvIgXcxp/xEv4Y17Ky3g5r+CVvIpX8xpey+t4PW/gjbyJN/MW3sqf8Dbezjt4J+/i3byHP+W9/Bnv4895P3/BB/gvfJC/5EP8FR/mr/kIf8NH+Vs+xt/xcf6eT/BJPsU/8Gn+kc/wWT7HP/F5/pkv8C98kQNDjLGKdWziKM4QZ4wzxZnjLPFVcdb46jhbfE2ciK+Ns8fXxTni6+Occa44d5wnzhvfEOeLbUyxizmO4/xxgTgZ3xgXjG+KU+JCceG4SOzjonGx+Oa4eHxLXCK+NS4Z3xaXim+PS8dl4kfuKxffEZeP74wrxBXjSvFdceW4Slw1rhbfHVeP74lrxPfGNeP74hLx/XHt+IG4TvxgXDd+KK4XPxzXjx+JG8SPxg3jRnHjuEncNH4sbhY/HjePW8Qt4yfiVvGTcev4qbhN/HTcNn7mD4+nxj3invHL8ctxCPfq+ckFyYXJD5OLkouTacmPkkuSHyeXJpcllydXJFcmVyVXJ9ck1ybXJdcnNyQ3JjclNye3JEOolhE8euW1Nz7yGXxGn8ln9ln8VT6rv9pn89f4hL/WZ/fX+Rz+ep/T5/K5fR6f19/g83nryTvPPvb5fQGf9Df6gv4mn+IL+cK+iPe+qC/mm/imvqlv5h/3zX0L39I/4Z/wT/on/VP+Kf+0b+uf8e38s769f8538M/75/0LvpPv7Lv4F31X/5Lv5rv7VJ/qe/qevpfv5ftE4Pv5fr6/7+8H+AF+oB/oB/vBfogf4of6oX6YH+ZH+BF+pB/pR/vRfqwf68f78X6Cn+An+ol+kp/kp/gpfpqf5mf4GX6mn+ln+9l+TsocP9fP9fP9fL/QL/SL/CKf5tP8Er/EL/VL/XK/3K/0K/1qv9qv9Wv9er/eb/Qb/Wa/2W/1W/02v83v8Dv8Lr/L7/F7/F6/1+/z+/x+v98f8Af8QX/QH/Jf+cP+a3/Ef+OP+m/9Mf+dP+6/9yf8SX/K/+BP+x/9GX/Wn/M/+fP+Z3/B/+Iv+uDHJ95OTEi8k5iYeDcxKfPkxJTE1MS0xPTEjMR7iZmJWYnZifcTcxIfJOYm5iXmJxYkFiY+TCxKLE6kJT5KLEl8nFiaWJZYnliRWJlYlQjhhm1xyB8KhGS4MRQMN4WUUCgUDkWCD0VDsXBzKB5uCSXCraFkuC2UCreH0qFMKBseDQ1Do9A4NAlNw2OhWXg8NA8tQsvwRGgVngytw1OhTXg6tA3PhHbh2dA+PBc6hOdDx/BC6BQ6hy7hxdA1vBS6he4hNfQIPcPLoVfoHfqEvqFfeCX0D6+GAeG1MDAMCoPD62FIeCMMDW+GYWF4GBHeCiPDqDA6jAljw7gwPrwdJoR3wsTwbpgUJocpYWqYFqaHGeG9MDPMCrPD+2FO+CDMDfPC/LAgLAwfhkVhcUgLH4Ul4eOwNCwLy8OKsDKsCqvDmrA2rAvrw4awMWwKm8OWsDV8EraF7WFH2Bl2hd1hT/g07A2fhX3h87A/fBEOhL+Eg+HLcCh8FQ6Hr8OR8E04Gr4Nx8J34Xj4PpwIJ8Op8EM4HX4MZ8LZcC78FM6Hn8OF8Eu4+OvfrHW/UjfRhRBCCCH+Y6T+wfEe/+J76m/jkp4AcPX2PId/e1wDwMacf533VnlbJQDg6e4dH/r7qFw5NfXvj7tUQ1RgHgAkLudngMvxMmgJT0IbaAHF4e+/vvqt3qrzef6D9ZO3AWT5TU4muBxfXv+Wf7n/3mrUnD9cfx5ASoHLOZnhcnx5/RL/l/VzNfuD9TN/OR6g+W9yssLl+PL6xeBxeAba/MNPCiGEEEIIIYQQf9VblW3/R9e3l67P85rLORnhcvzb63MhhBBCCCGEEEL87/Rc5y5PPdamTYv2Mvmfn1T8b2ftljbJ5MpMrvAbkxBCCCGEEOJPd/mk/0pXIoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpF//P/6d2JXeoxBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCHGl/Z8AAAD//5fNKfo=") fstat(0xffffffffffffffff, &(0x7f0000003cc0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1m20.048425392s ago: executing program 34 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2\n', 0x3) write(r0, &(0x7f0000000240)='-3\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) 1m16.823981751s ago: executing program 4 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000600)='./file0\x00', 0x90000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2000000000000) 1m16.470468718s ago: executing program 4 (id=314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1m15.951091452s ago: executing program 4 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xb, 0xffff}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x20004010) 1m15.239975065s ago: executing program 4 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m14.803591596s ago: executing program 4 (id=321): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x0, 0x16}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0xf9d4}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "0c1c5e622172a817bd63622c649ac80b551a2e85808749dde3eeb1c4a83bc30aee34d46593b3859344d3d10714053d"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m14.232125042s ago: executing program 4 (id=326): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x880090, 0x0, 0x4, 0x0, 0x0) mount$bind(&(0x7f0000003680)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x187093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x152) 1m13.524613875s ago: executing program 35 (id=326): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x880090, 0x0, 0x4, 0x0, 0x0) mount$bind(&(0x7f0000003680)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x187093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x152) 39.820737615s ago: executing program 5 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000002b"], 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.418681164s ago: executing program 5 (id=467): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==") fchdir(r1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='auxv\x00') preadv(r2, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4098, 0x1002}], 0x1, 0x16, 0xfffffff9) 37.893762155s ago: executing program 5 (id=472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x25, 0x1}}]}, 0x3c}}, 0x4000080) 37.527732932s ago: executing program 5 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x0, 0x0) 37.119681231s ago: executing program 5 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='tcpci ', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='typec_fusb302 0x2', 0x11) close(r1) 35.979834444s ago: executing program 5 (id=483): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000013, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) 35.450368229s ago: executing program 36 (id=483): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000013, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) 19.022395294s ago: executing program 6 (id=536): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff4, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 18.336914315s ago: executing program 6 (id=538): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0xfffffffb, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 17.835476379s ago: executing program 6 (id=542): r0 = io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x1, 0x0, 0x0, 0x1, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0xfffffff, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {}, {0x0, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r2, 0x4048aec9, &(0x7f0000000140)="030000000000000001000000050000000000000001") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x40, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17.488391925s ago: executing program 6 (id=544): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x2, 0x805, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x4000, 0x3021, 0x3, &(0x7f0000ffd000/0x3000)=nil) 16.499908971s ago: executing program 6 (id=549): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 16.144883398s ago: executing program 6 (id=552): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xe5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000004400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 13.982340669s ago: executing program 9 (id=484): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x7, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) write$P9_RSTATu(r0, 0x0, 0x6e) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000040)=0x3) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000080)={0x0, 0x0}) 8.829782589s ago: executing program 2 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x178, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008fd9fecd77126eaf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x10001}]}}]}, 0x178}}, 0x0) 8.829376129s ago: executing program 8 (id=570): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x38, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d007001"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r4, 0x6db34000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r5, 0x4b48, &(0x7f0000000080)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r7, 0x7c1f1000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) 7.880743692s ago: executing program 7 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@delchain={0x30, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 5.681650425s ago: executing program 2 (id=572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0x10c, 0x10, 0x633, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x0, 0x4000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x87}, {@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0x327, 0x80009, 0x0, 0x4, 0xfff, 0x219, 0x1}, {0x0, 0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd2b, 0x0, 0x2, 0x4}, [@encap={0x1c, 0x4, {0x1, 0x5e21, 0x0, @in6=@mcast1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$KDGKBTYPE(r1, 0x4b52, &(0x7f0000000000)) 5.681398665s ago: executing program 7 (id=573): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 5.680615445s ago: executing program 8 (id=574): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0xfffffffffffffffd, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x2, 0xfffffffffffffffc, 0x7, 0x6, 0x6, 0x100000000001, 0xfffffffffffffffe], 0x8000000, 0x4fb40}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.399517225s ago: executing program 2 (id=575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d746bf7de7b2afdb11cbe10dfdcec916cee4726e50a324c76a37f53ceb1788945f3848c7930de354e8e58262d906f3ba0e15dc0af8d852598483c089bb370efda83b216c8279f427e422dc94e30b2af886dc00838d47d041f709bfd92b1f550848664866ba107bba9cf40e42f727bb0bdb58795b0f331197b43c538f4e73f44ec5c8802233237cd59be4dea6efd1cb8f45e43c7d80bef22276d81cc1b63f891539df2fa962ad242ef318a011cdfc98aace3735", 0xb3}], 0x1}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.398782545s ago: executing program 7 (id=576): socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x81, 0xb}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x2000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 4.398540455s ago: executing program 8 (id=577): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xffff}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5f1, &(0x7f0000000680)="$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") listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x8c) 3.098003065s ago: executing program 2 (id=578): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") close_range(r2, 0xffffffffffffffff, 0x0) 3.097610756s ago: executing program 7 (id=579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 3.097382725s ago: executing program 8 (id=580): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.570055907s ago: executing program 2 (id=581): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001800)=[{&(0x7f0000000700)="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", 0x901}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x1f1b, 0x4) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1.514223429s ago: executing program 7 (id=582): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e23, 0x1, 0xcd, 0x4}}, 0x44) 1.513929259s ago: executing program 8 (id=583): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015000100fdffffff0000000802180000", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x48000) 6.721339ms ago: executing program 37 (id=552): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xe5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000004400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1.75514ms ago: executing program 2 (id=585): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$midi(0x2, 0x0, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e) syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d007001"], 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r4, 0x6db34000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000) ioctl$KDGKBTYPE(r5, 0x4b48, &(0x7f0000000080)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r7, 0x7c1f1000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) 1.574849ms ago: executing program 7 (id=586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000500)) 0s ago: executing program 8 (id=587): pwritev2(0xffffffffffffffff, &(0x7f00000039c0)=[{&(0x7f0000000880)="ab9b24931ee5860955a0aa2dc664c6301bb64ed5181dd2d987f40889f664fefc7761f81f8fe192b25b224a86c60d8d0c9209d4b096139d62becfc314cef289195249354b046ab0fdc488ba10c15400cf6fec398e83a95914c0025ae2609262f3f90b5a54648004b03b69ac9bc778f50cafa2f96c786c8a1b8b36c9642c7484b2dad4118d8a6626d14366c5679f7e57b605078d198836a643f2fb024fd3eb8e2e3c44ed43944e0bbfb5c0854cdd1ca0ea699b2e53dd30923d7615ea07a228122ffe8162843e498a3ed64dd646a4fa550ede2fe8f97521089f37db775d670553adb84b9e50e7699827491650f3df78890ccbe9ed840d0829d2f80d6ff4d6898ffbe5e9a1c10d02e4a2b7ab0de0d8c459e65dc430e26c9c15ce954d4821b127ebd98a26321adfecb76ef242fb22b04ba00a930663befb5c17a4bcdac78c3c650daafd3597693c6f17d993d0e0943dd157378783d7e566ac71006167c9a47ca629ee2fb10e00fd581a24b93e0438795f885a52bd66932551e5c3078ec4b6c32a45b1db9e3992fd10aa1951055016cb5e8996172af8868e5748ce7d4bb29b4b0fa90eb195c8e53e5d52776eb7337e4e7b55957e7f35dfbe3b6ff69ead51154bbf3419e2d91ce63debcf7350eb0d315e5125fb1e73941388d3d0b7dc841fcd191a5305a070531fe3d1b1c516c8da0e629b285d01c118fb7181ec6bad981d806a4fe5e4faef68ff1d1359131863306843ec801c81e77175d9232c97b11645fcea20112e30b55292dd26630784534280e94a28ee7416796fb4d71bc500297074951b8074cda504d5d70a4aa248f6c772130f1050dd7462e3fa81567fc494e826d1e0a903d2ab17f6cbecb5c7a00c958f0942d745a57d87261dcf32a119c2c7fb9d785cffbc4addf675b70341e652148ac45036d7bbaf4fcfa69a7368e9141a1f095478dcdf4d75fcf13e550d57375c74ef4cde18faea244c8f97711279c89a9310b06e4ea0d9d4995fc3ebaa5f4a49198e40cce4bcdc459552c7075aa9195039a5e203ffd02f001f7aaea5131da2ebbf4b71d0590c2d89dc568915a3c01818adf9f1c964a2ee05ad497c41a12c33e5fb9c0a3a4e7f29434530af50cf29036bd291561b7f9ee36bb0bf646202e4885de9f73f2fef5d18afc8b4e5c59ae3fcb1a9853df7e139136660d84cfe65db501c50ec1f284c5dba2911dd01dc43afb7ea9efca20af63a7e3670e5df240d2bd174c0ea2bc606c7028e8493e0bb4a15e92d47b7f41c626cd7986713d43d25e414e478463d82ef051f09d8528d5bc01caddf51f0d1fb330d52198b3fbd740639caa958f0608bff60b732dba8623fb67520dcd91b193b0dc908eb21a5a9bc2b507e0113f3980bc10c076df9eb4487f33824010c43d3f2a782f56f42a5fde15860fa301b982f781b29c8b68e76c27d225fd03d37cef47f82efd512c739a801835bf39666294f8647e4d8cdc3e8b872df4f7d4831bad1241c289c108131ff22a0bb3634c924b7523af232f7f383901c3f87045576044b44cf5fb138929965abdb63bd0a1444ad9bf9a3520ed8e2c5b8acfef9d186a0d103233cc5ba47243715f4a6df202e8a7cbf8cddabf410931176d62470ce5ee1fb59f7bc1a946baaf6e83f9e57691791e0e39178e5474c3e2e993d4e55887993c7b14f950af5e1e29d2fa4b7e420f2600022d8a86f35140d953d389b21f07b3999635eab78aefdc75d2adfc20ab0e51bf25fe08a512f08f0d74bd5ee18799e8b4f97c70ce9fde3b0ef866d464daec55d79abad57d1c415dd1865ca6d7b19396f100c58699fc5a8cdcccfd45abc452d83ad0d796d1322a15fabbb7b4cf587a717989d2721b8722c86d463d22a9896d77186b5e0f96e316349385accba0b70d9ac27b7226af35271a128a33ae172c3a1e7d4a451fce98d8f1caf086bf47b6b04050d123de7a8ff58542367e5dfe3f46e91da20834c7f0bebf675073ef712b2b185a6fb5d6f495bb475f6145b5e8159c69e11eab7106be248516f91cb3b4f00ef5489c21ca5df451f993d94758e6aa57599bc140f0abe1bd3e2bfe0df5ba2821c956af75c57dedf1bf431a3680a0fe2daa600a02b6039fc41de82a83fc9f05168da3854cbb722b842dc2efc2fead291c0db0e3f9de715c250700cb0a21a259e9e9758adb800705d04d3511f9f9416d30a9afb106c0f9b7a6d0a0c8344f536956046bebad7825835c74a1bd70cf94d097a3f225aa92e8eb15d710dc89cf62ba5d9aa642d37d568b1d6602a91bac7eb2708092443e1eb2082c8341f4a030b1eaa9295665794260fb1c6371d33635f8be295548b55f616b56ce811c702b6622814af3fb5f749205d013deb1816c3752bdcd669d7e0ee90663cdf4491359b5fb3f75d11e2e04a6848fd7cadfc4bf5894663459cf083656fb4b727e452e9926f5ff145469cdf50d5c506400bf8b487bf7bd00c9955f6d5084cee732c6a07c7d8d86ec4d600f75c46f5a4a638c6c246963208e348bdcacdb0fe6ff771766c4b85734c25888d5dd4a7ddf7a5eda0b067873b18ff9fba31552835856b9a108abac185910da4fe59bbe4bd9942cb34ec454fa61cb152a59e4528b260259e95f1c52473eb94c9d7ea66932b71624df87a0eeaa5f10353561184099a7d8eefc6f5ff36e1249618157cac80b0c8509503f3a5bf504b2d3fa3e0c4a848b11071f3997f58e632fa2ef1b277ae88e2f2bc74992d4ff9ff8635f496f0b751c04a7645e5d0cee60588fe20f94ae2e2d7de07e8cc160e2354de32b633dd34f5d81a2bb6684071f54b6853af2e6a0e6e0c0c4b4b37c97563cd832067202bd0e1b0fcb61237ab99712d55b394b2661e6400636941c66648329e0cd5c0b807c8283ef516ca92fe9697215d6d0ada6facf61e093505ebfab52be8e5e19c9d6893c3b0da64cd7f0c0a0957ad69971789330851799c3d7894caa460380d4429baf4e1ff77c57374b536a10ef7e9a7715668e0f43c549bc5dc97b534c7a30974d17c567ce26ffd9b95348944895c000e11f5679e51e00e668a150aebbf9228828c48fa1ed35c1848e9dc54b092ebfa7a631ddd0ffb2c48ff92cd6260721c889be00660e6540085108f59f4d3aaea632c6b58692820740700acbcf5ee0fac4201e56b64ab0cfd52ebd735b8b5ea458a4a5aede5bc10385f19c7cb538b9ff4a9a544207a561dd34d029af18a120d3917b14089d21e9b15ccd5add77548962d938342cd5a4345f59fdd26194090b0eeb60b2050c6a5ecf162bf1b44f9dcbe4df0704924641e025b1e975a5aa7712f82c0ed732d9904bcd218553e87da16f002606c1fd5227b7ee4a405516c3868363805a16fb09988373d87ba0ae83e8457b4b3742155d8d866b2c0e64b4fe4dbbc5500de1cae73fb69831f6522d04c88e3438d5637477bd238616ac9270fa7178fbdece46749e23ce908495e988ff80503388a40a2157d03ae911e0d2306b9f72a4907ef2f0c78c2334c7b93fb354af82700fce83506d6f718e76a06368de18c072429ee819634b54010f1f7ab2881e6f58d254ef3a39ef62d03d1de72aefd4db991a62054cc036d13926d7b5194f0114801cf076892491c94e1fa9da493ddfd46b627dd6525a5384b2dc1b6eb496e1fc36622943f1628e0d1a25aa230119062306d7b5b7eb83070694e93e70dbe282a9197a3ecbe54de96bbce0ac4eeb0b430c985b5c78a84d686e5bfab0a4d840b443ef7f10c6998ee8f9e01d08550a2099cf1628f23211873e10d6b9ebb9c7638c9bc58f36971e05f4e6037032b6f2c28faf27a5b16893f98f56f76daff93cb6fdf24d4e7a7d9484959025d7cfe94399eefefaba9e0a98309ba574a57faa5d93b819a33bed86b85885a3131e810c78479d454280f0ede9da427d8264df41c4079a01f30a6b6377cb407115958dad300d914d2f007886cd0b29a23760264acd40e6f6a422d8726b4b2576d98a3fdd446679afcac2d3b60d1bb6a919ce1a7599a81ecaa88b80c49cad0b1369d1999eba4ff58644db17d8125d2391830bb216e849c2f56d913bf7cf80e4e44b7502dd998d03564a848e37590737aab87a4b79c64f84b5e5d09f895e4c71b7c859dd1248e14bb33f402115d2f3eda8101c1ebca4a7fc8e9e2d2d8478536763c2c03f91644e7684c7d4666970be51c20798c41b34a4219fd52e77aecacbb17da147b2c6bcb34a5182975575773d08097891787e6d3bef6a4a320cb36815b6f6d1831a24a89b4f7d79b12db87df81f2dd51960ae1140c5d18e27e46555970dd8943f07503c457085e0b140e0019b99d105ab7f16acc05dc4c5c30aa9ee9d3612c4184266a65cb39b971315c949e77e6a4e92c9e321e3e8f9bf894634136c9d351fba318353a278810d47739a27d8011c12795c5c16d8af4e68a9ca420201c003cea0f2ecf6cd156c1fdfa688c7f6522e0b132a2c1c9a9193733b0b176beac075ba625494b79623f02853b6f1d3b1d13493e3b891a92add7225589422886100f7cdba3f1fd5aacaf36643d509078f6a0c5cf1410b73f6f78ffef6904ba75a2a0ea2b3e7bf2687b0c9fb21a71ffc233a0d7851ec9b07710729c0936def046026f82670f6829f06faf5834c641e3a96269db0cd3ce1982537150ca0483bbe72de229e07d0636090efed873f80885ee4edf536342834072a47cdc45b2ed564973bbfb8d594b2a09bcf588f63dd92da8a42bac833c2900a6e6656d774a9de21df9a9178cfaf422abf392b7aa067300e55ea2f99fefc058afdb46b9b78aafb65685916a1a0269c59a815ce5ee130875d3ba3f773e4ebb02dedb3c98ee85211d3fd7d3ba84ae06e82964a6c5646e108231293ea43d4e7fe3cc650dc8ba91843aeeec53b162d7262d19eb1224d4d30b68fabf283f38fd1275998a03884924b9499fc73a5715fdeda88875d32148d2df942ef04d288fe2dadfebb3d969a8aab055c7ddaf2574564357c43343679f1b930e2e2183704353d9b2a9b858922b0c0ec71a209f95de05e91200eb9fee97309b8fa1034e5bb622305179220b51bfeee5b4400629f4cf8fae4f7418bda6529d0a6027ca0b451214401fe8ff6098a8c1735a89171243dd2686b3b49dbd007f52d27d6310d7fbae97db082e090b7435f05ccd71c3e7e5e914f384b0b73951cdc58ac86ff495ec210c6d35ca77cdb91598b1f24934e681fb65b920ce1895aeca4a19c094257cbde722e12526b9ff9e5ac7af464c047a39485584ba0a5576e140f43301baffae7b46289994b80ed19cc079f32b84fbfc134f66cc7e47f04c0083b1b139afc2a8eb8ab8bfb752a1ac07d1f9499e41364cf44ed82d53412ab55ea517c8eb73da27ed60fd71d5059c5699f0e1431a1e3e9e5f143550345f58eebdcf7c9d86bdbae56fa9efbd298279ea8e589beb113141ee7a99311599cd85c2bd6b30eda7e7e1ddae13983f255fe6b4c6dd318e5163964c72547b3e308e9858955eeaa51dbdf2f31e17ac3f090626ee8805030eb9ab4639b878b5cee5162ce17e6d3d764b1c51174b276d5565282d947f04bb1cd43c2aef22466d3776f1bf00c4f7efc6599674e16abd25655f0734850df8672d37b93e3d08b7db458c18b970a9a5cdc895a5eefe1a2908ae3395510e2d6cefaa8a864c69c97db0ed341515f3c0b0c9eec6e5c4723b610a69ab5a83883a85a4cef010837c2c9a91a0e91bf8671075e17b7ac780da8943cdbcfab84ff270f02952b6d7", 0xfd1}], 0x1, 0x10001, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="080008000400060000001400000046"], 0xfce) kernel console output (not intermixed with test programs): d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.248927][ T5476] RSP: 002b:00007f1877e6c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 141.257348][ T5476] RAX: ffffffffffffffda RBX: 00007f1877225fa0 RCX: 00007f1876f9e159 [ 141.265330][ T5476] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000004 [ 141.273306][ T5476] RBP: 00007f187703506b R08: 0000000000000000 R09: 0000000000000000 [ 141.281285][ T5476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.289259][ T5476] R13: 00007f1877226038 R14: 00007f1877225fa0 R15: 00007ffdf1e71ef8 [ 141.297251][ T5476] [ 141.300317][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.304357][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 141.323681][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.364499][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 141.371706][ T4318] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 141.387125][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.398742][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.452968][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.467151][ T4318] usb 3-1: config 0 has no interface number 0 [ 141.486115][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.496869][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.506432][ T4318] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 141.524954][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.532616][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.547204][ T4318] usb 3-1: Product: syz [ 141.553215][ T5330] device veth0_vlan entered promiscuous mode [ 141.576915][ T4318] usb 3-1: Manufacturer: syz [ 141.581615][ T4318] usb 3-1: SerialNumber: syz [ 141.588745][ T5330] device veth1_vlan entered promiscuous mode [ 141.610111][ T4318] usb 3-1: config 0 descriptor?? [ 141.661009][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.679261][ T5490] loop4: detected capacity change from 0 to 164 [ 141.687887][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.719149][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.741348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.787676][ T5330] device veth0_macvtap entered promiscuous mode [ 141.822529][ T5330] device veth1_macvtap entered promiscuous mode [ 141.824219][ T4318] usb 3-1: USB disconnect, device number 4 [ 141.901667][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.949813][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.972528][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.997655][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.007891][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.018819][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.036477][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.050615][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.062732][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.072475][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.088050][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.114258][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.135971][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.163858][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.194119][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.206448][ T5330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.217365][ T5330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.228966][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.240268][ T5500] device veth0_macvtap left promiscuous mode [ 142.316925][ T4290] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 142.375856][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.392888][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 142.395215][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.411772][ T5330] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.430043][ T5330] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.468410][ T5330] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.479098][ T5330] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.654221][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.662468][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.703876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.732463][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.743447][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.758714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.237754][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 143.237770][ T26] audit: type=1800 audit(1790069362.555:38): pid=5525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.274" name="zoned" dev="configfs" ino=40397 res=0 errno=0 [ 143.240951][ T5530] FAULT_INJECTION: forcing a failure. [ 143.240951][ T5530] name failslab, interval 1, probability 0, space 0, times 0 [ 143.324446][ T5530] CPU: 1 PID: 5530 Comm: syz.2.275 Not tainted syzkaller #0 [ 143.331816][ T5530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.341911][ T5530] Call Trace: [ 143.345223][ T5530] [ 143.348183][ T5530] dump_stack_lvl+0x188/0x24e [ 143.352906][ T5530] ? show_regs_print_info+0x12/0x12 [ 143.358142][ T5530] ? load_image+0x410/0x410 [ 143.362708][ T5530] ? __might_sleep+0xd0/0xd0 [ 143.367334][ T5530] ? __lock_acquire+0x7c40/0x7c40 [ 143.372399][ T5530] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.378408][ T5530] should_fail_ex+0x390/0x4c0 [ 143.383109][ T5530] should_failslab+0x5/0x20 [ 143.387648][ T5530] slab_pre_alloc_hook+0x59/0x300 [ 143.392708][ T5530] ? lockdep_hardirqs_on+0x94/0x140 [ 143.398456][ T5530] ? alloc_fs_context+0x63/0x7d0 [ 143.403443][ T5530] __kmem_cache_alloc_node+0x4f/0x270 [ 143.408872][ T5530] ? alloc_fs_context+0x63/0x7d0 [ 143.413860][ T5530] kmalloc_trace+0x26/0xe0 [ 143.418308][ T5530] alloc_fs_context+0x63/0x7d0 [ 143.423093][ T5530] __se_sys_fspick+0x195/0x3b0 [ 143.427874][ T5530] ? lock_chain_count+0x20/0x20 [ 143.432743][ T5530] ? __x64_sys_fspick+0x80/0x80 [ 143.437616][ T5530] ? lockdep_hardirqs_on+0x94/0x140 [ 143.442830][ T5530] do_syscall_64+0x4c/0xa0 [ 143.447288][ T5530] ? clear_bhb_loop+0x60/0xb0 [ 143.451973][ T5530] ? clear_bhb_loop+0x60/0xb0 [ 143.456686][ T5530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.462628][ T5530] RIP: 0033:0x7f1bcc99e159 [ 143.467066][ T5530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.486689][ T5530] RSP: 002b:00007f1bcd8be028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 143.495119][ T5530] RAX: ffffffffffffffda RBX: 00007f1bccc25fa0 RCX: 00007f1bcc99e159 [ 143.503105][ T5530] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 143.511108][ T5530] RBP: 00007f1bcca3506b R08: 0000000000000000 R09: 0000000000000000 [ 143.519088][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.527067][ T5530] R13: 00007f1bccc26038 R14: 00007f1bccc25fa0 R15: 00007ffe9b183268 [ 143.535098][ T5530] [ 143.730756][ T5539] loop4: detected capacity change from 0 to 1764 [ 144.515048][ T4290] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 145.348570][ T5586] loop4: detected capacity change from 0 to 1024 [ 145.682138][ T5586] hfsplus: walked past end of dir [ 145.824920][ T5599] IPVS: fo: FWM 3 0x00000003 - no destination available [ 145.864085][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 146.318560][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.331206][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.341212][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.351478][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.361682][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.375961][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.624528][ T5622] FAULT_INJECTION: forcing a failure. [ 146.624528][ T5622] name failslab, interval 1, probability 0, space 0, times 0 [ 146.640477][ T5621] tmpfs: Too small a size for current use [ 146.684598][ T5622] CPU: 1 PID: 5622 Comm: syz.4.309 Not tainted syzkaller #0 [ 146.691963][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.702060][ T5622] Call Trace: [ 146.705381][ T5622] [ 146.708360][ T5622] dump_stack_lvl+0x188/0x24e [ 146.713094][ T5622] ? show_regs_print_info+0x12/0x12 [ 146.718346][ T5622] ? load_image+0x410/0x410 [ 146.722903][ T5622] ? __might_sleep+0xd0/0xd0 [ 146.727537][ T5622] ? __lock_acquire+0x7c40/0x7c40 [ 146.732614][ T5622] ? verify_lock_unused+0x140/0x140 [ 146.737861][ T5622] should_fail_ex+0x390/0x4c0 [ 146.742603][ T5622] should_failslab+0x5/0x20 [ 146.747145][ T5622] slab_pre_alloc_hook+0x59/0x300 [ 146.752220][ T5622] ? finish_task_switch+0x262/0x8e0 [ 146.757465][ T5622] ? snd_pcm_oss_change_params_locked+0x145/0x3bd0 [ 146.764016][ T5622] __kmem_cache_alloc_node+0x4f/0x270 [ 146.769472][ T5622] ? snd_pcm_oss_change_params_locked+0x145/0x3bd0 [ 146.776057][ T5622] kmalloc_trace+0x26/0xe0 [ 146.780516][ T5622] snd_pcm_oss_change_params_locked+0x145/0x3bd0 [ 146.786897][ T5622] ? __mutex_trylock_common+0x15c/0x260 [ 146.792476][ T5622] ? trace_raw_output_contention_end+0xd0/0xd0 [ 146.798662][ T5622] ? rcu_is_watching+0x11/0xa0 [ 146.803451][ T5622] ? trace_contention_end+0x5f/0x170 [ 146.808775][ T5622] ? __mutex_lock+0x1ab/0xae0 [ 146.813474][ T5622] ? aa_file_perm+0x3ea/0xf00 [ 146.818187][ T5622] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 146.823317][ T5622] ? mutex_lock_nested+0x10/0x10 [ 146.828275][ T5622] ? aa_path_link+0x8a0/0x8a0 [ 146.832972][ T5622] snd_pcm_oss_write+0x27a/0xb20 [ 146.837947][ T5622] ? snd_pcm_oss_read+0x890/0x890 [ 146.843139][ T5622] vfs_write+0x2dc/0x9a0 [ 146.847415][ T5622] ? file_end_write+0x250/0x250 [ 146.852290][ T5622] ? __fget_files+0x28/0x460 [ 146.856912][ T5622] ? __fget_files+0x3fc/0x460 [ 146.861624][ T5622] ? __fdget_pos+0x1d4/0x360 [ 146.866251][ T5622] ? ksys_write+0x70/0x260 [ 146.870706][ T5622] ksys_write+0x14d/0x260 [ 146.875065][ T5622] ? __ia32_sys_read+0x80/0x80 [ 146.879858][ T5622] ? lockdep_hardirqs_on+0x94/0x140 [ 146.885072][ T5622] do_syscall_64+0x4c/0xa0 [ 146.889497][ T5622] ? clear_bhb_loop+0x60/0xb0 [ 146.894180][ T5622] ? clear_bhb_loop+0x60/0xb0 [ 146.898880][ T5622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.904791][ T5622] RIP: 0033:0x7f3b85f9e159 [ 146.909215][ T5622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.928855][ T5622] RSP: 002b:00007f3b86f2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.937284][ T5622] RAX: ffffffffffffffda RBX: 00007f3b86225fa0 RCX: 00007f3b85f9e159 [ 146.945264][ T5622] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 146.953243][ T5622] RBP: 00007f3b8603506b R08: 0000000000000000 R09: 0000000000000000 [ 146.961221][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.969219][ T5622] R13: 00007f3b86226038 R14: 00007f3b86225fa0 R15: 00007fff8fb5eea8 [ 146.977232][ T5622] [ 147.000011][ T5611] chnl_net:caif_netlink_parms(): no params data found [ 147.207987][ T4290] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 147.367852][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.375553][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.383867][ T5611] device bridge_slave_0 entered promiscuous mode [ 147.402085][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.416821][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.425807][ T5611] device bridge_slave_1 entered promiscuous mode [ 147.475502][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.520459][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.611471][ T5641] FAULT_INJECTION: forcing a failure. [ 147.611471][ T5641] name failslab, interval 1, probability 0, space 0, times 0 [ 147.619904][ T5611] team0: Port device team_slave_0 added [ 147.651854][ T5611] team0: Port device team_slave_1 added [ 147.691276][ T5641] CPU: 1 PID: 5641 Comm: syz.6.304 Not tainted syzkaller #0 [ 147.698677][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.708765][ T5641] Call Trace: [ 147.712055][ T5641] [ 147.714993][ T5641] dump_stack_lvl+0x188/0x24e [ 147.719690][ T5641] ? show_regs_print_info+0x12/0x12 [ 147.724900][ T5641] ? load_image+0x410/0x410 [ 147.729424][ T5641] ? verify_lock_unused+0x140/0x140 [ 147.734642][ T5641] should_fail_ex+0x390/0x4c0 [ 147.739338][ T5641] should_failslab+0x5/0x20 [ 147.743864][ T5641] slab_pre_alloc_hook+0x59/0x300 [ 147.748906][ T5641] ? sk_prot_alloc+0xe7/0x210 [ 147.753594][ T5641] __kmem_cache_alloc_node+0x4f/0x270 [ 147.758980][ T5641] ? sk_prot_alloc+0xe7/0x210 [ 147.763672][ T5641] __kmalloc+0xa3/0x240 [ 147.767843][ T5641] sk_prot_alloc+0xe7/0x210 [ 147.772355][ T5641] ? sk_alloc+0x20/0x330 [ 147.776614][ T5641] sk_alloc+0x36/0x330 [ 147.780703][ T5641] x25_alloc_socket+0x2d/0x2f0 [ 147.785487][ T5641] x25_create+0x9f/0x4c0 [ 147.789750][ T5641] __sock_create+0x49a/0x940 [ 147.794365][ T5641] __sys_socket+0xc4/0x190 [ 147.798807][ T5641] __x64_sys_socket+0x76/0x80 [ 147.803501][ T5641] do_syscall_64+0x4c/0xa0 [ 147.807959][ T5641] ? clear_bhb_loop+0x60/0xb0 [ 147.812644][ T5641] ? clear_bhb_loop+0x60/0xb0 [ 147.817330][ T5641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.823243][ T5641] RIP: 0033:0x7febcdb9e159 [ 147.827687][ T5641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.847302][ T5641] RSP: 002b:00007febceab2fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 147.855726][ T5641] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007febcdb9e159 [ 147.863710][ T5641] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000009 [ 147.871775][ T5641] RBP: 00007febcdc3506b R08: 0000000000000000 R09: 0000000000000000 [ 147.879757][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.887734][ T5641] R13: 00007febcde26038 R14: 00007febcde25fa0 R15: 00007fffa5201ef8 [ 147.895729][ T5641] [ 147.945657][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.983215][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.109383][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.226816][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.233826][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.255179][ T5651] FAULT_INJECTION: forcing a failure. [ 148.255179][ T5651] name fail_futex, interval 1, probability 0, space 0, times 1 [ 148.331902][ T5654] loop5: detected capacity change from 0 to 512 [ 148.363202][ T5651] CPU: 0 PID: 5651 Comm: syz.6.307 Not tainted syzkaller #0 [ 148.370564][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.380655][ T5651] Call Trace: [ 148.383974][ T5651] [ 148.386936][ T5651] dump_stack_lvl+0x188/0x24e [ 148.391659][ T5651] ? show_regs_print_info+0x12/0x12 [ 148.393906][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.396870][ T5651] ? load_image+0x410/0x410 [ 148.396916][ T5651] should_fail_ex+0x390/0x4c0 [ 148.416657][ T5651] get_futex_key+0x1b1/0x1000 [ 148.421390][ T5651] ? futex_setup_timer+0xc0/0xc0 [ 148.426377][ T5651] futex_wake+0x123/0x4f0 [ 148.430747][ T5651] ? futex_wake_mark+0x150/0x150 [ 148.435730][ T5651] ? __lock_acquire+0x7c40/0x7c40 [ 148.440802][ T5651] do_futex+0x2e2/0x320 [ 148.445001][ T5651] ? __ia32_sys_get_robust_list+0x100/0x100 [ 148.450929][ T5651] ? io_register_personality+0x174/0x280 [ 148.456601][ T5651] ? io_eventfd_register+0x490/0x490 [ 148.461938][ T5651] __se_sys_futex+0x381/0x410 [ 148.464487][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 148.466637][ T5651] ? __x64_sys_futex+0xf0/0xf0 [ 148.466668][ T5651] ? __x64_sys_futex+0x1d/0xf0 [ 148.482466][ T5651] do_syscall_64+0x4c/0xa0 [ 148.486931][ T5651] ? clear_bhb_loop+0x60/0xb0 [ 148.491655][ T5651] ? clear_bhb_loop+0x60/0xb0 [ 148.496364][ T5651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.502305][ T5651] RIP: 0033:0x7febcdb9e159 [ 148.506752][ T5651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.526394][ T5651] RSP: 002b:00007febceab30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.534858][ T5651] RAX: ffffffffffffffda RBX: 00007febcde25fa8 RCX: 00007febcdb9e159 [ 148.542860][ T5651] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007febcde25fac [ 148.550860][ T5651] RBP: 00007febcde25fa0 R08: 000cac200a13d870 R09: 0000000000000000 [ 148.558856][ T5651] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 148.566838][ T5651] R13: 00007febcde26038 R14: 00007fffa5201e10 R15: 00007fffa5201ef8 [ 148.574829][ T5651] [ 148.615770][ T5611] device hsr_slave_0 entered promiscuous mode [ 148.616472][ T5654] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 148.662856][ T5611] device hsr_slave_1 entered promiscuous mode [ 149.178869][ T11] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 149.424391][ T4360] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.453495][ T5611] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 149.551875][ T5611] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 149.611148][ T5681] FAULT_INJECTION: forcing a failure. [ 149.611148][ T5681] name failslab, interval 1, probability 0, space 0, times 0 [ 149.628417][ T5611] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 149.656447][ T4360] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.674551][ T4360] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 149.685021][ T5681] CPU: 0 PID: 5681 Comm: syz.5.317 Not tainted syzkaller #0 [ 149.692357][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.702453][ T5681] Call Trace: [ 149.705770][ T5681] [ 149.708732][ T5681] dump_stack_lvl+0x188/0x24e [ 149.713461][ T5681] ? show_regs_print_info+0x12/0x12 [ 149.718710][ T5681] ? load_image+0x410/0x410 [ 149.723268][ T5681] ? __might_sleep+0xd0/0xd0 [ 149.727915][ T5681] ? __lock_acquire+0x7c40/0x7c40 [ 149.732992][ T5681] should_fail_ex+0x390/0x4c0 [ 149.737726][ T5681] should_failslab+0x5/0x20 [ 149.742272][ T5681] slab_pre_alloc_hook+0x59/0x300 [ 149.747343][ T5681] ? lockdep_init_map_type+0x98/0x8d0 [ 149.752763][ T5681] ? cgroup_init_fs_context+0x50/0x3c0 [ 149.758256][ T5681] __kmem_cache_alloc_node+0x4f/0x270 [ 149.763677][ T5681] ? cgroup_init_fs_context+0x50/0x3c0 [ 149.769179][ T5681] kmalloc_trace+0x26/0xe0 [ 149.773643][ T5681] cgroup_init_fs_context+0x50/0x3c0 [ 149.778969][ T5681] ? cgroup_do_get_tree+0x510/0x510 [ 149.784213][ T5681] alloc_fs_context+0x628/0x7d0 [ 149.789117][ T5681] __se_sys_fsopen+0xa0/0x2c0 [ 149.793849][ T5681] do_syscall_64+0x4c/0xa0 [ 149.798341][ T5681] ? clear_bhb_loop+0x60/0xb0 [ 149.803039][ T5681] ? clear_bhb_loop+0x60/0xb0 [ 149.807735][ T5681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.813824][ T5681] RIP: 0033:0x7f1876f9e159 [ 149.818253][ T5681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.837874][ T5681] RSP: 002b:00007f1877e6c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 149.846302][ T5681] RAX: ffffffffffffffda RBX: 00007f1877225fa0 RCX: 00007f1876f9e159 [ 149.854288][ T5681] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 149.862269][ T5681] RBP: 00007f187703506b R08: 0000000000000000 R09: 0000000000000000 [ 149.870246][ T5681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.878223][ T5681] R13: 00007f1877226038 R14: 00007f1877225fa0 R15: 00007ffdf1e71ef8 [ 149.886216][ T5681] [ 149.917163][ T4360] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 149.945397][ T4360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.997695][ T5611] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 150.019227][ T4360] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 150.243577][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.288070][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.297566][ T26] audit: type=1800 audit(1790069369.615:39): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.320" name="zone_nr_conv" dev="configfs" ino=40973 res=0 errno=0 [ 150.332468][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.355267][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.392267][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.413210][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.427128][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.434375][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.460115][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.485722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.514664][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 150.531806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.572533][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.579716][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.636180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.662066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.692972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.722555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.769424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.828629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.847856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.863810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.904200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.029218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.046204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.342995][ T5709] Zero length message leads to an empty skb [ 151.459092][ T4331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.688462][ T4331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.848199][ T4331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.991224][ T4331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.067009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.080521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.127940][ T14] usb 3-1: USB disconnect, device number 5 [ 152.157619][ T14] idmouse 3-1:1.0: disconnected [ 152.202596][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.504530][ T5715] loop6: detected capacity change from 0 to 32768 [ 152.595034][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 152.685556][ T5715] XFS (loop6): Mounting V5 Filesystem [ 152.777214][ T5715] XFS (loop6): Ending clean mount [ 152.820773][ T26] audit: type=1800 audit(1790069372.135:40): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.325" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 152.860236][ T5715] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 152.902369][ T5742] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 152.999717][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.034833][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.045017][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.052818][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.062545][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.070538][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.376461][ T5745] XFS (loop6): User initiated shutdown received. [ 153.383454][ T5745] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 153.440985][ T5745] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 153.558139][ T5330] XFS (loop6): Unmounting Filesystem [ 154.117348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.139580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.269772][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.298037][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.316283][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.345949][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.383514][ T5611] device veth0_vlan entered promiscuous mode [ 154.540656][ T5611] device veth1_vlan entered promiscuous mode [ 154.557118][ T4740] kernel write not supported for file /tomoyo/profile (pid: 4740 comm: kworker/1:7) [ 154.560390][ T4364] kernel read not supported for file /video9 (pid: 4364 comm: kworker/0:10) [ 154.684385][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 154.762477][ T5747] chnl_net:caif_netlink_parms(): no params data found [ 154.803164][ T5755] loop5: detected capacity change from 0 to 40427 [ 154.817121][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.832148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.868400][ T5755] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff [ 154.901629][ T5755] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x30e4 [ 154.926167][ T5611] device veth0_macvtap entered promiscuous mode [ 154.944658][ T5755] F2FS-fs (loop5): invalid crc value [ 154.992955][ T5755] F2FS-fs (loop5): Found nat_bits in checkpoint [ 155.001265][ T5789] loop6: detected capacity change from 0 to 512 [ 155.122349][ T5755] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 155.148744][ T5789] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 155.168753][ T4290] Bluetooth: hci3: command 0x0409 tx timeout [ 155.177052][ T5789] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.178030][ T5755] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 155.245073][ T5789] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.339: corrupted inode contents [ 155.263298][ T5611] device veth1_macvtap entered promiscuous mode [ 155.277102][ T5755] F2FS-fs (loop5) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 155.286262][ T5789] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #2: comm syz.6.339: mark_inode_dirty error [ 155.295077][ T5755] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0x107/0x640 [ 155.327336][ T5755] F2FS-fs (loop5) : inject checkpoint error in f2fs_balance_fs of f2fs_mkdir+0x447/0x530 [ 155.346838][ T5789] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.339: corrupted inode contents [ 155.385942][ T5789] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.339: mark_inode_dirty error [ 155.398069][ T4331] device hsr_slave_0 left promiscuous mode [ 155.408073][ T4331] device hsr_slave_1 left promiscuous mode [ 155.420208][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.440913][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.462511][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.492381][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.516256][ T4331] device bridge_slave_1 left promiscuous mode [ 155.522555][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.548032][ T4331] device bridge_slave_0 left promiscuous mode [ 155.565398][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.570648][ T5330] EXT4-fs (loop6): unmounting filesystem. [ 155.619957][ T4331] device veth1_macvtap left promiscuous mode [ 155.657014][ T4331] device veth0_macvtap left promiscuous mode [ 155.685235][ T4331] device veth1_vlan left promiscuous mode [ 155.706921][ T4331] device veth0_vlan left promiscuous mode [ 155.724173][ T5799] loop6: detected capacity change from 0 to 2048 [ 155.840213][ T5799] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.993117][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 157.087955][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 157.210970][ T5803] loop5: detected capacity change from 0 to 131072 [ 157.211140][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.239481][ T5803] F2FS-fs (loop5): invalid crc value [ 157.244563][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 157.301036][ T5803] F2FS-fs (loop5): Found nat_bits in checkpoint [ 157.346047][ T5803] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 157.357077][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.367144][ T5803] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 158.039502][ T4331] bond0 (unregistering): Released all slaves [ 158.204728][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.227858][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.264735][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.327790][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.374463][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.408607][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.421193][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.439654][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.453823][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.480477][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.516729][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.605826][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.644405][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.684431][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.724369][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.734258][ T5611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.788557][ T5611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.835349][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.895311][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.908321][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.960778][ T5611] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.988631][ T5611] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.009420][ T5611] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.036253][ T5611] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.136894][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.144046][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.192442][ T5747] device bridge_slave_0 entered promiscuous mode [ 159.227638][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.281652][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.309523][ T5747] device bridge_slave_1 entered promiscuous mode [ 159.324811][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 159.405764][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.351'. [ 159.544559][ T5841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.609053][ T5844] device macvlan2 entered promiscuous mode [ 159.666910][ T5844] device bond1 entered promiscuous mode [ 159.700446][ T5844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.723156][ T5844] device bond1 left promiscuous mode [ 159.900692][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.949673][ T3933] device veth0_macvtap entered promiscuous mode [ 160.002870][ T5836] loop2: detected capacity change from 0 to 40427 [ 160.016729][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.062822][ T5836] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 160.108663][ T5836] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 160.139820][ T5836] F2FS-fs (loop2): invalid crc value [ 160.203634][ T5836] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 160.207288][ T5747] team0: Port device team_slave_0 added [ 160.217858][ T5856] FAULT_INJECTION: forcing a failure. [ 160.217858][ T5856] name fail_futex, interval 1, probability 0, space 0, times 0 [ 160.264432][ T5856] CPU: 1 PID: 5856 Comm: syz.5.353 Not tainted syzkaller #0 [ 160.271786][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.273909][ T5747] team0: Port device team_slave_1 added [ 160.281854][ T5856] Call Trace: [ 160.281865][ T5856] [ 160.281875][ T5856] dump_stack_lvl+0x188/0x24e [ 160.281906][ T5856] ? show_regs_print_info+0x12/0x12 [ 160.281927][ T5856] ? load_image+0x410/0x410 [ 160.281958][ T5856] ? __lock_acquire+0x7c40/0x7c40 [ 160.281994][ T5856] should_fail_ex+0x390/0x4c0 [ 160.282038][ T5856] get_futex_key+0x1b1/0x1000 [ 160.282056][ T5856] ? mutex_unlock+0x10/0x10 [ 160.282085][ T5856] ? futex_setup_timer+0xc0/0xc0 [ 160.282104][ T5856] ? rcu_is_watching+0x11/0xa0 [ 160.282139][ T5856] futex_wake+0x123/0x4f0 [ 160.282166][ T5856] ? futex_wake_mark+0x150/0x150 [ 160.282189][ T5856] ? packet_setsockopt+0xa83/0x1230 [ 160.282216][ T5856] ? packet_ioctl+0x240/0x240 [ 160.282238][ T5856] ? __fget_files+0x28/0x460 [ 160.282271][ T5856] do_futex+0x2e2/0x320 [ 160.282296][ T5856] ? __ia32_sys_get_robust_list+0x100/0x100 [ 160.282327][ T5856] __se_sys_futex+0x381/0x410 [ 160.282354][ T5856] ? __x64_sys_futex+0xf0/0xf0 [ 160.282379][ T5856] ? __x64_sys_futex+0x1d/0xf0 [ 160.282401][ T5856] do_syscall_64+0x4c/0xa0 [ 160.389535][ T5856] ? clear_bhb_loop+0x60/0xb0 [ 160.394234][ T5856] ? clear_bhb_loop+0x60/0xb0 [ 160.398923][ T5856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.404836][ T5856] RIP: 0033:0x7f1876f9e159 [ 160.409262][ T5856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.428877][ T5856] RSP: 002b:00007f1877e6c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 160.437320][ T5856] RAX: ffffffffffffffda RBX: 00007f1877225fa8 RCX: 00007f1876f9e159 [ 160.445299][ T5856] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1877225fac [ 160.453277][ T5856] RBP: 00007f1877225fa0 R08: 000a49c6e779f978 R09: 0000000000000000 [ 160.461255][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.469232][ T5856] R13: 00007f1877226038 R14: 00007ffdf1e71e10 R15: 00007ffdf1e71ef8 [ 160.477223][ T5856] [ 160.499659][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.545578][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.581100][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.635573][ T5836] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 160.642827][ T5836] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 160.659372][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.674439][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.708675][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.729544][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.738954][ T26] audit: type=1800 audit(1790069380.055:41): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.350" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 160.754331][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.765034][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.794585][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.809086][ T5836] syz.2.350: attempt to access beyond end of device [ 160.809086][ T5836] loop2: rw=34817, sector=77832, nr_sectors = 2048 limit=40427 [ 160.863295][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.924266][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.032278][ T5747] device hsr_slave_0 entered promiscuous mode [ 161.100690][ T5747] device hsr_slave_1 entered promiscuous mode [ 161.112732][ T4286] syz-executor: attempt to access beyond end of device [ 161.112732][ T4286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.140380][ T5747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.163065][ T5747] Cannot create hsr debugfs directory [ 161.394544][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 161.942335][ T5888] loop2: detected capacity change from 0 to 8 [ 163.106264][ T5896] loop6: detected capacity change from 0 to 32768 [ 163.119840][ T5901] loop2: detected capacity change from 0 to 32768 [ 163.189420][ T26] audit: type=1800 audit(1790069382.505:42): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.362" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 163.227130][ T5896] XFS (loop6): Mounting V5 Filesystem [ 163.391632][ T5896] XFS (loop6): Ending clean mount [ 163.629357][ T5896] XFS (loop6): User initiated shutdown received. [ 163.655096][ T5896] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 163.700964][ T5896] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 163.855348][ T5330] XFS (loop6): Unmounting Filesystem [ 164.274874][ T5914] FAULT_INJECTION: forcing a failure. [ 164.274874][ T5914] name failslab, interval 1, probability 0, space 0, times 0 [ 164.287725][ T5914] CPU: 1 PID: 5914 Comm: syz.6.363 Not tainted syzkaller #0 [ 164.295051][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.305140][ T5914] Call Trace: [ 164.308454][ T5914] [ 164.311415][ T5914] dump_stack_lvl+0x188/0x24e [ 164.316138][ T5914] ? show_regs_print_info+0x12/0x12 [ 164.321375][ T5914] ? load_image+0x410/0x410 [ 164.325926][ T5914] ? __might_sleep+0xd0/0xd0 [ 164.330552][ T5914] ? __lock_acquire+0x7c40/0x7c40 [ 164.335628][ T5914] should_fail_ex+0x390/0x4c0 [ 164.340359][ T5914] should_failslab+0x5/0x20 [ 164.344906][ T5914] slab_pre_alloc_hook+0x59/0x300 [ 164.349968][ T5914] ? _raw_spin_lock_irq+0xb7/0xf0 [ 164.355039][ T5914] kmem_cache_alloc+0x56/0x2f0 [ 164.359834][ T5914] ? alloc_uid+0x14d/0x540 [ 164.364295][ T5914] alloc_uid+0x14d/0x540 [ 164.368567][ T5914] __sys_setreuid+0x403/0x980 [ 164.373246][ T5914] do_syscall_64+0x4c/0xa0 [ 164.377673][ T5914] ? clear_bhb_loop+0x60/0xb0 [ 164.382379][ T5914] ? clear_bhb_loop+0x60/0xb0 [ 164.387075][ T5914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.392969][ T5914] RIP: 0033:0x7febcdb9e159 [ 164.397399][ T5914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.417054][ T5914] RSP: 002b:00007febceab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 164.425510][ T5914] RAX: ffffffffffffffda RBX: 00007febcde25fa0 RCX: 00007febcdb9e159 [ 164.433499][ T5914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 164.441483][ T5914] RBP: 00007febcdc3506b R08: 0000000000000000 R09: 0000000000000000 [ 164.449496][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.457493][ T5914] R13: 00007febcde26038 R14: 00007febcde25fa0 R15: 00007fffa5201ef8 [ 164.465496][ T5914] [ 165.910709][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805965e800: rx timeout, send abort [ 166.165075][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.371'. [ 166.404657][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.604058][ T5747] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 166.617407][ T14] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 166.643497][ T14] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 166.656618][ T14] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 0.00 [ 166.666149][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.679162][ T5935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.689926][ T5747] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 166.699882][ T5935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.721606][ T14] i2c-diolan-u2c 3-1:1.0: Diolan U2C at USB bus 003 address 006 speed 100000 Hz [ 166.745068][ T14] i2c-diolan-u2c 3-1:1.0: failed to initialize adapter [ 166.752100][ T14] i2c-diolan-u2c: probe of 3-1:1.0 failed with error -71 [ 166.752557][ T5747] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 166.824636][ T5747] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 167.012002][ T5956] bond0: (slave ip6tnl1): refused to change device type [ 167.147186][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.205403][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.226036][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.301616][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.331020][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.351122][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.371574][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.378800][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.410937][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.431712][ T5965] netlink: 'syz.7.378': attribute type 5 has an invalid length. [ 167.461308][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.482213][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.513048][ T4981] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.520292][ T4981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.553987][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.585711][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.635691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.659446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.708427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.737783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.770294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.800548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.830846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.865783][ T5747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.887448][ T5747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.901449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.915512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.010140][ T4317] usb 3-1: USB disconnect, device number 6 [ 168.725535][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.737157][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.761209][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.790777][ T6005] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 169.111884][ T6018] FAULT_INJECTION: forcing a failure. [ 169.111884][ T6018] name failslab, interval 1, probability 0, space 0, times 0 [ 169.161297][ T6018] CPU: 0 PID: 6018 Comm: syz.2.390 Not tainted syzkaller #0 [ 169.168663][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.178763][ T6018] Call Trace: [ 169.182081][ T6018] [ 169.185053][ T6018] dump_stack_lvl+0x188/0x24e [ 169.189776][ T6018] ? show_regs_print_info+0x12/0x12 [ 169.195017][ T6018] ? load_image+0x410/0x410 [ 169.199571][ T6018] ? __might_sleep+0xd0/0xd0 [ 169.204197][ T6018] ? __lock_acquire+0x7c40/0x7c40 [ 169.209268][ T6018] should_fail_ex+0x390/0x4c0 [ 169.213998][ T6018] should_failslab+0x5/0x20 [ 169.218541][ T6018] slab_pre_alloc_hook+0x59/0x300 [ 169.223605][ T6018] ? __kernfs_new_node+0xa6/0x7f0 [ 169.228668][ T6018] ? rcu_is_watching+0x11/0xa0 [ 169.233489][ T6018] kmem_cache_alloc+0x56/0x2f0 [ 169.238292][ T6018] ? __kernfs_new_node+0xe1/0x7f0 [ 169.243356][ T6018] __kernfs_new_node+0xe1/0x7f0 [ 169.248256][ T6018] ? kernfs_new_node+0x250/0x250 [ 169.253252][ T6018] ? sysfs_do_create_link_sd+0x75/0x110 [ 169.258855][ T6018] kernfs_new_node+0x148/0x250 [ 169.263663][ T6018] kernfs_create_link+0xa3/0x200 [ 169.268640][ T6018] sysfs_do_create_link_sd+0x83/0x110 [ 169.274034][ T6018] device_add+0x83b/0x1050 [ 169.278489][ T6018] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 169.283962][ T6018] wakeup_source_register+0x15f/0x230 [ 169.289346][ T6018] ep_insert+0xeab/0x1980 [ 169.293699][ T6018] ? ep_loop_check+0x1b0/0x1b0 [ 169.298478][ T6018] ? __lock_acquire+0x7c40/0x7c40 [ 169.303530][ T6018] do_epoll_ctl+0x8b2/0xf40 [ 169.308052][ T6018] __x64_sys_epoll_ctl+0x162/0x1b0 [ 169.313174][ T6018] ? ep_modify+0xa80/0xa80 [ 169.317603][ T6018] ? lockdep_hardirqs_on+0x94/0x140 [ 169.322816][ T6018] do_syscall_64+0x4c/0xa0 [ 169.327237][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 169.331920][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 169.336607][ T6018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.342514][ T6018] RIP: 0033:0x7f1bcc99e159 [ 169.346938][ T6018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.366557][ T6018] RSP: 002b:00007f1bcd8be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 169.374983][ T6018] RAX: ffffffffffffffda RBX: 00007f1bccc25fa0 RCX: 00007f1bcc99e159 [ 169.382960][ T6018] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 169.390934][ T6018] RBP: 00007f1bcca3506b R08: 0000000000000000 R09: 0000000000000000 [ 169.398909][ T6018] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 169.406887][ T6018] R13: 00007f1bccc26038 R14: 00007f1bccc25fa0 R15: 00007ffe9b183268 [ 169.414882][ T6018] [ 169.960815][ T6036] loop2: detected capacity change from 0 to 512 [ 170.057493][ T6036] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.103923][ T6036] EXT4-fs (loop2): 1 orphan inode deleted [ 170.122335][ T4982] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 170.183854][ T4982] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1 [ 170.284408][ T4317] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 170.310141][ T6036] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.321928][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.340327][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.378388][ T5747] device veth0_vlan entered promiscuous mode [ 170.399505][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.417312][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.440904][ T5747] device veth1_vlan entered promiscuous mode [ 170.455857][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.469178][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.487365][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.508145][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 170.509077][ T4317] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 170.559479][ T4317] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 170.585265][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.599724][ T4317] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.604176][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.640761][ T4317] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 170.674054][ T4317] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 170.690352][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.702153][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.732813][ T5747] device veth0_macvtap entered promiscuous mode [ 170.742296][ T6039] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 170.768141][ T6039] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 170.796525][ T4317] pl2303 7-1:1.0: pl2303 converter detected [ 170.798755][ T5747] device veth1_macvtap entered promiscuous mode [ 170.823133][ T6059] jffs2: notice: (6059) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 170.824683][ T4317] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 170.882447][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.928295][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.947679][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.964515][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.004004][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.054577][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.076920][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.094354][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.140641][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.196546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.249862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.279896][ T6039] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 171.300536][ T6039] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 171.335042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.345615][ T6039] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 171.368518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.386317][ T6039] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 171.409134][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.420638][ T6039] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 171.444395][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.467909][ T5247] usb 7-1: USB disconnect, device number 2 [ 171.484382][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.512549][ T5247] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 171.534350][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.545341][ T5247] pl2303 7-1:1.0: device disconnected [ 171.572455][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.604534][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.674464][ T5747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.711331][ T5747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.735662][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.763951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.773734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.822968][ T5747] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.861394][ T5747] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.879608][ T5747] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.889594][ T5747] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.151358][ T4982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.176716][ T4982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.217617][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.255862][ T6089] loop6: detected capacity change from 0 to 256 [ 172.282139][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.294684][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.303505][ T6090] device-mapper: table: 248:1: too large device [ 172.324017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.342214][ T6067] loop5: detected capacity change from 0 to 32768 [ 172.354475][ T6090] device-mapper: ioctl: error adding target to table [ 172.446341][ T6097] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 172.561151][ T6067] XFS (loop5): Mounting V5 Filesystem [ 173.228220][ T6067] XFS (loop5): Ending clean mount [ 173.636782][ T26] audit: type=1800 audit(1790069392.955:43): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.400" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 173.639847][ T6067] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 173.968653][ T6123] loop7: detected capacity change from 0 to 512 [ 174.103776][ T6123] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 174.152718][ T6123] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.390622][ T6117] XFS (loop5): User initiated shutdown received. [ 174.416118][ T6123] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:106: comm syz.7.411: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18 [ 174.423525][ T6139] loop8: detected capacity change from 0 to 512 [ 174.431886][ T6117] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 174.459350][ T6123] EXT4-fs (loop7): Remounting filesystem read-only [ 174.487856][ T6117] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 174.587203][ T6139] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 174.608586][ T5611] EXT4-fs (loop7): unmounting filesystem. [ 174.681561][ T6139] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.739384][ T4625] XFS (loop5): Unmounting Filesystem [ 174.940098][ T6139] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.415: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 174.971581][ T4290] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 175.195316][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.196480][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.255031][ T6153] device bridge_slave_1 left promiscuous mode [ 175.255965][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.273860][ T5747] EXT4-fs (loop8): unmounting filesystem. [ 175.328291][ T6153] device bridge_slave_0 left promiscuous mode [ 175.329707][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.594408][ T14] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 175.816490][ T14] usb 7-1: Using ep0 maxpacket: 16 [ 175.831347][ T14] usb 7-1: unable to get BOS descriptor or descriptor too short [ 175.859051][ T14] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 176.085379][ T14] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 176.220346][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.356603][ T14] usb 7-1: Product: syz [ 176.413994][ T14] usb 7-1: Manufacturer: syz [ 176.495635][ T14] usb 7-1: SerialNumber: syz [ 176.927311][ T14] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 176.985162][ T14] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 177.094311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 177.104352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 177.114330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 177.124316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 177.350849][ T14] usb 7-1: 2:1 : bogus bTerminalLink 6 [ 177.610555][ T14] usb 7-1: USB disconnect, device number 3 [ 177.680237][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.449446][ T6214] loop6: detected capacity change from 0 to 512 [ 178.525968][ T6214] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.855100][ T4360] libceph: connect (1)[c::]:6789 error -101 [ 179.861871][ T4360] libceph: mon0 (1)[c::]:6789 connect error [ 179.899010][ T4290] block nbd2: Receive control failed (result -32) [ 179.913606][ T6252] block nbd2: shutting down sockets [ 179.935114][ T6249] ceph: No mds server is up or the cluster is laggy [ 179.965002][ T4360] libceph: connect (1)[c::]:6789 error -101 [ 179.971070][ T4360] libceph: mon0 (1)[c::]:6789 connect error [ 180.184386][ T4364] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 180.355569][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.363052][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.404247][ T4364] usb 8-1: Using ep0 maxpacket: 32 [ 180.413628][ T4364] usb 8-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 180.450064][ T6269] device bridge_slave_1 left promiscuous mode [ 180.516898][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.517345][ T4364] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.790585][ T4364] usb 8-1: Product: syz [ 180.883528][ T4364] usb 8-1: Manufacturer: syz [ 180.952360][ T4364] usb 8-1: SerialNumber: syz [ 181.340808][ T6269] device bridge_slave_0 left promiscuous mode [ 181.357553][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.467015][ T4364] snd-usb-audio: probe of 8-1:1.0 failed with error -2 [ 181.533665][ T4364] usb 8-1: USB disconnect, device number 2 [ 181.807132][ T6320] sctp: [Deprecated]: syz.6.445 (pid 6320) Use of int in max_burst socket option deprecated. [ 181.807132][ T6320] Use struct sctp_assoc_value instead [ 182.541996][ T6335] nvme_fabrics: missing parameter 'transport=%s' [ 182.557163][ T6335] nvme_fabrics: missing parameter 'nqn=%s' [ 182.974417][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 183.117670][ T6360] loop7: detected capacity change from 0 to 2048 [ 183.161213][ T6360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.172696][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.217064][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.254508][ T22] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 183.274508][ T4364] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 183.297653][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.336208][ T22] usb 3-1: config 0 descriptor?? [ 183.465116][ T4364] usb 7-1: no configurations [ 183.469853][ T4364] usb 7-1: can't read configurations, error -22 [ 183.550966][ T26] audit: type=1804 audit(1790069402.855:44): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.456" name="/newroot/21/bus/file1" dev="loop7" ino=1346 res=1 errno=0 [ 183.659540][ T4364] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 183.775809][ T22] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 183.813313][ T22] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 183.820395][ T22] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 183.844358][ T22] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 183.856774][ T4364] usb 7-1: no configurations [ 183.861586][ T22] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 183.863731][ T4364] usb 7-1: can't read configurations, error -22 [ 183.879204][ T22] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 183.912282][ T4364] usb usb7-port1: attempt power cycle [ 183.914333][ T22] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 183.978971][ T22] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 184.091523][ T22] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 184.165249][ T6375] tipc: Started in network mode [ 184.170219][ T6375] tipc: Node identity 966f63fd24d9, cluster identity 4711 [ 184.178161][ T6375] tipc: Enabled bearer , priority 10 [ 184.213413][ T6373] tipc: Resetting bearer [ 184.276714][ T6373] tipc: Disabling bearer [ 184.336347][ T4364] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 184.413049][ T4364] usb 7-1: no configurations [ 184.424459][ T4364] usb 7-1: can't read configurations, error -22 [ 184.601665][ T4364] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 184.647267][ T4364] usb 7-1: no configurations [ 184.648607][ T6380] IPVS: fo: FWM 3 0x00000003 - no destination available [ 184.652034][ T4364] usb 7-1: can't read configurations, error -22 [ 184.678096][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 184.695893][ T6347] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 184.705608][ T4364] usb usb7-port1: unable to enumerate USB device [ 184.713541][ T22] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 184.756756][ T22] usb 3-1: USB disconnect, device number 7 [ 185.022963][ T6381] fido_id[6381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 185.114640][ T4364] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 185.320965][ T4364] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.334744][ T4364] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.346394][ T4364] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.355629][ T4364] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.369890][ T4364] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.383689][ T4364] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.399312][ T4364] usb 9-1: Product: syz [ 185.403528][ T4364] usb 9-1: Manufacturer: syz [ 185.435613][ T4364] cdc_wdm 9-1:1.0: skipping garbage [ 185.441800][ T4364] cdc_wdm 9-1:1.0: skipping garbage [ 185.460080][ T4364] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 185.466358][ T4364] cdc_wdm 9-1:1.0: Unknown control protocol [ 185.514609][ T14] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 185.737631][ T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.771687][ T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.803249][ T14] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 185.822774][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.847824][ T14] usb 8-1: config 0 descriptor?? [ 185.974174][ T5247] usb 9-1: USB disconnect, device number 2 [ 186.266531][ T14] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.273570][ T14] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.301175][ T14] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.331545][ T14] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.353099][ T14] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.388093][ T14] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.418389][ T14] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 186.451149][ T14] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 186.545467][ T14] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 186.559378][ T6394] loop2: detected capacity change from 0 to 32768 [ 186.628554][ T6394] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.465 (6394) [ 186.703778][ T6419] loop6: detected capacity change from 0 to 256 [ 186.711097][ T6394] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.730902][ T6422] loop8: detected capacity change from 0 to 512 [ 186.757539][ T6394] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 186.762507][ T6419] exfat: Unknown parameter '/dev/ptmx' [ 186.809505][ T6422] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.471: bg 0: block 7: invalid block bitmap [ 186.839132][ T6394] BTRFS info (device loop2): force clearing of disk cache [ 186.874811][ T6394] BTRFS info (device loop2): use zlib compression, level 3 [ 186.901531][ T6422] EXT4-fs (loop8): Remounting filesystem read-only [ 186.944419][ T6394] BTRFS info (device loop2): enabling ssd optimizations [ 186.951437][ T6394] BTRFS info (device loop2): using spread ssd allocation scheme [ 186.974444][ T6422] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 186.992790][ T6422] EXT4-fs (loop8): Remounting filesystem read-only [ 187.014382][ T6394] BTRFS info (device loop2): using free space tree [ 187.056198][ T6422] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2921: inode #11: comm syz.8.471: corrupted xattr block 95 [ 187.087004][ T6422] EXT4-fs (loop8): Remounting filesystem read-only [ 187.093572][ T6422] EXT4-fs warning (device loop8): ext4_evict_inode:301: xattr delete (err -117) [ 187.153045][ T14] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 187.169258][ T6422] EXT4-fs (loop8): 1 orphan inode deleted [ 187.175423][ T6422] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 187.189767][ T14] usb 8-1: USB disconnect, device number 3 [ 187.379432][ T6444] fido_id[6444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 187.396951][ T6394] BTRFS info (device loop2): rebuilding free space tree [ 187.478753][ T6422] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2805: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 187.548014][ T6394] BTRFS info (device loop2): checking UUID tree [ 187.576381][ T6422] EXT4-fs warning (device loop8): ext4_evict_inode:301: xattr delete (err -12) [ 187.810627][ T5747] EXT4-fs (loop8): unmounting filesystem. [ 188.097367][ T6464] loop7: detected capacity change from 0 to 128 [ 188.234992][ T6464] loop7: detected capacity change from 128 to 1 [ 188.263892][ T6464] FAT-fs (loop7): Directory bread(block 7) failed [ 188.288160][ T6464] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 188.337351][ T6464] FAT-fs (loop7): Filesystem has been set read-only [ 188.365327][ T6464] syz.7.476: attempt to access beyond end of device [ 188.365327][ T6464] loop7: rw=1, sector=4, nr_sectors = 4 limit=1 [ 188.405482][ T6464] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 188.954881][ T6299] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.074917][ T4364] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 189.287754][ T4364] usb 8-1: config index 0 descriptor too short (expected 1572, got 36) [ 189.304371][ T4364] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.340039][ T4364] usb 8-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 189.354426][ T4364] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.372788][ T4364] usb 8-1: Product: syz [ 189.377085][ T4364] usb 8-1: Manufacturer: syz [ 189.381702][ T4364] usb 8-1: SerialNumber: syz [ 189.414200][ T4364] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input8 [ 189.538223][ T6476] loop8: detected capacity change from 0 to 40427 [ 189.594057][ T6476] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 189.630352][ T6476] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 189.673196][ T6476] F2FS-fs (loop8): invalid crc value [ 189.730703][ T6476] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 189.775119][ T3623] bcm5974 8-1:1.0: could not read from device [ 189.816869][ T4364] bcm5974 8-1:1.0: could not read from device [ 189.884443][ T4364] input: failed to attach handler mousedev to device input8, error: -5 [ 189.921664][ T3623] bcm5974 8-1:1.0: could not read from device [ 189.936982][ T4364] usb 8-1: USB disconnect, device number 4 [ 190.031204][ T4286] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.065877][ T6476] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 190.074844][ T6476] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 190.238717][ T26] audit: type=1800 audit(1790069409.555:45): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.480" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 190.327316][ T6476] syz.8.480: attempt to access beyond end of device [ 190.327316][ T6476] loop8: rw=34817, sector=77832, nr_sectors = 2048 limit=40427 [ 190.656144][ T5747] syz-executor: attempt to access beyond end of device [ 190.656144][ T5747] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.782972][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.800873][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.818590][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.840799][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.848520][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 190.864037][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.985454][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 191.175175][ T14] usb 3-1: no configurations [ 191.181885][ T14] usb 3-1: can't read configurations, error -22 [ 191.336220][ T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 191.467505][ T6498] loop8: detected capacity change from 0 to 32768 [ 191.543125][ T14] usb 3-1: no configurations [ 191.552661][ T14] usb 3-1: can't read configurations, error -22 [ 191.562947][ T14] usb usb3-port1: attempt power cycle [ 191.571456][ T6498] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 191.601498][ T6498] XFS (loop8): Mounting V5 Filesystem [ 191.695004][ T6498] XFS (loop8): Ending clean mount [ 191.740191][ T6498] XFS (loop8): Quotacheck needed: Please wait. [ 191.848156][ T6498] XFS (loop8): Quotacheck: Done. [ 191.994542][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 192.029875][ T5747] XFS (loop8): Unmounting Filesystem [ 192.036276][ T14] usb 3-1: no configurations [ 192.041146][ T14] usb 3-1: can't read configurations, error -22 [ 192.109491][ T6301] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 192.149443][ T6301] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 100390) [ 192.161683][ T6301] Buffer I/O error on device sda1, logical block 100352 [ 192.169743][ T6301] device offline error, dev sda, sector 811302 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 192.180325][ T6301] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 101412) [ 192.192834][ T6301] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 101413) [ 192.193010][ T4981] Buffer I/O error on device sda1, logical block 101374 [ 192.205048][ T6301] Buffer I/O error on device sda1, logical block 101375 [ 192.221648][ T6301] device offline error, dev sda, sector 815142 op 0x1:(WRITE) flags 0x0 phys_seg 19 prio class 2 [ 192.232551][ T6301] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 101892) [ 192.244503][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 192.252337][ T6301] Buffer I/O error on device sda1, logical block 101854 [ 192.259584][ T6301] Buffer I/O error on device sda1, logical block 101855 [ 192.266611][ T6301] Buffer I/O error on device sda1, logical block 101856 [ 192.273636][ T6301] Buffer I/O error on device sda1, logical block 101857 [ 192.281142][ T6301] Buffer I/O error on device sda1, logical block 101858 [ 192.288513][ T6301] Buffer I/O error on device sda1, logical block 101859 [ 192.295825][ T6301] Buffer I/O error on device sda1, logical block 101860 [ 192.303466][ T14] usb 3-1: no configurations [ 192.309611][ T14] usb 3-1: can't read configurations, error -22 [ 192.316429][ T14] usb usb3-port1: unable to enumerate USB device [ 192.357973][ T53] device offline error, dev sda, sector 721238 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 192.376351][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90154) [ 192.388303][ T53] device offline error, dev sda, sector 721254 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 192.398800][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90156) [ 192.411379][ T53] device offline error, dev sda, sector 721278 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 192.421921][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90159) [ 192.433858][ T53] device offline error, dev sda, sector 721310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 192.444502][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90163) [ 192.450319][ T6301] device offline error, dev sda, sector 722478 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 192.456574][ T53] device offline error, dev sda, sector 721334 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 192.477327][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90166) [ 192.488917][ T53] device offline error, dev sda, sector 721358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 192.499439][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90169) [ 192.621751][ T3600] Buffer I/O error on dev sda1, logical block 131395, lost sync page write [ 192.632521][ T4331] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm kworker/u4:6: Error while async write back metadata [ 192.632580][ T3600] Aborting journal on device sda1-8. [ 192.658863][ T53] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 192.668157][ T3600] JBD2: I/O error when updating journal superblock for sda1-8. [ 192.671702][ T6301] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 6 with max blocks 3 with error 30 [ 192.714348][ T93] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 192.723468][ T14] EXT4-fs (sda1): I/O error while writing superblock [ 192.736113][ T4331] EXT4-fs error (device sda1) in ext4_reserve_inode_write:5952: Journal has aborted [ 192.743822][ T6301] EXT4-fs (sda1): This should not happen!! Data will be lost [ 192.743822][ T6301] [ 192.765272][ T6301] EXT4-fs error (device sda1) in ext4_writepages:2870: Journal has aborted [ 192.782567][ T4331] EXT4-fs error (device sda1): ext4_convert_unwritten_extents:4894: inode #2036: comm kworker/u4:6: mark_inode_dirty error [ 192.782713][ T93] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 192.803988][ T4318] EXT4-fs (sda1): I/O error while writing superblock [ 192.852890][ T4331] EXT4-fs error (device sda1) in ext4_convert_unwritten_io_end_vec:4933: Journal has aborted [ 192.895414][ T4331] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2036, error -30) [ 192.914718][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 192.916689][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 192.930469][ T4323] EXT4-fs (sda1): I/O error while writing superblock [ 192.948558][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 192.957215][ T4323] EXT4-fs (sda1): I/O error while writing superblock [ 192.960568][ T6510] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.488: Detected aborted journal [ 192.977169][ T6508] Buffer I/O error on dev sda1, logical block 8192, lost async page write [ 192.988065][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 192.988159][ T6508] Buffer I/O error on dev sda1, logical block 8193, lost async page write [ 193.004458][ T6510] EXT4-fs (sda1): I/O error while writing superblock [ 193.012685][ T6510] EXT4-fs (sda1): Remounting filesystem read-only [ 193.024920][ T6510] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.488: Detected aborted journal [ 193.057715][ T6510] EXT4-fs (sda1): I/O error while writing superblock [ 193.111194][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 193.156715][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 193.169887][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 193.414094][ T6508] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 194.005703][ T6509] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 194.074239][ T6509] pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f] [ 194.111376][ T6509] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f] [ 194.200931][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.234238][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.365277][ T6509] virtio-pci 0000:00:03.0: BAR 0 [io 0xc000-0xc03f]: not claimed; can't enable device [ 194.376389][ T6509] virtio-pci: probe of 0000:00:03.0 failed with error -22 [ 194.994442][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 195.612816][ T6299] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.234385][ T6548] FAULT_INJECTION: forcing a failure. [ 196.234385][ T6548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.286011][ T6548] CPU: 1 PID: 6548 Comm: syz.7.500 Not tainted syzkaller #0 [ 196.293376][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.303457][ T6548] Call Trace: [ 196.306739][ T6548] [ 196.309666][ T6548] dump_stack_lvl+0x188/0x24e [ 196.314360][ T6548] ? show_regs_print_info+0x12/0x12 [ 196.319594][ T6548] ? load_image+0x410/0x410 [ 196.324147][ T6548] ? __lock_acquire+0x7c40/0x7c40 [ 196.329189][ T6548] should_fail_ex+0x390/0x4c0 [ 196.333877][ T6548] prepare_alloc_pages+0x1e1/0x5b0 [ 196.339031][ T6548] __alloc_pages+0x130/0x4f0 [ 196.343670][ T6548] ? zone_statistics+0x170/0x170 [ 196.348614][ T6548] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 196.354621][ T6548] ? lock_chain_count+0x20/0x20 [ 196.359516][ T6548] ? __mod_lruvec_page_state+0xa1/0x410 [ 196.365111][ T6548] ? __phys_addr+0xb6/0x170 [ 196.369658][ T6548] __kmalloc_large_node+0x8c/0x1f0 [ 196.374811][ T6548] ? vhost_dev_set_owner+0x42a/0xa60 [ 196.380129][ T6548] __kmalloc+0x113/0x240 [ 196.384418][ T6548] vhost_dev_set_owner+0x42a/0xa60 [ 196.389565][ T6548] ? vhost_dev_has_owner+0x40/0x40 [ 196.394688][ T6548] ? vhost_set_backend_features+0x1b0/0x1b0 [ 196.400603][ T6548] vhost_net_ioctl+0x6c3/0x1280 [ 196.405476][ T6548] ? vhost_net_chr_poll+0x50/0x50 [ 196.410521][ T6548] ? bpf_lsm_file_ioctl+0x5/0x10 [ 196.415469][ T6548] ? security_file_ioctl+0x7c/0xa0 [ 196.420588][ T6548] ? vhost_net_chr_poll+0x50/0x50 [ 196.425626][ T6548] __se_sys_ioctl+0xfa/0x170 [ 196.430229][ T6548] do_syscall_64+0x4c/0xa0 [ 196.434663][ T6548] ? clear_bhb_loop+0x60/0xb0 [ 196.439350][ T6548] ? clear_bhb_loop+0x60/0xb0 [ 196.444033][ T6548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.449958][ T6548] RIP: 0033:0x7f4b1db9e159 [ 196.454396][ T6548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.474025][ T6548] RSP: 002b:00007f4b1ea8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.482453][ T6548] RAX: ffffffffffffffda RBX: 00007f4b1de25fa0 RCX: 00007f4b1db9e159 [ 196.490433][ T6548] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000005 [ 196.498411][ T6548] RBP: 00007f4b1dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 196.506460][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.514442][ T6548] R13: 00007f4b1de26038 R14: 00007f4b1de25fa0 R15: 00007fff9120ca58 [ 196.522437][ T6548] [ 196.666869][ T6543] loop6: detected capacity change from 0 to 40427 [ 196.723004][ T6543] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 196.730941][ T6543] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 196.780192][ T6543] F2FS-fs (loop6): invalid crc value [ 196.868475][ T6543] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 197.069789][ T6543] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 197.075181][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 197.099563][ T6543] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 197.266806][ T26] audit: type=1800 audit(1790069416.585:46): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.496" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 197.343489][ T6540] syz.6.496: attempt to access beyond end of device [ 197.343489][ T6540] loop6: rw=34817, sector=77832, nr_sectors = 2048 limit=40427 [ 197.489550][ T5330] syz-executor: attempt to access beyond end of device [ 197.489550][ T5330] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.870822][ T6571] EXT4-fs error: 91 callbacks suppressed [ 197.870839][ T6571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.504: Detected aborted journal [ 197.889723][ T6571] EXT4-fs: 83 callbacks suppressed [ 197.889739][ T6571] EXT4-fs (sda1): Remounting filesystem read-only [ 197.907166][ T6571] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.504: Detected aborted journal [ 197.918283][ T6571] EXT4-fs (sda1): Remounting filesystem read-only [ 198.615637][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 198.637392][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 199.157627][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 199.411569][ T6299] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.424191][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 199.493102][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 199.504969][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 199.537195][ T6575] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 199.546311][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 199.554599][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 199.584557][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 199.624199][ T6299] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.635231][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 199.640432][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 199.666531][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 199.724231][ T6577] EXT4-fs (sda1): Remounting filesystem read-only [ 199.758958][ T6578] EXT4-fs (sda1): Remounting filesystem read-only [ 199.766424][ T6577] EXT4-fs (sda1): Remounting filesystem read-only [ 199.772492][ T6580] EXT4-fs (sda1): Remounting filesystem read-only [ 200.082464][ T6493] chnl_net:caif_netlink_parms(): no params data found [ 200.267029][ T6299] tipc: Left network mode [ 200.411206][ T6615] loop2: detected capacity change from 0 to 512 [ 200.471982][ T6615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 200.559960][ T6615] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.782062][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.798477][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.822057][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 200.835827][ T6493] device bridge_slave_0 entered promiscuous mode [ 200.978644][ T6613] loop7: detected capacity change from 0 to 32768 [ 200.985776][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.992910][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.013611][ T6493] device bridge_slave_1 entered promiscuous mode [ 201.153913][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.321981][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.672339][ T6604] loop8: detected capacity change from 0 to 32768 [ 201.883516][ T6493] team0: Port device team_slave_0 added [ 201.913024][ T6604] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 201.925302][ T6604] XFS (loop8): Mounting V5 Filesystem Sep 22 09:30:21 syzkaller kern.alert kernel: [ 201.913024][ T6604] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 202.009244][ T6604] XFS (loop8): Ending clean mount [ 202.082583][ T6604] XFS (loop8): Quotacheck needed: Please wait. [ 202.108417][ T6493] team0: Port device team_slave_1 added [ 202.235165][ T6604] XFS (loop8): Quotacheck: Done. [ 202.374824][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.381839][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.484643][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.619133][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.627508][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.688732][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.821086][ T6493] device hsr_slave_0 entered promiscuous mode [ 202.829569][ T6493] device hsr_slave_1 entered promiscuous mode [ 202.846306][ T6493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.853930][ T6493] Cannot create hsr debugfs directory [ 203.007637][ T6683] EXT4-fs error: 134 callbacks suppressed [ 203.007655][ T6683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.525: Detected aborted journal [ 203.091250][ T6683] EXT4-fs: 66 callbacks suppressed [ 203.091266][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 203.118849][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 203.141544][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 203.165193][ T6683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.525: Detected aborted journal [ 203.209428][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 203.232466][ T6683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.525: Detected aborted journal [ 203.246027][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 203.262405][ T6683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.525: Detected aborted journal [ 203.275627][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 203.294613][ T6604] syz.8.510 (6604): drop_caches: 2 [ 203.308145][ T6602] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.510: Detected aborted journal [ 203.309289][ T6683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.525: Detected aborted journal [ 203.335105][ T6602] EXT4-fs (sda1): Remounting filesystem read-only [ 203.342386][ T6602] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.510: Detected aborted journal [ 203.354435][ T6602] EXT4-fs (sda1): Remounting filesystem read-only [ 203.370949][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 203.379279][ T6683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.525: Detected aborted journal [ 203.412581][ T6683] EXT4-fs (sda1): Remounting filesystem read-only [ 203.420108][ T6683] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.525: Detected aborted journal [ 203.446242][ T6685] EXT4-fs (sda1): Remounting filesystem read-only [ 203.500287][ T6299] device hsr_slave_0 left promiscuous mode [ 203.509314][ T6299] device hsr_slave_1 left promiscuous mode [ 203.523611][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.536930][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.547931][ T5747] XFS (loop8): Unmounting Filesystem [ 203.576893][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.594559][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.622467][ T6299] device bridge_slave_1 left promiscuous mode [ 203.629335][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.651034][ T6299] device bridge_slave_0 left promiscuous mode [ 203.657930][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.791907][ T6299] device veth1_macvtap left promiscuous mode [ 203.804802][ T6299] device veth1_vlan left promiscuous mode [ 203.810788][ T6299] device veth0_vlan left promiscuous mode [ 204.256944][ T6299] bond1 (unregistering): Released all slaves [ 204.644442][ T4740] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 204.834480][ T4740] usb 9-1: Using ep0 maxpacket: 8 [ 204.842942][ T4740] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 204.861628][ T4740] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.873708][ T4740] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.894372][ T4740] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.905825][ T4740] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.919166][ T4740] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.931338][ T4740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.000221][ T6299] team0 (unregistering): Port device team_slave_1 removed [ 205.062861][ T6299] team0 (unregistering): Port device team_slave_0 removed [ 205.124247][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.164734][ T4740] usb 9-1: usb_control_msg returned -32 [ 205.170391][ T4740] usbtmc 9-1:16.0: can't read capabilities [ 205.234123][ T6706] ptp ptp0: delete virtual clock ptp5 [ 205.261649][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.379210][ T6706] ptp ptp0: delete virtual clock ptp4 [ 205.423282][ T6706] ptp ptp0: delete virtual clock ptp3 [ 205.458542][ T6706] ptp ptp0: delete virtual clock ptp2 [ 205.503870][ T6706] ptp ptp0: delete virtual clock ptp1 [ 205.562072][ T6706] ptp ptp0: only physical clock in use now [ 205.818297][ T6299] bond0 (unregistering): Released all slaves [ 206.206606][ T6493] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 206.278933][ T6493] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 206.343832][ T6493] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 206.400250][ T6493] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 206.885496][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.965623][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.988972][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.038987][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.086930][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.145797][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.170542][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.177730][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.220975][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.236552][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.255988][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.280735][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.287938][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.306831][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.361941][ T4323] usb 9-1: USB disconnect, device number 3 [ 207.383207][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.425555][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.443822][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.512780][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.552957][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.578582][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.601043][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.633532][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.655527][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.675351][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.701927][ T6493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.880106][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.896596][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.966795][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.029760][ T6787] EXT4-fs error: 94 callbacks suppressed [ 208.029776][ T6787] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.544: Detected aborted journal [ 208.053917][ T6789] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.545: Detected aborted journal [ 208.065497][ T6788] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1267: comm kworker/u4:17: reading directory lblock 0 [ 208.068887][ T6787] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.544: Detected aborted journal [ 208.102094][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 208.123944][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 208.126520][ T6789] EXT4-fs: 73 callbacks suppressed [ 208.126531][ T6789] EXT4-fs (sda1): Remounting filesystem read-only [ 208.145093][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 208.155492][ T5239] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 208.160221][ T6791] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1267: comm kworker/u4:18: reading directory lblock 0 [ 208.171025][ T6792] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.546: Detected aborted journal [ 208.178573][ T6787] EXT4-fs (sda1): Remounting filesystem read-only [ 208.188404][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 208.211570][ T6789] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.545: Detected aborted journal [ 208.226870][ T6792] EXT4-fs (sda1): Remounting filesystem read-only [ 208.236200][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 208.237067][ T6787] EXT4-fs (sda1): Remounting filesystem read-only [ 208.242748][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 208.258706][ T6789] EXT4-fs (sda1): Remounting filesystem read-only [ 208.281868][ T6792] EXT4-fs (sda1): Remounting filesystem read-only [ 208.283356][ T6787] EXT4-fs (sda1): Remounting filesystem read-only [ 208.328886][ T6790] FAULT_INJECTION: forcing a failure. [ 208.328886][ T6790] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 208.348785][ T6790] CPU: 1 PID: 6790 Comm: syz.6.544 Not tainted syzkaller #0 [ 208.356122][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.366203][ T6790] Call Trace: [ 208.369507][ T6790] [ 208.372460][ T6790] dump_stack_lvl+0x188/0x24e [ 208.377174][ T6790] ? show_regs_print_info+0x12/0x12 [ 208.382410][ T6790] ? load_image+0x410/0x410 [ 208.386958][ T6790] ? __lock_acquire+0x7c40/0x7c40 [ 208.392028][ T6790] ? mas_next_node+0x3f7/0xb70 [ 208.396830][ T6790] should_fail_ex+0x390/0x4c0 [ 208.401564][ T6790] prepare_alloc_pages+0x1e1/0x5b0 [ 208.406730][ T6790] __alloc_pages+0x130/0x4f0 [ 208.411368][ T6790] ? zone_statistics+0x170/0x170 [ 208.416383][ T6790] pte_alloc_one+0x7b/0x310 [ 208.420939][ T6790] ? pfn_modify_allowed+0x560/0x560 [ 208.426322][ T6790] ? __might_sleep+0xd0/0xd0 [ 208.430965][ T6790] ? __lock_acquire+0x7c40/0x7c40 [ 208.436033][ T6790] ? validate_mm_mt+0x398/0x420 [ 208.440928][ T6790] __pte_alloc+0x21/0x150 [ 208.445288][ T6790] ? move_page_tables+0x1b2/0x1950 [ 208.450424][ T6790] move_page_tables+0x175c/0x1950 [ 208.455485][ T6790] ? do_mprotect_pkey+0xba0/0xba0 [ 208.460543][ T6790] ? __vm_enough_memory+0x116/0x370 [ 208.465756][ T6790] move_vma+0x4eb/0xca0 [ 208.469934][ T6790] ? vma_expandable+0xf0/0xf0 [ 208.474630][ T6790] ? cap_mmap_addr+0x153/0x2c0 [ 208.479400][ T6790] ? bpf_lsm_mmap_addr+0x5/0x10 [ 208.484264][ T6790] ? security_mmap_addr+0x6e/0x90 [ 208.489303][ T6790] ? get_unmapped_area+0x2f0/0x360 [ 208.494434][ T6790] mremap_to+0x513/0x5c0 [ 208.498697][ T6790] __se_sys_mremap+0x691/0x1120 [ 208.503566][ T6790] ? __ia32_sys_get_robust_list+0x100/0x100 [ 208.509474][ T6790] ? __x64_sys_mremap+0xc0/0xc0 [ 208.514351][ T6790] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 208.520366][ T6790] ? lock_chain_count+0x20/0x20 [ 208.525237][ T6790] ? lockdep_hardirqs_on+0x94/0x140 [ 208.530446][ T6790] ? __x64_sys_mremap+0x1c/0xc0 [ 208.535313][ T6790] do_syscall_64+0x4c/0xa0 [ 208.539743][ T6790] ? clear_bhb_loop+0x60/0xb0 [ 208.544442][ T6790] ? clear_bhb_loop+0x60/0xb0 [ 208.549156][ T6790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.555081][ T6790] RIP: 0033:0x7febcdb9e159 [ 208.559515][ T6790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.579136][ T6790] RSP: 002b:00007febceab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 208.587570][ T6790] RAX: ffffffffffffffda RBX: 00007febcde25fa0 RCX: 00007febcdb9e159 [ 208.595560][ T6790] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 208.603535][ T6790] RBP: 00007febcdc3506b R08: 0000200000ffd000 R09: 0000000000000000 [ 208.611511][ T6790] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 208.619487][ T6790] R13: 00007febcde26038 R14: 00007febcde25fa0 R15: 00007fffa5201ef8 [ 208.627483][ T6790] [ 208.646064][ T5239] usb 3-1: not running at top speed; connect to a high speed hub [ 208.664753][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.681924][ T5239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 208.696175][ T5239] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 208.700622][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.712111][ T5239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.740766][ T5239] usb 3-1: Product: syz [ 208.745213][ T5239] usb 3-1: Manufacturer: syz [ 208.750256][ T5239] usb 3-1: SerialNumber: syz [ 208.772356][ T5239] oti6858 3-1:1.0: oti6858 converter detected [ 208.779546][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.803237][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.825085][ T6493] device veth0_vlan entered promiscuous mode [ 208.828116][ T5239] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 208.838523][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.847891][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.886350][ T6493] device veth1_vlan entered promiscuous mode [ 208.963433][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.974031][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.983679][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.005182][ T1149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.016917][ T6493] device veth0_macvtap entered promiscuous mode [ 209.065679][ T26] audit: type=1326 audit(1790069428.385:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.6.549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcdb9e159 code=0x7ffc0000 [ 209.099214][ T6493] device veth1_macvtap entered promiscuous mode [ 209.162160][ T26] audit: type=1326 audit(1790069428.425:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.6.549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcdb9e159 code=0x7ffc0000 [ 209.177742][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.247560][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.260002][ T26] audit: type=1326 audit(1790069428.425:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.6.549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7febcdb9e159 code=0x7ffc0000 [ 209.278576][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.289619][ T26] audit: type=1326 audit(1790069428.425:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.6.549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcdb9e159 code=0x7ffc0000 [ 209.315518][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.329103][ T26] audit: type=1326 audit(1790069428.425:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.6.549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcdb9e159 code=0x7ffc0000 [ 209.338807][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.353612][ T26] audit: type=1326 audit(1790069428.425:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.6.549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7febcdb9e159 code=0x7ffc0000 [ 209.378048][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.393445][ T26] audit: type=1326 audit(1790069428.425:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.6.549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcdb9e159 code=0x7ffc0000 [ 209.401482][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.429957][ T26] audit: type=1326 audit(1790069428.425:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.6.549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcdb9e159 code=0x7ffc0000 [ 209.434152][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.467923][ T26] audit: type=1326 audit(1790069428.425:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.6.549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7febcdb9e159 code=0x7ffc0000 [ 209.474125][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.521250][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.526801][ T26] audit: type=1326 audit(1790069428.425:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.6.549" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcdb9e159 code=0x7ffc0000 [ 209.559482][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.568033][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.585325][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.605640][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.635629][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.656102][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.679266][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.702089][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.736579][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.756596][ T6493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.782024][ T6493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.810463][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.846186][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.860767][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.918022][ T6493] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.952232][ T6493] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.991222][ T6493] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.019312][ T6493] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.414518][ T6301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.423849][ T6301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.467435][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.544763][ T4323] usb 3-1: USB disconnect, device number 12 [ 210.571730][ T6299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.588899][ T4323] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 210.608803][ T6299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.621630][ T4323] oti6858 3-1:1.0: device disconnected [ 210.649704][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.504067][ T6837] loop8: detected capacity change from 0 to 32768 [ 211.628850][ T6866] loop2: detected capacity change from 0 to 1024 [ 211.685991][ T6866] EXT4-fs: Ignoring removed bh option [ 211.718491][ T6837] XFS (loop8): DAX unsupported by block device. Turning off DAX. Sep 22 09:30:31 syzkaller kern.alert kernel: [ 211.718491][ T6837] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 211.754690][ T6837] XFS (loop8): Mounting V5 Filesystem [ 211.821277][ T6866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.959846][ T6837] XFS (loop8): Ending clean mount [ 212.039720][ T6837] XFS (loop8): Quotacheck needed: Please wait. [ 212.154048][ T6837] XFS (loop8): Quotacheck: Done. [ 212.590814][ T5747] XFS (loop8): Unmounting Filesystem [ 212.686429][ T6898] loop5: detected capacity change from 0 to 7 [ 212.722376][ T6898] loop5: [ 212.729694][ T6898] loop5: partition table partially beyond EOD, truncated [ 212.939518][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 213.081248][ T6301] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.127470][ T6906] EXT4-fs error: 147 callbacks suppressed [ 213.127487][ T6906] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.562: Detected aborted journal [ 213.177609][ T6907] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 213.238960][ T6906] EXT4-fs: 49 callbacks suppressed [ 213.238974][ T6906] EXT4-fs (sda1): Remounting filesystem read-only [ 213.273787][ T6301] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.294941][ T6906] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.562: Detected aborted journal [ 213.296522][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 213.309775][ T6908] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.561: Detected aborted journal [ 213.329157][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 213.335935][ T6906] EXT4-fs (sda1): Remounting filesystem read-only [ 213.342513][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 213.354800][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 213.356072][ T6908] EXT4-fs (sda1): Remounting filesystem read-only [ 213.373824][ T6906] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.562: Detected aborted journal [ 213.390243][ T6910] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 213.391493][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 213.419106][ T6908] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.561: Detected aborted journal [ 213.433509][ T6906] EXT4-fs (sda1): Remounting filesystem read-only [ 213.441125][ T6906] EXT4-fs (sda1): Remounting filesystem read-only [ 213.472235][ T6908] EXT4-fs (sda1): Remounting filesystem read-only [ 213.483631][ T6910] EXT4-fs (sda1): Remounting filesystem read-only [ 213.501806][ T6906] EXT4-fs (sda1): Remounting filesystem read-only [ 213.530351][ T6301] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.755345][ T6301] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.756110][ T6957] FAULT_INJECTION: forcing a failure. [ 215.756110][ T6957] name failslab, interval 1, probability 0, space 0, times 0 [ 215.806008][ T6957] CPU: 1 PID: 6957 Comm: syz.8.568 Not tainted syzkaller #0 [ 215.813380][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.823474][ T6957] Call Trace: [ 215.826783][ T6957] [ 215.829738][ T6957] dump_stack_lvl+0x188/0x24e [ 215.834459][ T6957] ? show_regs_print_info+0x12/0x12 [ 215.839712][ T6957] ? load_image+0x410/0x410 [ 215.844260][ T6957] ? __might_sleep+0xd0/0xd0 [ 215.848880][ T6957] ? __lock_acquire+0x7c40/0x7c40 [ 215.853952][ T6957] should_fail_ex+0x390/0x4c0 [ 215.858675][ T6957] should_failslab+0x5/0x20 [ 215.863237][ T6957] slab_pre_alloc_hook+0x59/0x300 [ 215.868320][ T6957] kmem_cache_alloc_lru+0x49/0x2e0 [ 215.873473][ T6957] ? shmem_alloc_inode+0x24/0x40 [ 215.878461][ T6957] shmem_alloc_inode+0x24/0x40 [ 215.883268][ T6957] ? shmem_match+0x160/0x160 [ 215.887899][ T6957] new_inode_pseudo+0x5f/0x1c0 [ 215.892708][ T6957] new_inode+0x25/0x1d0 [ 215.896907][ T6957] shmem_get_inode+0x327/0xbc0 [ 215.901746][ T6957] shmem_fill_super+0x738/0xb60 [ 215.906637][ T6957] ? shmem_reconfigure+0x790/0x790 [ 215.911765][ T6957] get_tree_nodev+0xb0/0x160 [ 215.916372][ T6957] vfs_get_tree+0x88/0x270 [ 215.920801][ T6957] do_new_mount+0x247/0xa40 [ 215.925318][ T6957] __se_sys_mount+0x2e3/0x3d0 [ 215.930007][ T6957] ? __x64_sys_mount+0xc0/0xc0 [ 215.934784][ T6957] ? lockdep_hardirqs_on+0x94/0x140 [ 215.939988][ T6957] ? __x64_sys_mount+0x1c/0xc0 [ 215.944765][ T6957] do_syscall_64+0x4c/0xa0 [ 215.949188][ T6957] ? clear_bhb_loop+0x60/0xb0 [ 215.953878][ T6957] ? clear_bhb_loop+0x60/0xb0 [ 215.958566][ T6957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.964482][ T6957] RIP: 0033:0x7f13bc39e159 [ 215.968913][ T6957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.988525][ T6957] RSP: 002b:00007f13bd343028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 215.996957][ T6957] RAX: ffffffffffffffda RBX: 00007f13bc625fa0 RCX: 00007f13bc39e159 [ 216.004935][ T6957] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 216.012908][ T6957] RBP: 00007f13bc43506b R08: 0000000000000000 R09: 0000000000000000 [ 216.020889][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.028868][ T6957] R13: 00007f13bc626038 R14: 00007f13bc625fa0 R15: 00007fff1831c378 [ 216.036860][ T6957] [ 216.224725][ T6301] device hsr_slave_0 left promiscuous mode [ 216.231348][ T6301] device hsr_slave_1 left promiscuous mode [ 216.254914][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.262368][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.286097][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.293549][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.315182][ T6301] device bridge_slave_1 left promiscuous mode [ 216.321461][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.355281][ T6301] device bridge_slave_0 left promiscuous mode [ 216.361549][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.637998][ T6301] device veth1_macvtap left promiscuous mode [ 216.655328][ T6301] device veth0_macvtap left promiscuous mode [ 216.661498][ T6301] device veth1_vlan left promiscuous mode [ 216.677889][ T6301] device veth0_vlan left promiscuous mode [ 216.764119][ T6916] syz.7.563 (6916): drop_caches: 1 [ 216.964548][ T4318] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 217.158074][ T4318] usb 9-1: no configurations [ 217.165159][ T4318] usb 9-1: can't read configurations, error -22 [ 217.341452][ T4318] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 217.546242][ T4318] usb 9-1: no configurations [ 217.550905][ T4318] usb 9-1: can't read configurations, error -22 [ 217.565348][ T4318] usb usb9-port1: attempt power cycle [ 217.883572][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 217.969731][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 217.979070][ T4318] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 218.033191][ T4318] usb 9-1: no configurations [ 218.042756][ T4318] usb 9-1: can't read configurations, error -22 [ 218.088716][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.147529][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.204566][ T4318] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 218.237245][ T4318] usb 9-1: no configurations [ 218.242040][ T4318] usb 9-1: can't read configurations, error -22 [ 218.251716][ T4318] usb usb9-port1: unable to enumerate USB device [ 218.549728][ T4259] EXT4-fs error: 68 callbacks suppressed [ 218.549744][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 218.571005][ T4259] EXT4-fs: 25 callbacks suppressed [ 218.571021][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 218.802986][ T6301] bond0 (unregistering): Released all slaves [ 218.984703][ T6976] netlink: 24 bytes leftover after parsing attributes in process `syz.7.571'. [ 219.063942][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 219.094480][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0 [ 219.125862][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 219.155128][ T6980] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 219.162807][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 219.188670][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #264: comm udevd: reading directory lblock 0 [ 219.204980][ T6981] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 219.207061][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1642: comm udevd: reading directory lblock 0 [ 219.233265][ T3638] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1480: comm udevd: reading directory lblock 0 [ 219.715806][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 219.752288][ T7009] EXT4-fs (sda1): Remounting filesystem read-only [ 219.765850][ T7010] EXT4-fs (sda1): Remounting filesystem read-only [ 219.779948][ T7011] EXT4-fs (sda1): Remounting filesystem read-only [ 219.789717][ T7009] EXT4-fs (sda1): Remounting filesystem read-only [ 219.793718][ T7011] EXT4-fs (sda1): Remounting filesystem read-only [ 219.807050][ T7010] EXT4-fs (sda1): Remounting filesystem read-only [ 220.990868][ T7022] EXT4-fs (sda1): Remounting filesystem read-only [ 221.013867][ T7023] EXT4-fs (sda1): Remounting filesystem read-only [ 221.042965][ T7027] loop8: detected capacity change from 0 to 512 [ 221.095957][ T7027] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 221.173732][ T7027] EXT4-fs (loop8): 1 truncate cleaned up [ 221.185655][ T7027] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 221.289553][ T7027] EXT4-fs error (device loop8): __ext4_get_inode_loc:4520: comm syz.8.577: Invalid inode table block 0 in block_group 0 [ 221.366884][ T7027] EXT4-fs (loop8): Remounting filesystem read-only [ 221.452634][ T5747] EXT4-fs (loop8): unmounting filesystem. [ 222.880894][ T7041] loop2: detected capacity change from 0 to 40427 [ 222.897347][ T7041] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 223.623198][ T7047] EXT4-fs error: 46 callbacks suppressed [ 223.623215][ T7047] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 223.677291][ T7049] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 223.761302][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 223.783912][ T4259] EXT4-fs: 10 callbacks suppressed [ 223.783926][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 223.806559][ T4259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 223.822222][ T4259] EXT4-fs (sda1): Remounting filesystem read-only [ 223.878666][ T7052] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.581: Detected aborted journal [ 223.887707][ T7053] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.583: Detected aborted journal [ 223.899361][ T7054] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.582: Detected aborted journal [ 223.911822][ T7052] EXT4-fs (sda1): Remounting filesystem read-only [ 223.919048][ T7054] EXT4-fs (sda1): Remounting filesystem read-only [ 223.934068][ T7052] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.581: Detected aborted journal [ 223.937364][ T7053] EXT4-fs (sda1): Remounting filesystem read-only [ 223.961578][ T7052] EXT4-fs (sda1): Remounting filesystem read-only [ 223.988279][ T7053] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.8.583: Detected aborted journal [ 224.031955][ T7059] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 224.087264][ T7053] EXT4-fs (sda1): Remounting filesystem read-only [ 224.105846][ T7053] EXT4-fs (sda1): Remounting filesystem read-only [ 224.122859][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.8.583'. [ 224.180241][ T7053] EXT4-fs (sda1): Remounting filesystem read-only [ 224.200442][ T7053] EXT4-fs (sda1): Remounting filesystem read-only SYZFAIL: mkdir(syz-tmp) failed (errno 30: Read-only file system) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=9 req=484 state=1 status=7 (errno 9: Bad file descriptor) [ 225.804578][ T5240] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 226.704024][ T5240] usb 3-1: device descriptor read/all, error -71 [ 226.750840][ T6301] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.876131][ T6301] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.997310][ T6301] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.128065][ T6301] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.386367][ T6301] device hsr_slave_0 left promiscuous mode [ 228.392912][ T6301] device hsr_slave_1 left promiscuous mode [ 228.401643][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.421132][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.429928][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.437748][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.446638][ T6301] device bridge_slave_1 left promiscuous mode [ 228.453013][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.470608][ T6301] device bridge_slave_0 left promiscuous mode [ 228.479569][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.518149][ T6301] device veth1_macvtap left promiscuous mode [ 228.524296][ T6301] device veth0_macvtap left promiscuous mode [ 228.531746][ T6301] device veth1_vlan left promiscuous mode [ 228.540042][ T6301] device veth0_vlan left promiscuous mode [ 229.509513][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 229.593505][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 229.682754][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.776705][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.427949][ T6301] bond0 (unregistering): Released all slaves [ 230.582348][ T3933] EXT4-fs error: 141 callbacks suppressed [ 230.582369][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 230.623875][ T7130] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 230.649189][ T3933] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 230.748704][ T7132] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 230.797510][ T7135] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 230.852436][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 230.868060][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 230.883075][ T7138] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 230.894643][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 230.894941][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 231.228996][ T6301] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.318184][ T6301] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.432605][ T6301] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.481747][ T6301] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.652665][ T6301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.745250][ T6301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.829674][ T6301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.895691][ T6301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.087074][ T6301] tipc: Left network mode [ 233.379023][ T6301] device hsr_slave_0 left promiscuous mode [ 233.385330][ T6301] device hsr_slave_1 left promiscuous mode [ 233.391525][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.399395][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.407409][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.415267][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.426782][ T6301] device hsr_slave_0 left promiscuous mode [ 233.432983][ T6301] device hsr_slave_1 left promiscuous mode [ 233.439389][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.446926][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.455176][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.462588][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.496951][ T6301] device veth1_macvtap left promiscuous mode [ 233.502981][ T6301] device veth0_macvtap left promiscuous mode [ 233.510751][ T6301] device veth1_vlan left promiscuous mode [ 233.516585][ T6301] device veth0_vlan left promiscuous mode [ 233.524144][ T6301] device veth1_macvtap left promiscuous mode [ 233.530402][ T6301] device veth0_macvtap left promiscuous mode [ 233.536740][ T6301] device veth1_vlan left promiscuous mode [ 233.542606][ T6301] device veth0_vlan left promiscuous mode [ 234.209805][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 234.262755][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 234.309654][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.357794][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.717241][ T6301] bond0 (unregistering): Released all slaves [ 235.263944][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 235.313886][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 235.364070][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.414948][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface