last executing test programs: 4m8.489337468s ago: executing program 0 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffb, 0x9, 0x10001, 0x7, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x4000000000000b3, 0xffffffffffffff04], 0xeeee0000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000001c0)) 4m7.800409781s ago: executing program 0 (id=246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @random="6d89e6ae94a5", 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x40084) 4m7.421124178s ago: executing program 0 (id=249): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$tipc(0x1e, 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(0x0, 0x1b4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4m7.16764477s ago: executing program 0 (id=252): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$eJzs3M1vFGUYAPBnptsvWmkxRoWY2MSgRuNSKMGEE3g2aiIHj9R2S5ouH7Y1sQ2Hgnf1YIwHEsOfYOJdLp5MPOBB0X+AGIkhegEOa2Y/SmW7Sy27O6X8fsm787777s7zPDuw806y0wCeWBPZQxqxPyJOJxFj9efTiBio9oYi1mqvu3v74kzWkqhU3v8riSQi7ty+ONPYV1LfjtQHQxFx/a0knv60Oe7SyurCdLlcWqyPDy2fvXBoaWX1jfmz02dKZ0rnjk69eXTq2NRUB2u9eeHDr1/4+Z2XL1/9bPLdr/b+mMSJGK3PbayjUyZiYv0zyfTXt4WImO50sJz01evZWGdSyDEhAADaSjes4Z6NseiL+4u3sfjhl1yTAwAAADqi0hdRAQAAAHa5xPU/AAAA7HKN3wHcuX1xptHy/UVCb906GRHjtfob9zfXZgqxVt0OVe/b3fN3Ehtva01qb3tkE1mk734qZS26dB9yO2uXIuL5zY5/Uq1/vHoXd3P9aURMdiD+xAPjx6n+Ex2In3f9ADyZrp2snciaz3/p+vonNjn/FTY5d21H3ue/xvrvbtP67379fS3Wf+9tMcaBe69dbzW3cf33wee/zWbxs+0jFfU/3LoUcaCwWf3Jev1Ji/pPbzHGyMzNK63msvqzehut1/VXrkYcrK7mmutvSNr9faJDc/Pl0mTtcZP9rxxrH3/j8c9aFr9xLdAL2fHfE9s7/he2GGP8uT/3t5p7eP3pHwPJqWpvoP7MJ9PLy4uHIwaSt5ufP9I+l8ZrGvvI6n/1pfb//zerP/tOWKt/Dtm/nkv1bTa+/EDMkYNHvt1+/d2V1T+7zeP/xRZjfPP9lY9azeVdPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPhzQiRiNJi+v9NC0WI0Yi4pnYk5bPLy2/Pnf+43Oz2VzEePSnc/Pl0mREjNXGSTY+XO3fHx95YDwVEfsi4sux4eq4OHO+PJt38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwbiYjRSNJiRKQR8c9YmhaLeWcFAAAAdNx43gkAAAAAXef6HwAAAHa/puv/wn9GQ73MBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF1p34vXbiQRsXZ8uNoyA/W5/lwzA7ot3fY7K5WOJgL0XF/eCQC5KWzoVyrO6fAkcY0PJA+ZH6pvf2+aGexKPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsTK/sv3YjiYi148PVlhmoz/XnmhnQbWneCQC56Ws3mfQuD6D3CnknAOTGNT5QW+rfq9Q0zw+1fOdgN9MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYIcZrbYkLUZEWu2nabEY8VREjEd/MjdfLk1GxN6I+HWsfzAbH847aQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpuaWV1YbpcLi3qbLdz71TEDkhDZ2d1hqPrIQa7WUXe30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORhaWV1YbpcLi0u5Z0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkLelldWF6XK5tNjFTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQn38DAAD//yk3EKU=") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@bsdgroups}, {@quota}], [{@seclabel}, {@euid_eq}, {@audit}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x66, 0x32, 0x53, 0x66, 0x32, 0x32, 0x30], 0x2d, [0x36, 0x62, 0x4, 0x37], 0x2d, [0x39, 0x38, 0x5f, 0x64], 0x2d, [0x63, 0x35, 0x32, 0x63], 0x2d, [0x31, 0x64, 0x39, 0x37, 0x64, 0x35, 0x30, 0x30]}}}, {@uid_lt}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") r1 = getgid() chown(&(0x7f0000000080)='./file0\x00', 0x0, r1) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 4m6.288172041s ago: executing program 0 (id=256): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x1ff) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002140)=0x1) 4m5.871588791s ago: executing program 0 (id=257): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0xa, 0x70, 0x80000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x88064, 0x0) 4m5.68100406s ago: executing program 32 (id=257): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0xa, 0x70, 0x80000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x88064, 0x0) 4m5.405241343s ago: executing program 4 (id=260): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"], 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 4m5.05887017s ago: executing program 4 (id=261): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 4m4.692570807s ago: executing program 4 (id=265): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x8, 0x7, 0x7}) ppoll(&(0x7f00000000c0)=[{r0, 0x9000}], 0x1, 0x0, 0x0, 0x0) 4m0.767197631s ago: executing program 4 (id=285): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000100)={[{@user_xattr}, {@jqfmt_vfsv1}, {@errors_remount}, {@nodiscard}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyHb8I1nshWV3czMsZAMhcpz1JrvQQ0oPpdBAoD03MbJiUstWsOQQG0MTSqGXQlt6KLSXnPsjvfXaH9BT+1/0UBLSxglN6aG4jDSyFVtybMe23PrzgfG892bk977zZjRPmkETwIE1nP7JRRyNiLeTiMGsPImInlqqO+Jcfb1HS4t9EVFIYnn5pZ+S2joPlxYL0fSa1OEs88+I+OqNiBO59fVW5hemxkul4myWH6lOXx2pzC+cvDI9PlmcLM6cGR0bO332v2fP7FysP3+3cOTuO8//+9Nzv77+j9tvfZ3EuTiSLWuOY6cMx3C2TXrSTfiY53a6sg5LOt0AtiU9NLvqR3kcjcHoqqXa6N/LlgEAu+W1iFgGAA6YxPkfAA6YxvcAD5cWC42ps99I7K17z0ZEXz3+R9lUX9KdXbPrq10HHXiYPHZlJImIoR2ofzgiPvz8lWNdWT5th2tpwF64cTMiLg0Nr3//T9bds7BVpzZauNxbmw2vKT5o5x/opC/S8c//Wo3/civjn2gx/umtH7t/f9r62x7/K4Or3J2nrWMj6fjvmfq9bWvGfys3rQ11Zbm/1JrVk1y+UiqeyrZBKs2P1lKtR27HH/z2oF392fjv43S6/+6rH6X1p/PVNXJ3unsff83EeLX7m6cJusm9mzGQJdfEn6z0f9Jm/Hthk3W88P83P2i3LI0/jbcxrY9/dy3fijjWsv9X+zLZ8P7EkdruMNLYKVr47Pv3B9rV39z/6ZTWn853PtLW7t2MGLg/GEmyug3qS1biH0qa79esbL2Ob28Nftlu2ZPjb7n/jx9KXq6lD2Vl18er1dnRiEPJi+vLT6++tpFvrJ/Gf/xfrY//erWt9//0M+GlTcbffffHT7Yf/+5K45/YeP9f0/99WfFqyZMStx9NdbWrf3P9P1ZLHc9K0v5/Ulybadf29mYAAAAAAAAAAAAAAAAAAAAAAAAA2LpcRByJJJdfSedy+Xz9Gd5/i4FcqVypnrhcnpuZiNqzsoeiJ9f4qcvBpt9DHc1+srWRP70m/5+I+GtEvNfbX8vnC+XSRKeDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM4TbP/0/90Nvp1gEAu6av0w0AAPac8z8AHDxbO//371o7AIC94/M/ABw8mz7/X9rddgAAe8fnfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZhfPn02n5l6XFQpqfuDY/N1W+dnKiWJnKT88V8oXy7NX8ZLk8WSrmC+Xptv/oRn1WKpevjsXM3PWRarFSHanML1ycLs/NVC9emR6fLF4s9uxZZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACweZX5hanxUqk4+6dI3FgNbIf/c39H4xrYH5u3KdEd+6IZ+zrRG/uiGdtMNL9L9HfgnQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgj+H3AAAA//+0Bxg2") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) 3m59.611286516s ago: executing program 4 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) init_module(0x0, 0xe7, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 3m59.272144522s ago: executing program 4 (id=298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) shutdown(r0, 0x1) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41) poll(&(0x7f00000001c0)=[{r0, 0x254c}], 0x1, 0xffff) 3m58.963043426s ago: executing program 33 (id=298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) shutdown(r0, 0x1) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41) poll(&(0x7f00000001c0)=[{r0, 0x254c}], 0x1, 0xffff) 4.941234057s ago: executing program 3 (id=2156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ef01010100000000000000000000000008000000"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 4.315969176s ago: executing program 3 (id=2160): ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x8, 0x7, 0x7}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@rodir}, {@rodir}, {@shortname_win95}, {@utf8no}, {@numtail}, {@numtail}, {@utf8no}, {@shortname_win95}, {@utf8}, {@shortname_win95}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@usefree}, {@utf8}, {@fat=@flush}, {@numtail}, {@shortname_win95}, {@fat=@tz_utc}, {@shortname_winnt}, {@shortname_winnt}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x36b, &(0x7f0000000340)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.098753667s ago: executing program 6 (id=2164): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x11000a0, 0x0, 0xfe, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f5849190bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdf8ff8fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080ea5dcc1dcb9d623c3c44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c8045201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf070069dcb5060000004710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d3065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307a13971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdadb97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be00", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000083c0)={0xb0, 0x0, 0xfffffffffffffffb, [{{0x4, 0x2, 0x8, 0x2, 0x5, 0x9, {0x5, 0xffffffffffffffff, 0xff, 0xb35, 0x9, 0x8, 0x4, 0x2, 0x3, 0x8000, 0x80000001, r2, r3, 0x7, 0xaa41bb1}}, {0x5, 0xd1, 0x1, 0x6, '.'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0xc0) 4.052048129s ago: executing program 6 (id=2166): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xa4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) getdents64(r1, 0x0, 0x22) 4.007465981s ago: executing program 6 (id=2167): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x4000841) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.731740884s ago: executing program 3 (id=2168): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x60080, 0x0) readlinkat(r1, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x3000004, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040)=0xfffffcdb, 0x4) 3.432720268s ago: executing program 2 (id=2170): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_NOTIFY_RESEND(r2, &(0x7f00000000c0)={0x14}, 0x14) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) utime(&(0x7f0000000000)='./file0\x00', 0x0) 2.890469294s ago: executing program 2 (id=2181): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="001201000000c4"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.74920608s ago: executing program 3 (id=2172): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2) r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) 2.601565508s ago: executing program 6 (id=2173): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xba) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000d0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="2d01000000000000fd00000000000000000000000000000000000000000000007d00000000000000ff0f0000000000000600000003000100000000000000000004000000000000006a2b0000000000000000000000000000040000000000000005000000000000000700000000010000060000000080000040001000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000002006000000000000000100000000000000962b0000000000008d"], 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 2.475697883s ago: executing program 6 (id=2174): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x38}}, 0x0) ioctl$sock_ifreq(r2, 0x8924, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x1}) 2.356374719s ago: executing program 6 (id=2176): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='+p', 0x2) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x1808014, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/716, @ANYRES8, @ANYRES64, @ANYRES16], 0x6, 0x5593, &(0x7f00000061c0)="$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") r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r2, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) 2.280235622s ago: executing program 2 (id=2177): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c7) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000480001"], 0x4c}}, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.732758598s ago: executing program 3 (id=2179): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d8", 0xd1}], 0x1}}], 0x1, 0x2090) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="228b0a365203", 0x6}, {&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b3835e48fad535a40000", 0x5f}, {&(0x7f0000000300)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2ac84a402a80df00cf64b156defd33afafab5c8a40dd0f79d03bf481fd2bf7c4c084227a9b3951d6e23156c58e8ff86f5a619", 0x69}], 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf", 0x61) 1.729695208s ago: executing program 2 (id=2180): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.663990552s ago: executing program 1 (id=2182): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8000000000000000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="8001000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0100000004000000000000000000000000002000370500000000e1ff2a"], 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000000340)=""/151, 0x97) 1.446606802s ago: executing program 1 (id=2183): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='syz\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='add foosyz 127.0.0.1\n\x00', 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000200)=@cell={0x25, '', 'syz0', '.readonly'}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)={[{@dyn}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foo@sys\x00', 0x0, 0x0) 1.131868826s ago: executing program 1 (id=2186): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xba) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="a7ffa00fb7362d7643b5d57b252efa82f0048b50f15e806e5140cd8c68db5a3959b26b42770661873ccd880e952eea780936031a07bdb8f55367b86478e8c023961bfe71fe9ed7077f1890359617a4b58fb5aa636467bbe5f6598c7d286ad1a39784120d5adcf3532a22486b315ab6ebdac84e85cecca574113f022c33b818b353f90b8da049025ab6e6c364d69588409d14df74744c20c3364d431e8417e781c32d2281e712cfd3ba31d4197a32f8ae189ab04f787f421a7b8573c56df0ee9e8088ffd9b370e1cf78a2fa7adb10b2770d61d471158ed6d72e8f0c0c0e10673894ce9b86c854efa8932534bbabc7b6c3e0a2b1898befeadde5346a4d884c69138ce4c9a69e466c7b7c6fb1711a6ba276778fc735e814679ed1d58418ad2422c216f41cc2d8794614867f1f5840a54c31ffe46af3065a1eb8f3a2cde8381e556d13f82773cd7c72869169a8b9d38a1d8a521a907822fe862a2da9dc6d3cdfe9d41453b4022bb4a2d981767fbb83da01d7e8adb99f2c2bd0822e824129ebc992e4f189edd80179cf07b93ce537ab81dc0d6a08ade45b237a3471706aacfbf9931894ff0b1c744dd71502871c3a5569baf7119bd318b8c493144265e5ada08dc6c54f602a3d866d2ba2875fa5c1d05c0724b7dbd0b033d47ee478d3ec89ec7baa51aaf7a8fe8ec047dafca190f11a334143197bd10aa003180ced26b08cfdc90891d6eb631bb0b1545ce823dea37d13e5c95f226b7a888925e8e5103984b2e01970f0c61069b976adf601187e69034fce51eef9b720c20054694df885345b05927b26044d4fd5ac729cb8d36250da0af4187f2f1fac72c8db880bbbaf9f2c3570c489f32a47ae4f75cae00225029b3662dad99fa4a561ab22f41a4f02e896dd145a8a54ef30a58eb30d4fb690d758d5429c1af4a3f596ba6f226f71a15d1f6ba47328697aab83322afa4c02a601c39faf22ce3e626f843032ce6f8e0444a4260c527b23a92df5ab18bd368bd016085778a08d9ee6f8092be13ce18a8cd97ae80f5b1ec36871fa362e34cb3b38c21f75bc4865896b1d4baf847d2740c0150802b505713bfcb91d70d7d23ec2402abef578202b863bdc9af2cccfe15be94c946cb265515efc1feb6a589d8ae08b1494655727d2c43825f88f4ddb850e258d796b886220897f8075b1a9e88e82b330fc12c9721dd88ed83fc08958d12220ea9c441e81fc49d5bdf3df4357f7bc2dca0acface8545028135c16ee46a0641bd327bef978cef5627d1fa8bfa87339a7438de30f143ff547f58bc446a6b01d9fc9f5ad435594426771720940008b182b74e83df5f68eb9e29caa0a5d58a32970e3e0ad74c37683418d232709b444ee4a871fa5fef5ff34c2d659c62e473f77b4bbe09b3b6a2a7b77e872d8329a79c6c1375a56f67a63cba8c495756aa0a536e733bcb28e514771a6e06a22c58604437b157ec3fac6a14454b57eb0841938236fe1b885bbc88156c3c149c694542f871db9a99b906a40220f2ff3694ed071766977903fb6011e7ac2c6e63f6a4a7d16003fc0bbafa1def29420838ebe960e3f0eb0fa04a3a05e81f33e8a931c727cb0c69efe820d7da367c45d4718c729683141dfaa24409cae64b9e1890a0cef5e1fce1f22f50fe8718616247e73110da1f96d03491f5e36188c451da1fe60ff7a126d79d4eac5c285b4eeda3a4d914cbc3bb757aa58027ee9b90090ec1fd43d5bc92b0c1a42874d631b28a239461b230347d6e16533ff8949ef6568640cd37efdd04e0d912337565ece700da2e1fba10c1b24e1a2ffca1ee3de772bf6bf6fb7a24b38abd36bd55c90aae12a109df0341509881f3c8b1576ea4a724961976ebaa4083a773830254966674fcded2b0376debb6097a2b8f6ae2da9940966229e1a0ca93989ec4d871c8b89970d766bbc928b3d2b094176c020dddbacb1915a61fc584e6acda67325ce26995d8e315663fecd66fc5a0ab0e75fdca087afc7a0b65109f346d544014b1260e689b271d7e692fd83ac488aaa583072f1068cd6275ca08f542a691512927b0ea76584dd2b5632219afd0abdf26bc10c5a72e1ba7da48909e906c226564156cf12cc5da7da6575a1769c52ca13ba5643c598474af9ef8f5cab8b64c475483e7e91e4f12cabb3849b9d9944bad479cc99c640e216e3e287b9378f0c1f98f658d7c57b2135531812e0132e1858472f4cdfd23705521a5135236090a8c43a8015abad21cc0f8fdead3259c41a13739b50c4de4fc2a620c67c3da0f2bbed98325a7ad56d297ed0c34351f4ddf63c7a9fcf8e326a02303bf2c1d60652a9cc3c3d616531902a621574991fc82f2252623ba625ea5ba754c5ab9386ea1fa5f69b1a2881ebcf7b19167127c8736ad614fb03698c23ad70f1dc2263a8fdc36d03394c362206118a1a94be6adf9e05256eb9b3f0fd02e6f018fa9dd3e2e839fb8cca700f29d0b8b9fa81a70cba4ac8b0e666f2efbb89f45667b4cac3947096be48d9fc2cdc5aea16bb5c069088caafd48422ab61cbc3af86ef8daa2d9608166d2e8097fe8088a17a30a7309ec3718e3a652217df12d85667400a9073dc0c1f485be09592670874714c6d3d557dfa41f6dcc4c3ca04111586d8e30ddc7d8067563d4acafa1f35ebf2a3a1c2d298618295bab8b71638f10164e9ee88668f899fb06112d72f79705d7aa0217007ca5e258f34e2b227acd87af2c2d0d019a25940675378aba10e74b849d2573c894fe781c25eed4a48d216f5359db7317dd101fc57249c188ff3243123dbae6eada1d30705e3c35a2912ceb8a2e57b9017b94a6bac989488d98a5a9017477cf96b39de4244ac742a4cafb1807f59b0d3b00000200db1317953d6443b662d4d47c84740b82069a00a6e1de3e6c03d17fd95e5b234c5e7169eba0831488cb246bfccc89413d4609a42a459f2695bf8d4303988c934b591a678e6f2de36fe42a57f32ea785fe95c1636d857ff50bf6a3bfc9a00085e056b2403425be90242318c67a87917c4212ab71663c05f1802d586297c09286ea12db0118fdcb41336b802016979bda1f8f8905eb701b175af95f15693675b07eacab5f75dd4cda48a81a17e0273677453dbeec8707f5d365e6998d4792942a26f5a9147c41e4040740660fb8271aef838d2c36ca6c15d27615ecd7044b4f47dd3412025c05aa2f91bb85a15b0e0e86cbd0ed33aadc4e601e4ddf2107f55588438dfc69dac387f2c9996cad89b236ad73509b59a067783b52d424fb1efc60aaebc5ab5d72c742e6e0055fc82dc33ebd8a27e9a079bbcee2160874f19a1b4028f9f9fd0aa6c7411ab64dd9fe1ea8451791b1c8496336fe7349db30c6913a28037a7c35842133242160b1c70cc8565b0dce3281785ce050a6ff1d0dcb9feb19084f3a2c2b596eb62d948aa0525ecee9862d4c345902367331b53404975dd759806fdd88d22c5c07623c11cd247d38da951e4ae8d7ffc6eea547d6e8f7dfc83dabdb29ea6e8e7a56b4fdaff2b6a6cdbacd75d2712a780b51fa529628fc68a0b115f594aa9f2e5171ed7c782ced53aa3da83b2b5f347d299d594bbeb8973b80a2150bf36ba7549227c2fd43c197b5f67d71be225290f6fc22db5ca50c747a99d20c2fbd121448e2aa8a691dbb0fd52c3cd109180b5dfeafb2dd1547ce6133b279f977036067491f64d0668dd80bb5280f7463b14c91d591df4900514b04fe2eba55e2b4c95d76c78ab4d62ebfad5b1545ba1a148cdc65ff6180254231906b1389975c4f9c6d18e004d9721388fa88292c465e48de5660e8955bed21dda3fadb5224df37b3c2b83019d325ef9c07b6055d48163130e667ac510368dfd196d48dbecaebc08b1d0dbe5702c8509d537f71348fce869b409a947be6d256129a773944a4d050e39a18434c8565d2b63f83f47ad0958eaa861f4978ccd6db9d9623d96aac44d68ad511ca03d60165c6a8ce61f7f742caefe2af5a758da986c1093a5a20a4776736dee2db002a2bc2a4b49b958955894be3dc805eb5209055f4bf4b24640a051b1a5753a8cf4488aae9296f323935da64371b33877f831e35aed0011ab05302602b17555d94a8d27cfed4b734cc2da68e0e79b4ef02ed88fb29de99bbc0217fb5720f93b8e65195850a5f63a9d103bf35f01628e7d21ae1f7151315d84226404b53751db1f35b99b71ffc5c4fe2f3d6a77116f9b6a363be56b63d41ee08d7c44bb562199bcdb1b52fec99ed2f8b8cfd6d38e80d6e65562fc61c3d4e988983b9eaa1f4bf40c2107172b8615950bf71f104a9f5c08b8501c97a6a1406dd74eaae1e50d6e216bba4eea3f00acefe6e78e73dbe8aabf06f4bacea5da6710c0dc3113d297e6d060f633dac4d77c6f517a676f881beea34c552c044bf1d654cab8eea33eb123e024c3198cd43486988ccaf35645f9780e1021b03314214aa11474539360b9bad6b5a6cc6efdd64c67e8c6e85650112138838e14deee1797e9930fbdac8a2575c6f796bfb340b0efad68cc9497b1360af46860b9963e64e01dd9348072fad39259db83898ba02ca4b254ca5d79cdd3916fcfb03ace4cc1e1b1695d5b8aff4f7ee846b79926df4014297a822ec51182b618b2bf2f3e6c047bd66b6d7dc99da51c81247e779a8c0a4566aeed7dc983112dd44acbf324f26a34cbb859ea9a4d76225ea6eaae15572201964259b1bef04c873431a1474c03ad4988db95a49725abc390303379c4a4ddd17b58bdc59bc7db412e8ece1c94036c4b11b99f7f76a829a0236ca3b3586843311e01d410d94c9fa6bb6df230d36536721c4251175b049616184c70380d9ea0086a2089a002928aae612f8f3f397e917bef72303c5cc33e3fd23a254b3f2a37d0ef7eeca37cea532a6118009c1eff356236ed091e463d277097e9b0eb6728d55803b136dac4e4ad0c09520d67e478a03e50b884f1602b43296bb95dd709bb98342e7344c63c729b9e6e161f464bc4c9dbd02c927e86e50bbe457dcb1780e3623e18e6a761dcca00339aa2d29de9ecbe67c98912f13301d5ec4d0903666424b82f33fbf6c362acbd118c95e1cf19792b41e224bf9d6d1412e544104df44515a1804141ab6c7826a681aae5932fdb8779c75913945b6fba13d04d4f96e6471b19025708d8b0ca1504325873893a5af9a9b1096cacb5f6e6bbc11175bbdc70d312255804d1c5f243ae561c0c073fdee705b1c847529c7399785a0e58626a0311fb00cd69da9fc578b2e28c28672a9630008c9ba86d8fe22e0d334f24328c705386cdef00e05f6340b53581b99ae4ff8873766c7804c93b7d9f83c1b01f7b65bac5082717a0db41714d7bacf9ce3cc6205381c83d30f05061e7619505d6d287fbb476449dc0292fbdf00026a5366256e4c380174c671a5baf5c5a0e1d2c5e3d169171bc93e68cbf069244bcfe44d2b325056998915680c3b12aa558442e08ae598d55bb645384aff0cb2a9703408b614a9078ebafbe740a1d4327a5285d2dbce6cce07546915ddf81e8e81a1842bad9b24fe4bab0f273fd403863d842229f917dfb40f4621e6ba6426eeff2b3bd08df1d1d9a01eea869ea9e063e864f86cbe4bcb98009850cee644fdba6e9dd75f76e6f5c0cba6ce85047ee18d54f2fdbbf92da611e8d6fb946db81d4c9a0415405f2a7c5a31040183b64fa56cd82f1f1a783a090de97f619075bc52c01b251ef59faf636b47a5753fc9e7fb01fb6d2450d66fdf14200b4e1addaa38c497a95a1f4d2bc5eea644dbb0767562d87e9d7909d8a2b3cc7314e272cfe09bc66ac1c8510d7de54e129418446b7022ffdfe1ad64d8e4b5a34dcdc5792f25e4f99bc778b79cd77355e814de3d96abbae10a8631bc06fc388a85f93119b3f0a50ddca78c6471a7a4e95698838c45eb56e36f21e7fa7df92e182dfb074551fba52c4f8ba113b18bdbede64b4008c7fb828b2ff40a8031d819d5edcac5a218f9120b124197f61535d8313949de17ca9782028f67fc3bd128771b315921cb3664c217149d86936b93c8c6b8b3a25af2d9643e63e5c1dc4d904cd1ea8e1060b7f125073da8931d08f88515925ea938ca0d4203b5a15bbf26af5f6031e55f6197451623c471dfddb3d678a8ceb6d44c3dbe8d6db6dac22124859894deb45ad1f471c8cae4083bb9026fea2a93f361863aa9e8d7d17cb97eaca9de77bf8c91cc6b8047ddcf7cc569c6ee1cd22710dcca7f4dac0e49e924a127581ee79fb427712965abbd5b5dec571a53344a0f5c6ae6c4b9b655ffbf6d6045dabec0a295014f7caf1fa2b3436f033cce5fc7a14353137064a5fab0926c3c095a5127a43b738b07c4be3bfb63fcb094daefa890e9b21643ed2b8c5d981473c481f3ef85a25fbc1fe91603a41393a9d6f626b2c6408061af49eaffab36b77fab3b47c80cdaaa5cbf29b86369afc64fde2f69ece0c514bf0a98551d7c36055158c49095adf32d8f8dc7b7b0a18cf0d2962c602b07006a53e078d26b16b23dc90b69f8618fca4b41f45afb1761cc2b215b90dfc998e038111199eea0ea0322b3e30b6dd39a0593d7428d69f40ce072491e0005262d24cc6bbaf71427e885dc8549a6024ced752baa74b81233b7a3f871dced46c52c6b749df68c4e2a5ac467c509ce2fa75ef1df2ad760702117b8006aee3b28d154cae96cbfafaeff9450a837e7f2719d8566bc8239656e31c2394a09038ca0494c82691a36b2b5b8b23d1003bcdd657591d1f36606f8fb0823da0c962b796b5a78193e95a766cc85259c1e0192f51e54bdcd85d26d44762a7b4c5a78fb87293e035ce3625841b4e85764200817f80557b7b6772da81c93675f143c2a8730f5d9ef8c1ae8270fca47289dc8c1fb0d37a17438cba0b8b29fe6f89d55995cc420a12522154e1b68896f0d23a868b19862ca47b940f00246911c598d102bac78110022434e5de484911f9568afa8f86d60470b7c9653a0ca7a56b50ac18172524ec0f3b1b16968f225c90e89d51cf765721579774d691fbf573222968d6a24f3e8b3aac07809c4b03841add126ad14bca2d85de69744fd077d7e6c69ba7f25f4c4a8be62313bdfe573b81ae6ea616122644ffd6403828fd2600116ae843a56e12774c20cb8c82fcd4eeab7814a4260ea3a0dff7958ab44b7198fc8849f4adff2bcbf9810d10637034f36cce78853c35cbecd6986d7eb27067db04c5424c4d307908b8c3f482ac14d136e6abc479fc821cffde1f49a7aea93b23b1da01cf0d4a48c3d8bcf7ed467d3cbe30ec37376982b85539f6c685b8867540d425ede78e04d1dcef34fc2cc15ac45329c963b35c55898774775d086dc73259118f2d3dcfb7ab3ce9b4f03b5b45419979539ab20bdd73f0b05b1985f02fe603145554a706592c782c93ea7ba973ea44532102a44bd29d2d00d1a524bab8f4ab8623a0594152841b21dea1cb5f3e2192b6c1358b75ea7e790bb71f1fa1eddfcbad58e638e0876888666a12780389ffe66a2b7fc287d89bb8ed8e8e6184ae3b6add070cc874d4180422644931a6ba535016006f09bd07395fb5fc2a10e9deccf3fed6c57d1a2487d327834dfd3b3f5dbccdb0c09b36a07e58894bad4ef919dc248fa88bdea94d6767dcb67d6f7bf50ce3d8778291887fdd29f8a6f21d7162cbc23473edb9b6e9d733d0a068a00782bdeb3218e8965b9e616fd5b1e37e9dbdff36dd0555826430cfa0ca0131689496c6a2e2e6e9c20911c2be8e0a08d2f2e3dc326cb3d926cc910a186b456a19aa5940ac9ce6580f6f886a2e9c6079c8c4f284e49add1b912b21d60de5ca37df31625e5ffc333cb87e653f93573df4375a819ab27a53130502cc0cd5117f8db11b966002f5162e89871f13a3346deaafc3070e19c37d96510d520620975602dd32fc86223079aeff28c11ea4eb4578072ffdf5d5ff84a6851be44c3935f535520e10dedd5de6196aeb2c9bd4f3f210cffa0f2e0835e254e7a9d9415e501fd6619a6ab1d8acd99d38ddd41860e8eac6e1e0b0e978b150fcbfc6536cb4c16625a58dd93dcf8777bf3ae930f33b496e6c184e4111cde36a97f35f0ca71932c93490936ff4e6e1a17f51058130aec013a8e012cfb9777de4b6f60d51d59a7a86f74f4f2fa20c1fa3ea43a884e6430e32ca239f1f9a15d18acee71440645a63998d3b238846aeadfd9178e7b4a84b8542d2a4a764bb70ef2a710b6f29a1284747794f7d9c1a140514061ee376bdbd312a057de0029a755849bd35e3b3973f371ee99422ae4b623bc521e124ab7f06f23c7bbd9526a80d45d0d2ef51acdc40828c10d7455190ab9635101c6f995d57f05515d73feedc8c35441ffaf254b4023f056b1359f9f69834b5a4dcbf44922fecde815a10d5d48fdfb9a1110df5d93ac5321b6d9b3300ff79205abac600b221b0eb770f835acd3ba64cf4da5f71031bbe966ba858acfedf7ea306ce93de653164df182da96f93848e6d7f289f6ce80c643d8323d61fb291eeff753e76ea7ace416ca469b11af1d77f0c5ca12c7fb7b7e476d3d2a55c0bcc2eba21298575b03a0b47182bf922bf23b30280f5a8b755734cb6ab673b6d069e57d8ed7a1d31e73033501a6b3259ce86c7df3bd2afed8e29029c43afd721ae365bb0592dbe4ee234a0b1e7ad87a793e53f56574c03fab965d0291cac20f486a541828850559140337e77c46b58e0040affa93a12e87c6f6ed77e06306da0f1d1a264cea71905f8e9702ab52f1a6713b915ca06b22ec5642a85efbbb35796f704088db8cad22c9ac4803d394a6a9009008420a6769f1339e817e63e851f62372a22c0b7df07fb46f60dcf6566b886b433c1d38bafa8d53cb5503a41b2985b473f5e2ba55cfdb7cdd1f62b1e63d4bf9864e2ebbe3b92e29e3c3467123243eeea794e3f4746d220ba0125518f2113b72aee37c5ad80352d8fe3033fd7ab9aee08a1c533548577d8651687f496be36f5e583820dcffaccf2cc62b72b9f699ad465ed29b222e35795309d5bcdbfe3cf723780c029976d6d23a846ce2ded0b36cd5540e3d1ce3e01ac463ea7a3cec310dc6475cfb28ef87af7b9887af7c6410873f4091f05c71d89a639a199dcfce6320816491b609ab15bb1452f0859bed8dd66ca4f7f37ac2a5eaecc576600ac51d9ffa33dd5db7d0a76ae6c1c5090147e9cfa3b9f35943c1510fc6a293d2dbd7e74fbee6d6f42baa934bcfd85fc78e2be60ae1fe9e965af4af33a052894d29551876dea27f9ff3cb352d6f292031298ba97d4be11853da6853b44044f28ab76958c102a90c5421aa6b7d63b799791f9e7cd1196a8923d93415f9b5ef4c31b6d811a2d72970e455cf3f15fe4c9540a186cdde987d483f74c45e547c10ecf5c9450838cabe5f986544f620e4c15142e9f653fdb3f653ae2521de31e5db38de758e62ef6f1094363c777f5571f92f5520b0a31177abb4dbc2cab296227edd89462f99ad6f9bbe95ad8760b18d03b3ddc8cd308e03e72f9758d59003ee6e5e0f007457f704c0aa5d684af2517139d8083adcd465fa5e5bf5d2cd29bb6e1eb9315fc6d5ea0053a4970a725917f6b42a8445d2b1f65cd91d23de9d3ae2ca56eafb2a8fd26746834b4f018de1058648a175086ede87f71f3b5b1ca0edfed9a72d03d5c034aa1d542322bb34598752c1c36663195f7c33a4c507d2221a2fdcd4948fdf7b26e8245577b1ded3c179b50af2f04ce05dd626dd0c2b3a259abbf31dbf5726eec2b764d69c04233df278484f575e18ed73f6e05fa2440cc26701d0f7166a354b31d69c9772ae862884a720161f36592f3d53797b63c98e93e4f5a6da6868b1141ff179bfdc91db6f99ef6c5df1877fefdce00c4236d0c3d2f0c3bb52b09fdc05c463f61ff9b91e3fb7ca884b413cdfb3e12d5b12fdb7415855c6b56bb414f46bda9aad574974e55a6c9553e5ce25a5604e053aa2440118e30cbca20041fa42b903335aee8f16cef4584f35badc86e8b8564f1c3e76b601a768cddafcb8bc4a15fed8cbc46cf33bb40bd4c0aeb03e5bbf9fe86410ad76e41c342039f6a49f3e5a591e631aa8e0a2656dda083cac22bbc57608d6b2ebd2a68e0771cc4e481c4565672c88a66d0ff67f52f9d5135ed8e2d06c1ea88d2a666c76f232cd4aca1eb761ae769fecb3c3fe783fdac96a702608b1dc4b3125bb5be29c223a966c47c60e6ad2048cea5fc988bdb9e3424c1b19ff8ef2a86eb1ef516629c415f04943bacc8828a7ae5bea9c15ca03e5951c95aa962ff3786a49be1eeafc619d95c129b6cb4293504def493a2eb0bdd7bfe4b0e4c5978d424662330c4f97f09f14217f14553f1dbda0e937f188899489b065ee1ab77337172a7a85e7ec5ef836ad93c9dcfb30bf6b0fb69beef10408ea07a304e3891e8bf92717ca4fb0556f79f379e0000521a9904c08a7a7f93d243ad4647aea71e040a5e7703e778ded482830e327c6a29e3ccc8c21f1ed6097939dba7dc3408b13ed5e4bb40189b0e46e2ca1022724a9177a7962dbafd59ac60e450480a13d2806ede22b64e485e608981caf5dea4fa12f9a00a0b8d79a2fb405d745895c94b66c3108d1990599ef1379acf101934208b246578efab6029f58920c5557a75c98408f08f740afe76e8ccbd4dcbb76daa5c7f6900fdcf834477f9391a3a4f772e5f8960ccbb1b8c7ce03b654a2285d71f8e588f6f213040e7bd9875ced05a8ef04222f29ffd7c9fbd4894d5fec7105ba107be73d271433941794297071fec0a990ec6e0a7dfd6ddd3756cace45bbc7f95f53a92950608caf9a1ceab36fc19f85704336e4329019b09b05f9d64b265ebd9375139b8476870d7bd63c8de31d6a108f08dd48fb02d80394d9656e8a732a1d6679fca922b8a73d3dbcb92ecb513072e4390fde9a004293e1dee6483ba92fdf87811550fcc45596fb53e290594b80a605272870c38c9b8e283725d2259da5a1fa1d98b9bf4e98fc09321d5ec04fda761274d0eee4a9612289819b5f471f665ece46c72ee5bb149e6fae57854f4ce17f8c821337b5cb38ead069ba2a0dfb7b05ddc7fd17afcb7b318577f708a0cd424cf0eb8df7b8e1746a283fef87a620c075772cd9cd75ea73efc5d86ee26c821b9bda13f44186e5332e807931bf41aba59bfc243cabe9b7279c9df52e7aa2f6909d90eca5ff9b837ccc479abbfee4ded5e4c48e00d7cd6a81a24a2f8faa4c29411630da8c3e161a5e735c640cea21bcfa65413e63dcff86e1d907adb36d118f66b32bf27313b0ed085782ad36ac98ab6135a49dc94be731b84bc11609cabca69391cfc8270cc13b4bd374338c13738112233431e3b492c579fc15bbc4e04fe8ee20c5e77bd47dc0c859d0775ebe50e764839d9cfe33ca848f0be897c6afefe84c9e65bc38e283da40faa6f7caf6e3299c829f2692b3f09d65589ee640ffb36a8021721ec0debbfcb55a54ff24e80a440f4b0f37430cf26ee403c2ca3c34df4d8d68b5f625d11e25c1e27c81bd4b9dd35cc153d0b3f42e7f198a9e241ad564391e9b849231085da28ef5a05449d0a30078997329d3a8129f81e8a5cef799048dcdda16e3a800bf976666200", 0x2000, &(0x7f000000d0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="2d01000000000000fd00000000000000000000000000000000000000000000007d00000000000000ff0f0000000000000600000003000100000000000000000004000000000000006a2b0000000000000000000000000000040000000000000005000000000000000700000000010000060000000080000040001000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000002006000000000000000100000000000000962b0000000000008d"], 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 1.124998027s ago: executing program 5 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000240)=0x2000, 0x4) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x4851) 1.027819462s ago: executing program 5 (id=2188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x0, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x3], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x1, 0xc, 0xa, 0x0, 0x2, 0x3, 0x6, 0xb, 0xfd, 0x4, 0x1, 0x3, 0x0, 0x101, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xef}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x7000, 0x3, 0xeb, 0xff, 0x0, 0x0, 0xbf, 0x7, 0xfc, 0x3}, {0x80a0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x8, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x1, 0x3, 0x0, 0x9, 0xfc}, {0x0, 0x8000000, 0x8, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff, 0x9}, {0xc000, 0x1, 0xe, 0x7f, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x19}, {0xffffffff, 0xdddd1000, 0xa, 0x87, 0x0, 0x0, 0x7, 0x20, 0x0, 0x83, 0x0, 0x1}, {0x25000, 0x6000, 0x4, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x4000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x3, 0xf801, 0xdddd1000, [0x9, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 832.959901ms ago: executing program 1 (id=2189): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x141a82, 0x20) fanotify_mark(0xffffffffffffffff, 0x698, 0x8, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 746.461975ms ago: executing program 5 (id=2191): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7}, {0x10}, {0x8, 0x7}, {0x34, 0x7}, {0x0, 0x2}, {0x81, 0x3}], "3829b70b8285e8c2"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 612.442381ms ago: executing program 1 (id=2192): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@quota}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 604.386421ms ago: executing program 5 (id=2193): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 545.374854ms ago: executing program 3 (id=2194): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000240)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1}}, {@flushoncommit}, {}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x6c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x0) 268.571157ms ago: executing program 1 (id=2195): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2) r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) 268.303607ms ago: executing program 2 (id=2196): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 245.350648ms ago: executing program 5 (id=2197): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf4c}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe, 0x0, 0x100}, "87"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, 0x0, 0x0) 94.504205ms ago: executing program 2 (id=2198): semget(0x1, 0x4, 0x60) semget$private(0x0, 0x1, 0x4) r0 = semget(0x2, 0x3, 0x200) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r1 = semget(0x0, 0x2, 0x313) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 0s ago: executing program 5 (id=2199): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88201) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) write(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x0) kernel console output (not intermixed with test programs): aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.152141][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.162512][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.179954][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.193736][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.209527][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.222031][ T5699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.239041][ T5699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.253541][ T5699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.272532][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.287534][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.306699][ T5699] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.317522][ T5699] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.327659][ T5699] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.336641][ T5699] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.483117][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.502745][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.519414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.563650][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.573127][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.593232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.755543][ T5988] netlink: 52 bytes leftover after parsing attributes in process `syz.6.398'. [ 141.810141][ T5991] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.825045][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.832436][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.917393][ T5990] netlink: 52 bytes leftover after parsing attributes in process `syz.6.398'. [ 142.139360][ T6003] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.208984][ T6007] loop5: detected capacity change from 0 to 256 [ 142.297080][ T6007] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 143.388423][ T6026] loop6: detected capacity change from 0 to 32768 [ 143.425445][ T6022] loop5: detected capacity change from 0 to 32768 [ 143.453776][ T6026] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.450 (6026) [ 143.500077][ T6026] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 143.513258][ T6022] JBD2: Ignoring recovery information on journal [ 143.537619][ T6026] BTRFS info (device loop6): setting nodatasum [ 143.545850][ T6026] BTRFS info (device loop6): force zlib compression, level 3 [ 143.573589][ T6026] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 143.662892][ T6022] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 143.690688][ T6026] BTRFS info (device loop6): use lzo compression, level 0 [ 143.745736][ T6026] BTRFS info (device loop6): turning on flush-on-commit [ 143.794805][ T6026] BTRFS info (device loop6): enabling auto defrag [ 143.834355][ T6026] BTRFS info (device loop6): max_inline at 4096 [ 143.867102][ T6026] BTRFS info (device loop6): using free space tree [ 143.895373][ T6026] BTRFS info (device loop6): has skinny extents [ 143.950879][ T6022] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 143.985060][ C0] net_ratelimit: 75 callbacks suppressed [ 144.043591][ T6022] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 144.167821][ T6022] OCFS2: File system is now read-only. [ 144.189398][ T6022] (syz.5.449,6022,1):ocfs2_trim_mainbm:7603 ERROR: status = -30 [ 144.223020][ T6086] overlayfs: failed to clone upperpath [ 144.299819][ T5155] ocfs2: Unmounting device (7,5) on (node local) [ 144.406690][ T6026] BTRFS info (device loop6): enabling ssd optimizations [ 144.444992][ T4256] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 144.601669][ T26] audit: type=1800 audit(1790174558.741:5): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.450" name="file1" dev="loop6" ino=264 res=0 errno=0 [ 144.788891][ T4278] rpcbind: server 127.0.0.1 not responding, timed out [ 144.797119][ T4256] usb 4-1: not running at top speed; connect to a high speed hub [ 144.907158][ T4256] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 145.109256][ T4256] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 145.134781][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.181263][ T4256] usb 4-1: Product: syz [ 145.202319][ T6117] loop5: detected capacity change from 0 to 256 [ 145.207692][ T4256] usb 4-1: Manufacturer: syz [ 145.246275][ T4256] usb 4-1: SerialNumber: syz [ 145.280146][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'. [ 145.325637][ T6085] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.363852][ T4256] oti6858 4-1:1.0: oti6858 converter detected [ 145.399919][ T4256] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 145.768354][ T6143] loop5: detected capacity change from 0 to 512 [ 145.820794][ T6143] EXT4-fs (loop5): Ignoring removed oldalloc option [ 145.837564][ T13] usb 4-1: USB disconnect, device number 6 [ 145.867977][ T6143] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 145.885658][ T13] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 145.935690][ T13] oti6858 4-1:1.0: device disconnected [ 145.977999][ T6143] EXT4-fs (loop5): 1 truncate cleaned up [ 146.010278][ T6143] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 147.775530][ T6212] device lo entered promiscuous mode [ 148.043976][ T4199] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 148.764941][ T4230] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 148.823871][ T6254] device lo entered promiscuous mode [ 149.159444][ T4230] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 149.168688][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.265317][ C1] net_ratelimit: 54 callbacks suppressed [ 149.895348][ T4230] cxacru 6-1:1.0: wrong cm 0xa0 in response to cm 0x91 [ 149.903622][ T6244] udc-core: couldn't find an available UDC or it's busy [ 149.915238][ T4230] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 149.922921][ T4230] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 149.930318][ T6244] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 149.947767][ T6244] udc-core: couldn't find an available UDC or it's busy [ 149.966821][ T6244] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 149.980860][ T4230] cxacru: probe of 6-1:1.0 failed with error -5 [ 150.022045][ T4230] usb 6-1: USB disconnect, device number 3 [ 150.798212][ T6356] device veth0 entered promiscuous mode [ 150.818567][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 151.018551][ T4199] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 151.489382][ T6384] loop6: detected capacity change from 0 to 1024 [ 151.787716][ T6397] 9pnet: Insufficient options for proto=fd [ 152.047987][ T6405] fuse: Bad value for 'fd' [ 152.558952][ T6435] FAULT_INJECTION: forcing a failure. [ 152.558952][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 152.592696][ T6437] loop5: detected capacity change from 0 to 512 [ 152.605252][ T6435] CPU: 0 PID: 6435 Comm: syz.6.540 Not tainted syzkaller #0 [ 152.612615][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.622786][ T6435] Call Trace: [ 152.622838][ T6435] [ 152.622850][ T6435] dump_stack_lvl+0x188/0x250 [ 152.622880][ T6435] ? show_regs_print_info+0x20/0x20 [ 152.622900][ T6435] ? load_image+0x410/0x410 [ 152.622924][ T6435] ? __might_sleep+0xf0/0xf0 [ 152.629562][ T6435] ? __lock_acquire+0x7b50/0x7b50 [ 152.629594][ T6435] ? memset+0x1e/0x40 [ 152.639757][ T6435] should_fail+0x383/0x4b0 [ 152.639791][ T6435] should_failslab+0x5/0x20 [ 152.648890][ T6435] slab_pre_alloc_hook+0x51/0xc0 [ 152.648919][ T6435] kmem_cache_alloc_trace+0x47/0x290 [ 152.648940][ T6435] ? snd_seq_prioq_new+0x43/0x90 [ 152.648970][ T6435] snd_seq_prioq_new+0x43/0x90 [ 152.682387][ T6435] snd_seq_queue_alloc+0x137/0x740 [ 152.692332][ T6435] snd_seq_ioctl_create_queue+0x7b/0x320 [ 152.698091][ T6435] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 152.704383][ T6435] snd_seq_oss_open+0x622/0xf00 [ 152.709271][ T6435] ? snd_seq_oss_delete_client+0x50/0x50 [ 152.714970][ T6435] ? __mutex_lock_common+0x435/0x2400 [ 152.715012][ T6435] ? mutex_lock_io_nested+0x60/0x60 [ 152.725610][ T6435] ? snd_seq_oss_process_event+0x2910/0x2910 [ 152.725640][ T6435] ? async_call_lookup_ports+0x10/0x10 [ 152.725661][ T6435] ? do_raw_spin_unlock+0x11d/0x230 [ 152.725693][ T6435] odev_open+0x63/0x90 [ 152.737173][ T6435] chrdev_open+0x585/0x5f0 [ 152.746464][ T6435] ? cd_forget+0x160/0x160 [ 152.746497][ T6435] ? fsnotify_perm+0x3a7/0x560 [ 152.746520][ T6435] ? cd_forget+0x160/0x160 [ 152.746546][ T6435] do_dentry_open+0x7f7/0xf90 [ 152.746568][ T6435] ? vfs_open+0x2b/0x80 [ 152.746590][ T6435] path_openat+0x2718/0x2fb0 [ 152.756035][ T6435] ? __kasan_slab_alloc+0xa9/0xc0 [ 152.756075][ T6435] ? do_filp_open+0x400/0x400 [ 152.765284][ T6435] do_filp_open+0x1df/0x400 [ 152.765325][ T6435] ? vfs_tmpfile+0x300/0x300 [ 152.774207][ T6435] ? _raw_spin_unlock+0x24/0x40 [ 152.774234][ T6435] ? alloc_fd+0x59e/0x650 [ 152.774259][ T6435] do_sys_openat2+0x14b/0x500 [ 152.784309][ T6435] ? __lock_acquire+0x7b50/0x7b50 [ 152.793525][ T6435] ? do_sys_open+0xe0/0xe0 [ 152.803137][ T6435] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.812157][ T6435] ? lock_chain_count+0x20/0x20 [ 152.821615][ T6435] __x64_sys_openat+0x135/0x160 [ 152.832457][ T6435] do_syscall_64+0x4c/0xa0 [ 152.841711][ T6435] ? clear_bhb_loop+0x30/0x80 [ 152.846413][ T6435] ? clear_bhb_loop+0x30/0x80 [ 152.846442][ T6435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.857018][ T6435] RIP: 0033:0x7f7508ef9159 [ 152.857041][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.881075][ T6435] RSP: 002b:00007f7507151028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 152.881100][ T6435] RAX: ffffffffffffffda RBX: 00007f7509180fa0 RCX: 00007f7508ef9159 [ 152.881117][ T6435] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 152.905492][ T6435] RBP: 00007f7508f9006b R08: 0000000000000000 R09: 0000000000000000 [ 152.913502][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.921512][ T6435] R13: 00007f7509181038 R14: 00007f7509180fa0 R15: 00007ffd1a3a0418 [ 152.929525][ T6435] [ 153.056889][ T6437] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.541: attempt to clear invalid blocks 2 len 1 [ 153.096650][ T6437] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 153.144108][ T6437] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.541: invalid indirect mapped block 1819239214 (level 0) [ 153.161469][ T6437] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.541: invalid indirect mapped block 1819239214 (level 1) [ 153.200684][ T6437] EXT4-fs (loop5): 1 truncate cleaned up [ 153.206919][ T6437] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 153.924847][ T4502] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 154.190805][ T6483] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.555'. [ 154.244400][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 154.304930][ C1] net_ratelimit: 50 callbacks suppressed [ 154.351689][ T4502] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.465438][ T4502] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.655488][ T4502] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 154.673260][ T4502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.692988][ T4502] usb 6-1: Product: syz [ 154.706831][ T4502] usb 6-1: Manufacturer: syz [ 154.711491][ T4502] usb 6-1: SerialNumber: syz [ 154.766972][ T4502] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 154.788964][ T4502] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 154.817078][ T4502] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 155.171937][ T6496] process 'syz.6.562' launched './file0' with NULL argv: empty string added [ 155.885991][ T4502] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 156.225316][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 156.232202][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 156.274648][ T6541] ceph: No mds server is up or the cluster is laggy [ 156.302466][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 156.308913][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 156.488324][ T4502] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.506520][ T4502] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.518683][ T4502] usb 7-1: Product: syz [ 156.522974][ T4502] usb 7-1: Manufacturer: syz [ 156.528343][ T4502] usb 7-1: SerialNumber: syz [ 156.536761][ T4502] usb 7-1: config 0 descriptor?? [ 156.805273][ T4502] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 156.981878][ T6464] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 157.036515][ T6129] usb 6-1: USB disconnect, device number 4 [ 157.080365][ T6129] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 157.117821][ T6129] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 157.140161][ T6129] ti_usb_3410_5052 6-1:2.0: device disconnected [ 157.559197][ T6576] fuse: Bad value for 'fd' [ 158.023936][ T6589] loop5: detected capacity change from 0 to 4096 [ 158.148149][ T6595] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 158.221920][ T6595] device bond1 entered promiscuous mode [ 158.228372][ T6595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.256767][ T6599] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.376101][ T6595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.405327][ T4502] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 158.421676][ T6595] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 158.437515][ T4502] usb 7-1: USB disconnect, device number 2 [ 158.494048][ T6595] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 158.547779][ T6595] bond1: (slave ipip0): making interface the new active one [ 158.605225][ T6595] device ipip0 entered promiscuous mode [ 158.627506][ T6595] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 158.727501][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'. [ 158.786543][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 158.799072][ T6608] FAULT_INJECTION: forcing a failure. [ 158.799072][ T6608] name fail_futex, interval 1, probability 0, space 0, times 1 [ 158.867756][ T6608] CPU: 1 PID: 6608 Comm: syz.3.604 Not tainted syzkaller #0 [ 158.875134][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.885224][ T6608] Call Trace: [ 158.888526][ T6608] [ 158.891492][ T6608] dump_stack_lvl+0x188/0x250 [ 158.896211][ T6608] ? show_regs_print_info+0x20/0x20 [ 158.901448][ T6608] ? load_image+0x410/0x410 [ 158.905994][ T6608] ? skb_release_head_state+0x1e7/0x240 [ 158.911619][ T6608] should_fail+0x383/0x4b0 [ 158.916074][ T6608] get_futex_key+0x1a1/0x12d0 [ 158.920791][ T6608] ? put_pid+0xda/0x120 [ 158.924996][ T6608] ? netlink_sendmsg+0x8f5/0xbe0 [ 158.929957][ T6608] ? futex_wait_restart+0x250/0x250 [ 158.935197][ T6608] futex_wait_setup+0x4b/0x520 [ 158.939996][ T6608] ? apparmor_socket_sendmsg+0x88/0x230 [ 158.945569][ T6608] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 158.950890][ T6608] ? security_socket_sendmsg+0x7c/0xa0 [ 158.956382][ T6608] ? netlink_getsockopt+0x570/0x570 [ 158.961619][ T6608] futex_wait+0x22f/0x680 [ 158.965989][ T6608] ? do_futex+0x12b0/0x12b0 [ 158.970546][ T6608] ? verify_lock_unused+0x140/0x140 [ 158.975783][ T6608] ? verify_lock_unused+0x140/0x140 [ 158.981011][ T6608] do_futex+0xdc2/0x12b0 [ 158.985292][ T6608] ? sock_do_ioctl+0x29d/0x320 [ 158.990110][ T6608] ? futex_exit_release+0x1c0/0x1c0 [ 158.995366][ T6608] ? __context_tracking_exit+0x4c/0x80 [ 159.000872][ T6608] __se_sys_futex+0x389/0x420 [ 159.005592][ T6608] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.011608][ T6608] ? __x64_sys_futex+0xf0/0xf0 [ 159.016410][ T6608] ? __x64_sys_futex+0x1d/0xf0 [ 159.021207][ T6608] do_syscall_64+0x4c/0xa0 [ 159.025657][ T6608] ? clear_bhb_loop+0x30/0x80 [ 159.030368][ T6608] ? clear_bhb_loop+0x30/0x80 [ 159.035084][ T6608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.041003][ T6608] RIP: 0033:0x7fbd15288159 [ 159.045445][ T6608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.045466][ T6608] RSP: 002b:00007fbd134e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 159.045490][ T6608] RAX: ffffffffffffffda RBX: 00007fbd1550ffa8 RCX: 00007fbd15288159 [ 159.045506][ T6608] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbd1550ffa8 [ 159.045520][ T6608] RBP: 00007fbd1550ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 159.045560][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.045574][ T6608] R13: 00007fbd15510038 R14: 00007ffea38e0d50 R15: 00007ffea38e0e38 [ 159.045604][ T6608] [ 159.152896][ T6612] syz.5.605[6612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.153057][ T6612] syz.5.605[6612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.166230][ T6613] fuse: Bad value for 'fd' [ 159.299358][ T6618] loop6: detected capacity change from 0 to 128 [ 159.416196][ T6618] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 159.431085][ T6618] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.506092][ C1] net_ratelimit: 51 callbacks suppressed [ 159.554865][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 159.794904][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 159.995242][ T23] usb 6-1: config 1 interface 0 altsetting 11 endpoint 0x82 has invalid maxpacket 1032, setting to 1024 [ 160.006935][ T23] usb 6-1: config 1 interface 0 altsetting 11 bulk endpoint 0x82 has invalid maxpacket 1024 [ 160.017298][ T23] usb 6-1: config 1 interface 0 altsetting 11 bulk endpoint 0x3 has invalid maxpacket 8 [ 160.027181][ T23] usb 6-1: config 1 interface 0 has no altsetting 0 [ 160.188376][ T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.203791][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.212000][ T23] usb 6-1: Product: syz [ 160.222825][ T23] usb 6-1: Manufacturer: ⊠[ 160.227773][ T23] usb 6-1: SerialNumber: syz [ 160.255461][ T6616] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.266762][ T6616] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.530806][ T6644] sctp: [Deprecated]: syz.1.618 (pid 6644) Use of int in maxseg socket option. [ 160.530806][ T6644] Use struct sctp_assoc_value instead [ 160.586036][ T23] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 160.636429][ T23] usb 6-1: USB disconnect, device number 5 [ 160.841327][ T6655] loop3: detected capacity change from 0 to 1024 [ 160.948631][ T6655] EXT4-fs (loop3): Ignoring removed nobh option [ 161.037053][ T6655] EXT4-fs (loop3): Ignoring removed orlov option [ 161.230222][ T6655] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobh,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 161.844755][ C1] sched: RT throttling activated [ 161.852622][ T6676] FAULT_INJECTION: forcing a failure. [ 161.852622][ T6676] name failslab, interval 1, probability 0, space 0, times 0 [ 161.992876][ T6676] CPU: 0 PID: 6676 Comm: syz.5.628 Not tainted syzkaller #0 [ 162.000853][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.010940][ T6676] Call Trace: [ 162.014238][ T6676] [ 162.017185][ T6676] dump_stack_lvl+0x188/0x250 [ 162.021891][ T6676] ? show_regs_print_info+0x20/0x20 [ 162.027114][ T6676] ? load_image+0x410/0x410 [ 162.031649][ T6676] ? __might_sleep+0xf0/0xf0 [ 162.036300][ T6676] ? __lock_acquire+0x7b50/0x7b50 [ 162.041373][ T6676] should_fail+0x383/0x4b0 [ 162.045823][ T6676] should_failslab+0x5/0x20 [ 162.050355][ T6676] slab_pre_alloc_hook+0x51/0xc0 [ 162.055331][ T6676] __kmalloc_node_track_caller+0x68/0x3a0 [ 162.061076][ T6676] ? qrtr_port_remove+0x81/0x410 [ 162.066035][ T6676] ? __alloc_skb+0xf4/0x750 [ 162.070564][ T6676] ? qrtr_port_remove+0x81/0x410 [ 162.075527][ T6676] __alloc_skb+0x22c/0x750 [ 162.079970][ T6676] qrtr_port_remove+0x81/0x410 [ 162.084756][ T6676] qrtr_release+0x1f2/0x2a0 [ 162.089281][ T6676] sock_close+0xbf/0x210 [ 162.093583][ T6676] ? sock_mmap+0x90/0x90 [ 162.097862][ T6676] __fput+0x212/0x8c0 [ 162.101877][ T6676] task_work_run+0x125/0x1a0 [ 162.106493][ T6676] exit_to_user_mode_loop+0x10f/0x130 [ 162.111888][ T6676] exit_to_user_mode_prepare+0xee/0x180 [ 162.117479][ T6676] syscall_exit_to_user_mode+0x16/0x40 [ 162.122969][ T6676] do_syscall_64+0x58/0xa0 [ 162.127414][ T6676] ? clear_bhb_loop+0x30/0x80 [ 162.132116][ T6676] ? clear_bhb_loop+0x30/0x80 [ 162.136828][ T6676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.142755][ T6676] RIP: 0033:0x7f6186ae6159 [ 162.147205][ T6676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.166840][ T6676] RSP: 002b:00007f6184d3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 162.175343][ T6676] RAX: 0000000000000000 RBX: 00007f6186d6dfa0 RCX: 00007f6186ae6159 [ 162.183356][ T6676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 162.191357][ T6676] RBP: 00007f6186b7d06b R08: 0000000000000000 R09: 0000000000000000 [ 162.199355][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.207356][ T6676] R13: 00007f6186d6e038 R14: 00007f6186d6dfa0 R15: 00007ffc02e54478 [ 162.207402][ T6676] [ 163.749666][ T6733] loop3: detected capacity change from 0 to 2048 [ 163.792935][ T6735] loop5: detected capacity change from 0 to 256 [ 163.919641][ T6733] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.117718][ T6744] netlink: 11559 bytes leftover after parsing attributes in process `syz.6.654'. [ 164.185081][ T6750] overlayfs: invalid redirect (./file0/file1) [ 164.354090][ T26] audit: type=1804 audit(1790174578.491:6): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.656" name="/newroot/139/merge/file" dev="overlay" ino=775 res=1 errno=0 [ 164.624944][ C1] net_ratelimit: 69 callbacks suppressed [ 164.972346][ T6778] loop5: detected capacity change from 0 to 1024 [ 164.998628][ T6778] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.048357][ T6778] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 165.182135][ T6768] loop3: detected capacity change from 0 to 32768 [ 165.225950][ T6768] netlink: 68 bytes leftover after parsing attributes in process `syz.3.662'. [ 165.239629][ T26] audit: type=1804 audit(1790174579.381:7): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.666" name="/newroot/65/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 165.277637][ T6768] find_entry called with index = 0 [ 165.284523][ T6768] find_entry called with index = 0 [ 165.677936][ T6785] device vlan2 entered promiscuous mode [ 166.060170][ T6800] netlink: 'syz.3.667': attribute type 2 has an invalid length. [ 166.211713][ T6800] netlink: 'syz.3.667': attribute type 2 has an invalid length. [ 166.266756][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 166.411791][ T6819] Invalid ELF header magic: != ELF [ 166.604248][ T6824] FAULT_INJECTION: forcing a failure. [ 166.604248][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 166.654088][ T6824] CPU: 1 PID: 6824 Comm: syz.3.683 Not tainted syzkaller #0 [ 166.661478][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.661559][ T6824] Call Trace: [ 166.661569][ T6824] [ 166.661579][ T6824] dump_stack_lvl+0x188/0x250 [ 166.683136][ T6824] ? show_regs_print_info+0x20/0x20 [ 166.688374][ T6824] ? load_image+0x410/0x410 [ 166.692959][ T6824] ? __might_sleep+0xf0/0xf0 [ 166.697585][ T6824] ? __lock_acquire+0x7b50/0x7b50 [ 166.702652][ T6824] should_fail+0x383/0x4b0 [ 166.707110][ T6824] should_failslab+0x5/0x20 [ 166.711636][ T6824] slab_pre_alloc_hook+0x51/0xc0 [ 166.716601][ T6824] ? radix_tree_node_alloc+0x7e/0x3a0 [ 166.722011][ T6824] kmem_cache_alloc+0x3d/0x280 [ 166.726809][ T6824] radix_tree_node_alloc+0x7e/0x3a0 [ 166.732048][ T6824] idr_get_free+0x28b/0xa10 [ 166.736597][ T6824] idr_alloc_u32+0x187/0x330 [ 166.741224][ T6824] ? __fprop_inc_percpu_max+0x1b0/0x1b0 [ 166.746819][ T6824] tcf_idr_check_alloc+0x5e1/0x7a0 [ 166.751990][ T6824] ? tcf_idr_cleanup+0x70/0x70 [ 166.756797][ T6824] ? __nla_parse+0x3c/0x50 [ 166.761284][ T6824] tcf_ct_init+0x393/0xa00 [ 166.765738][ T6824] ? tcf_ct_search+0x40/0x40 [ 166.765777][ T6824] ? __kmalloc_track_caller+0x3b/0x330 [ 166.765809][ T6824] tcf_action_init_1+0x3fd/0x6b0 [ 166.765835][ T6824] ? tc_action_load_ops+0x550/0x550 [ 166.786547][ T6824] ? _raw_read_unlock+0x24/0x40 [ 166.791432][ T6824] ? tc_action_load_ops+0x237/0x550 [ 166.796689][ T6824] ? mark_lock+0x94/0x320 [ 166.801055][ T6824] ? __nla_parse+0x3c/0x50 [ 166.805558][ T6824] tcf_action_init+0x243/0x6b0 [ 166.810353][ T6824] ? tcf_action_init_1+0x6b0/0x6b0 [ 166.815545][ T6824] ? __nla_parse+0x3c/0x50 [ 166.819996][ T6824] tc_ctl_action+0x437/0xba0 [ 166.824627][ T6824] ? tcf_free_cookie_rcu+0x40/0x40 [ 166.829764][ T6824] ? __dev_queue_xmit+0x195d/0x2e50 [ 166.829796][ T6824] ? ___sys_sendmsg+0x236/0x2e0 [ 166.839920][ T6824] ? tcf_free_cookie_rcu+0x40/0x40 [ 166.845070][ T6824] rtnetlink_rcv_msg+0x7f1/0xf10 [ 166.850047][ T6824] ? lock_chain_count+0x20/0x20 [ 166.854932][ T6824] ? rtnetlink_bind+0x80/0x80 [ 166.859641][ T6824] ? __local_bh_enable_ip+0x136/0x1c0 [ 166.865046][ T6824] ? lockdep_hardirqs_on+0x94/0x140 [ 166.870297][ T6824] ? __local_bh_enable_ip+0x136/0x1c0 [ 166.875695][ T6824] ? _local_bh_enable+0xa0/0xa0 [ 166.875730][ T6824] ? __dev_queue_xmit+0x1b64/0x2e50 [ 166.885857][ T6824] ? dev_queue_xmit+0x20/0x20 [ 166.890586][ T6824] ? memcpy+0x3c/0x60 [ 166.894596][ T6824] ? __copy_skb_header+0x3ba/0x4f0 [ 166.899751][ T6824] netlink_rcv_skb+0x1e9/0x430 [ 166.904552][ T6824] ? rtnetlink_bind+0x80/0x80 [ 166.909318][ T6824] ? netlink_ack+0xb10/0xb10 [ 166.913968][ T6824] netlink_unicast+0x78f/0x940 [ 166.918773][ T6824] netlink_sendmsg+0x8ba/0xbe0 [ 166.923626][ T6824] ? netlink_getsockopt+0x570/0x570 [ 166.928882][ T6824] ? aa_sock_msg_perm+0x94/0x150 [ 166.933909][ T6824] ? apparmor_socket_sendmsg+0x88/0x230 [ 166.939499][ T6824] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 166.944837][ T6824] ? security_socket_sendmsg+0x7c/0xa0 [ 166.950322][ T6824] ? netlink_getsockopt+0x570/0x570 [ 166.955559][ T6824] ____sys_sendmsg+0x5be/0x8f0 [ 166.960366][ T6824] ? __sys_sendmsg_sock+0x30/0x30 [ 166.965445][ T6824] ? import_iovec+0x6f/0xa0 [ 166.969983][ T6824] ___sys_sendmsg+0x236/0x2e0 [ 166.974703][ T6824] ? __sys_sendmsg+0x290/0x290 [ 166.979538][ T6824] __se_sys_sendmsg+0x1b7/0x2a0 [ 166.984428][ T6824] ? __x64_sys_sendmsg+0x80/0x80 [ 166.989411][ T6824] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 166.995491][ T6824] ? lockdep_hardirqs_on+0x94/0x140 [ 167.000727][ T6824] do_syscall_64+0x4c/0xa0 [ 167.005168][ T6824] ? clear_bhb_loop+0x30/0x80 [ 167.009888][ T6824] ? clear_bhb_loop+0x30/0x80 [ 167.014602][ T6824] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.020523][ T6824] RIP: 0033:0x7fbd15288159 [ 167.024959][ T6824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.044589][ T6824] RSP: 002b:00007fbd134e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.053038][ T6824] RAX: ffffffffffffffda RBX: 00007fbd1550ffa0 RCX: 00007fbd15288159 [ 167.061037][ T6824] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000005 [ 167.069031][ T6824] RBP: 00007fbd1531f06b R08: 0000000000000000 R09: 0000000000000000 [ 167.069048][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.069063][ T6824] R13: 00007fbd15510038 R14: 00007fbd1550ffa0 R15: 00007ffea38e0e38 [ 167.093022][ T6824] [ 167.278175][ T6835] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 167.491512][ T6840] loop5: detected capacity change from 0 to 512 [ 167.529205][ T6835] syz.3.686 (6835) used greatest stack depth: 19632 bytes left [ 167.547128][ T6840] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 167.547128][ T6840] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 167.547128][ T6840] [ 167.573681][ T6840] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 167.584390][ T4502] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 167.639550][ T6840] EXT4-fs (loop5): 1 truncate cleaned up [ 167.679538][ T6840] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,noacl,. Quota mode: none. [ 167.779003][ T6850] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.845119][ T4502] usb 7-1: Using ep0 maxpacket: 16 [ 167.871557][ T6840] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.688: Invalid block bitmap block 2124299595 in block_group 0 [ 167.984027][ T6840] EXT4-fs (loop5): Remounting filesystem read-only [ 168.000635][ T4502] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.003234][ T6840] EXT4-fs error (device loop5): ext4_discard_preallocations:5142: comm syz.5.688: Error -117 reading block bitmap for 0 [ 168.019532][ T4502] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.054692][ T6840] EXT4-fs (loop5): Remounting filesystem read-only [ 168.063606][ T6840] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.688: Invalid inode table block 2956040737 in block_group 0 [ 168.090014][ T6840] EXT4-fs (loop5): Remounting filesystem read-only [ 168.103028][ T6840] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 168.114585][ T6840] EXT4-fs (loop5): Remounting filesystem read-only [ 168.123248][ T6840] EXT4-fs error (device loop5): ext4_truncate:4286: inode #15: comm syz.5.688: mark_inode_dirty error [ 168.138780][ T6840] EXT4-fs (loop5): Remounting filesystem read-only [ 168.160867][ T6840] EXT4-fs error (device loop5) in ext4_setattr:5645: Corrupt filesystem [ 168.182906][ T6840] EXT4-fs (loop5): Remounting filesystem read-only [ 168.227723][ T4502] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.249005][ T4502] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.258333][ T4502] usb 7-1: Product: syz [ 168.262648][ T4502] usb 7-1: Manufacturer: syz [ 168.281659][ T4502] usb 7-1: SerialNumber: syz [ 168.481241][ T6867] overlayfs: failed to clone upperpath [ 168.498685][ T6867] overlayfs: failed to clone upperpath [ 168.644980][ T4502] usb 7-1: 0:2 : does not exist [ 168.703215][ T4502] usb 7-1: USB disconnect, device number 3 [ 168.792768][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.744784][ C1] net_ratelimit: 56 callbacks suppressed [ 170.060918][ T6933] syz.3.720 sent an empty control message without MSG_MORE. [ 171.249691][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 171.349259][ T6953] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.359033][ T6953] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.367849][ T6953] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.377028][ T6953] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.418423][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 171.471340][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 171.562325][ T6961] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.571620][ T6961] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.580368][ T6961] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.589105][ T6961] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.601883][ T26] audit: type=1800 audit(1790174586.741:8): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.744" name="tasks" dev="sda1" ino=2055 res=0 errno=0 [ 173.522454][ T7035] overlayfs: failed to clone upperpath [ 173.817412][ T7044] fuse: Bad value for 'fd' [ 174.864776][ C1] net_ratelimit: 61 callbacks suppressed [ 174.954958][ T7054] loop5: detected capacity change from 0 to 32768 [ 176.324308][ T7123] loop6: detected capacity change from 0 to 4096 [ 176.444913][ T7131] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.537665][ T7136] 9pnet: Insufficient options for proto=fd [ 176.738936][ T7141] loop5: detected capacity change from 0 to 1024 [ 177.064003][ T7148] overlayfs: failed to clone upperpath [ 177.233777][ T7151] overlayfs: failed to clone upperpath [ 179.206520][ T7201] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 179.515973][ T7186] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 179.650113][ T7216] overlayfs: failed to clone upperpath [ 179.698284][ T7216] overlayfs: failed to clone upperpath [ 179.984774][ C1] net_ratelimit: 47 callbacks suppressed [ 180.656646][ T7249] FAULT_INJECTION: forcing a failure. [ 180.656646][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 180.669965][ T7249] CPU: 1 PID: 7249 Comm: syz.6.826 Not tainted syzkaller #0 [ 180.677293][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.687400][ T7249] Call Trace: [ 180.690716][ T7249] [ 180.693667][ T7249] dump_stack_lvl+0x188/0x250 [ 180.698383][ T7249] ? show_regs_print_info+0x20/0x20 [ 180.703610][ T7249] ? load_image+0x410/0x410 [ 180.708171][ T7249] should_fail+0x383/0x4b0 [ 180.712666][ T7249] should_failslab+0x5/0x20 [ 180.717204][ T7249] slab_pre_alloc_hook+0x51/0xc0 [ 180.722173][ T7249] ? radix_tree_node_alloc+0x7e/0x3a0 [ 180.727580][ T7249] kmem_cache_alloc+0x3d/0x280 [ 180.732387][ T7249] radix_tree_node_alloc+0x7e/0x3a0 [ 180.737636][ T7249] idr_get_free+0x28b/0xa10 [ 180.742197][ T7249] idr_alloc_u32+0x187/0x330 [ 180.746853][ T7249] ? __fprop_inc_percpu_max+0x1b0/0x1b0 [ 180.752444][ T7249] ? l2tp_tunnel_register+0x148/0x14f0 [ 180.757943][ T7249] l2tp_tunnel_register+0x162/0x14f0 [ 180.763269][ T7249] ? _raw_spin_unlock+0x40/0x40 [ 180.768188][ T7249] ? l2tp_tunnel_del_work+0x330/0x330 [ 180.773594][ T7249] ? __debug_object_init+0x253/0xc80 [ 180.778933][ T7249] ? memset+0x1e/0x40 [ 180.782991][ T7249] ? lockdep_init_map_type+0x98/0x900 [ 180.788403][ T7249] ? lockdep_softirqs_off+0x430/0x430 [ 180.793808][ T7249] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.799922][ T7249] ? l2tp_tunnel_create+0x238/0x430 [ 180.805162][ T7249] pppol2tp_connect+0x83a/0x16a0 [ 180.810153][ T7249] ? pppol2tp_release+0x330/0x330 [ 180.815203][ T7249] ? aa_sk_perm+0x7dc/0x910 [ 180.819777][ T7249] ? aa_af_perm+0x340/0x340 [ 180.824311][ T7249] ? tomoyo_socket_connect_permission+0x196/0x270 [ 180.830906][ T7249] ? bpf_lsm_socket_connect+0x5/0x10 [ 180.836228][ T7249] ? security_socket_connect+0x7c/0xa0 [ 180.841723][ T7249] ? pppol2tp_release+0x330/0x330 [ 180.846806][ T7249] __sys_connect+0x3cb/0x450 [ 180.851435][ T7249] ? __sys_connect_file+0x170/0x170 [ 180.856692][ T7249] __x64_sys_connect+0x76/0x80 [ 180.861503][ T7249] do_syscall_64+0x4c/0xa0 [ 180.865963][ T7249] ? clear_bhb_loop+0x30/0x80 [ 180.870669][ T7249] ? clear_bhb_loop+0x30/0x80 [ 180.875370][ T7249] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.881311][ T7249] RIP: 0033:0x7f7508ef9159 [ 180.885763][ T7249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.905417][ T7249] RSP: 002b:00007f7507151028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 180.913863][ T7249] RAX: ffffffffffffffda RBX: 00007f7509180fa0 RCX: 00007f7508ef9159 [ 180.921890][ T7249] RDX: 0000000000000026 RSI: 00002000000002c0 RDI: 0000000000000005 [ 180.929901][ T7249] RBP: 00007f7508f9006b R08: 0000000000000000 R09: 0000000000000000 [ 180.937897][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.945893][ T7249] R13: 00007f7509181038 R14: 00007f7509180fa0 R15: 00007ffd1a3a0418 [ 180.953912][ T7249] [ 181.113627][ T7210] loop5: detected capacity change from 0 to 32768 [ 181.349164][ T7210] XFS (loop5): Mounting V5 Filesystem [ 181.517054][ T7210] XFS (loop5): Ending clean mount [ 181.599182][ T7210] XFS (loop5): Quotacheck needed: Please wait. [ 181.897581][ T7274] loop6: detected capacity change from 0 to 8 [ 181.932296][ T7210] XFS (loop5): Quotacheck: Done. [ 182.091433][ T7277] netlink: 236 bytes leftover after parsing attributes in process `syz.1.835'. [ 182.134029][ T7209] IPVS: You probably need to specify IP address on multicast interface. [ 182.187092][ T7209] IPVS: Error connecting to the multicast addr [ 182.397347][ T5155] XFS (loop5): Unmounting Filesystem [ 182.985409][ T7295] netlink: 'syz.6.844': attribute type 1 has an invalid length. [ 183.008423][ T7295] device wlan0 entered promiscuous mode [ 183.105465][ T7296] netlink: 'syz.6.844': attribute type 1 has an invalid length. [ 183.393563][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 183.466034][ T7304] device veth1_macvtap left promiscuous mode [ 184.173277][ T7323] netlink: 'syz.3.850': attribute type 16 has an invalid length. [ 184.173296][ T7323] netlink: 'syz.3.850': attribute type 17 has an invalid length. [ 184.458499][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 184.901062][ T7367] FAULT_INJECTION: forcing a failure. [ 184.901062][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 184.979026][ T7367] CPU: 1 PID: 7367 Comm: syz.5.864 Not tainted syzkaller #0 [ 184.986391][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.996480][ T7367] Call Trace: [ 184.999786][ T7367] [ 185.002741][ T7367] dump_stack_lvl+0x188/0x250 [ 185.007456][ T7367] ? show_regs_print_info+0x20/0x20 [ 185.012682][ T7367] ? load_image+0x410/0x410 [ 185.012712][ T7367] ? __lock_acquire+0x7b50/0x7b50 [ 185.022256][ T7367] ? rcu_lock_release+0x9/0x20 [ 185.027085][ T7367] should_fail+0x383/0x4b0 [ 185.031537][ T7367] should_failslab+0x5/0x20 [ 185.036067][ T7367] slab_pre_alloc_hook+0x51/0xc0 [ 185.041030][ T7367] __kmalloc+0x6b/0x340 [ 185.045200][ T7367] ? fib6_info_alloc+0x2e/0xe0 [ 185.049982][ T7367] fib6_info_alloc+0x2e/0xe0 [ 185.054603][ T7367] ip6_route_info_create+0x455/0x1220 [ 185.060050][ T7367] ? __lock_acquire+0x7b50/0x7b50 [ 185.065121][ T7367] ip6_route_add+0x24/0x130 [ 185.069663][ T7367] addrconf_prefix_route+0x249/0x320 [ 185.074976][ T7367] ? addrconf_get_prefix_route+0x720/0x720 [ 185.080843][ T7367] ? ipv6_count_addresses+0x170/0x170 [ 185.086261][ T7367] ? mutex_lock_io_nested+0x60/0x60 [ 185.091497][ T7367] inet6_addr_add+0x500/0x9b0 [ 185.096212][ T7367] addrconf_add_ifaddr+0x156/0x1b0 [ 185.101396][ T7367] ? addrconf_set_dstaddr+0x320/0x320 [ 185.106814][ T7367] ? __lock_acquire+0x7b50/0x7b50 [ 185.111872][ T7367] inet6_ioctl+0x16b/0x280 [ 185.116325][ T7367] ? inet6_getname+0x670/0x670 [ 185.121118][ T7367] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 185.126786][ T7367] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 185.132338][ T7367] sock_do_ioctl+0xfb/0x320 [ 185.136871][ T7367] ? sock_show_fdinfo+0xb0/0xb0 [ 185.138343][ T4552] net_ratelimit: 58 callbacks suppressed [ 185.141765][ T7367] sock_ioctl+0x48a/0x700 [ 185.141792][ T7367] ? sock_poll+0x420/0x420 [ 185.141822][ T7367] ? bpf_lsm_file_ioctl+0x5/0x10 [ 185.161702][ T7367] ? security_file_ioctl+0x7c/0xa0 [ 185.166847][ T7367] ? sock_poll+0x420/0x420 [ 185.171306][ T7367] __se_sys_ioctl+0xfa/0x170 [ 185.175945][ T7367] do_syscall_64+0x4c/0xa0 [ 185.175973][ T7367] ? clear_bhb_loop+0x30/0x80 [ 185.175998][ T7367] ? clear_bhb_loop+0x30/0x80 [ 185.176025][ T7367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.176048][ T7367] RIP: 0033:0x7f6186ae6159 [ 185.190327][ T7367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.190350][ T7367] RSP: 002b:00007f6184d3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.190380][ T7367] RAX: ffffffffffffffda RBX: 00007f6186d6dfa0 RCX: 00007f6186ae6159 [ 185.190395][ T7367] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000004 [ 185.190408][ T7367] RBP: 00007f6186b7d06b R08: 0000000000000000 R09: 0000000000000000 [ 185.201183][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.201201][ T7367] R13: 00007f6186d6e038 R14: 00007f6186d6dfa0 R15: 00007ffc02e54478 [ 185.201235][ T7367] [ 185.332855][ T7369] FAULT_INJECTION: forcing a failure. [ 185.332855][ T7369] name failslab, interval 1, probability 0, space 0, times 0 [ 185.346281][ T7369] CPU: 1 PID: 7369 Comm: syz.6.865 Not tainted syzkaller #0 [ 185.353606][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.363719][ T7369] Call Trace: [ 185.367029][ T7369] [ 185.369983][ T7369] dump_stack_lvl+0x188/0x250 [ 185.374721][ T7369] ? show_regs_print_info+0x20/0x20 [ 185.379948][ T7369] ? load_image+0x410/0x410 [ 185.384488][ T7369] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 185.390420][ T7369] should_fail+0x383/0x4b0 [ 185.394881][ T7369] should_failslab+0x5/0x20 [ 185.399418][ T7369] slab_pre_alloc_hook+0x51/0xc0 [ 185.404386][ T7369] kmem_cache_alloc_trace+0x47/0x290 [ 185.409727][ T7369] ? percpu_ref_init+0xc0/0x340 [ 185.414615][ T7369] ? rcu_lock_release+0x20/0x20 [ 185.419488][ T7369] percpu_ref_init+0xc0/0x340 [ 185.424198][ T7369] blkg_alloc+0xc6/0x640 [ 185.428492][ T7369] blkg_create+0x2de/0x10f0 [ 185.433033][ T7369] ? radix_tree_lookup+0x24c/0x280 [ 185.438179][ T7369] ? __blkg_lookup+0x1b6/0x2b0 [ 185.442979][ T7369] bio_associate_blkg_from_css+0x854/0x9d0 [ 185.448821][ T7369] bio_associate_blkg+0x23a/0x340 [ 185.453874][ T7369] do_mpage_readpage+0x1acf/0x1f00 [ 185.459057][ T7369] ? mpage_readahead+0x920/0x920 [ 185.464041][ T7369] ? xa_load+0x276/0x2a0 [ 185.468322][ T7369] mpage_readahead+0x3e9/0x920 [ 185.473158][ T7369] ? dio_await_one+0x390/0x390 [ 185.477976][ T7369] ? blkdev_fallocate+0x4a0/0x4a0 [ 185.483045][ T7369] ? local_lock_release+0x97/0x170 [ 185.488194][ T7369] read_pages+0x172/0x920 [ 185.492567][ T7369] ? page_cache_ra_unbounded+0x8f0/0x8f0 [ 185.498246][ T7369] ? add_to_page_cache_lru+0x2ad/0x4a0 [ 185.503741][ T7369] page_cache_ra_unbounded+0x7f4/0x8f0 [ 185.509240][ T7369] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 185.515777][ T7369] ? blk_cgroup_congested+0x30b/0x390 [ 185.521202][ T7369] filemap_read+0x5ef/0x2560 [ 185.525828][ T7369] ? find_get_pages_range_tag+0x450/0x450 [ 185.531594][ T7369] ? aa_file_perm+0x38b/0xe80 [ 185.536292][ T7369] ? verify_lock_unused+0x140/0x140 [ 185.541535][ T7369] ? memset+0x1e/0x40 [ 185.545541][ T7369] ? generic_file_read_iter+0x94/0x480 [ 185.551015][ T7369] blkdev_read_iter+0x11d/0x150 [ 185.555885][ T7369] vfs_read+0x75e/0xd50 [ 185.560060][ T7369] ? kernel_read+0x1e0/0x1e0 [ 185.564662][ T7369] ? __fget_files+0x402/0x470 [ 185.569357][ T7369] ? __fdget_pos+0x1e2/0x370 [ 185.573962][ T7369] ? ksys_read+0x70/0x260 [ 185.578327][ T7369] ksys_read+0x153/0x260 [ 185.582586][ T7369] ? vfs_write+0xd70/0xd70 [ 185.587016][ T7369] ? lockdep_hardirqs_on+0x94/0x140 [ 185.592238][ T7369] do_syscall_64+0x4c/0xa0 [ 185.596688][ T7369] ? clear_bhb_loop+0x30/0x80 [ 185.601385][ T7369] ? clear_bhb_loop+0x30/0x80 [ 185.606080][ T7369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.611986][ T7369] RIP: 0033:0x7f7508ef9159 [ 185.616414][ T7369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.636032][ T7369] RSP: 002b:00007f7507151028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.644458][ T7369] RAX: ffffffffffffffda RBX: 00007f7509180fa0 RCX: 00007f7508ef9159 [ 185.652437][ T7369] RDX: 0000000000002020 RSI: 0000200000000480 RDI: 0000000000000005 [ 185.660448][ T7369] RBP: 00007f7508f9006b R08: 0000000000000000 R09: 0000000000000000 [ 185.668433][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.676415][ T7369] R13: 00007f7509181038 R14: 00007f7509180fa0 R15: 00007ffd1a3a0418 [ 185.684427][ T7369] [ 185.904855][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 185.905685][ T4502] Bluetooth: hci3: command 0x0406 tx timeout [ 185.927214][ T4502] Bluetooth: hci0: command 0x0406 tx timeout [ 186.359023][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 187.355390][ T7422] FAULT_INJECTION: forcing a failure. [ 187.355390][ T7422] name failslab, interval 1, probability 0, space 0, times 0 [ 187.409409][ T7422] CPU: 0 PID: 7422 Comm: syz.6.881 Not tainted syzkaller #0 [ 187.416785][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.416800][ T7422] Call Trace: [ 187.416807][ T7422] [ 187.416815][ T7422] dump_stack_lvl+0x188/0x250 [ 187.416840][ T7422] ? show_regs_print_info+0x20/0x20 [ 187.416860][ T7422] ? load_image+0x410/0x410 [ 187.416879][ T7422] ? __might_sleep+0xf0/0xf0 [ 187.416899][ T7422] ? __lock_acquire+0x7b50/0x7b50 [ 187.416927][ T7422] should_fail+0x383/0x4b0 [ 187.416950][ T7422] should_failslab+0x5/0x20 [ 187.430777][ T7422] slab_pre_alloc_hook+0x51/0xc0 [ 187.471605][ T7422] ? taskstats_exit+0x14a/0xd80 [ 187.476503][ T7422] kmem_cache_alloc+0x3d/0x280 [ 187.481304][ T7422] taskstats_exit+0x14a/0xd80 [ 187.486047][ T7422] ? lockdep_hardirqs_on+0x94/0x140 [ 187.491276][ T7422] ? __delayacct_thrashing_end+0x110/0x110 [ 187.497104][ T7422] ? rcu_is_watching+0x11/0xa0 [ 187.501891][ T7422] ? mm_trace_rss_stat+0x81/0x1c0 [ 187.506946][ T7422] ? sync_mm_rss+0x211/0x350 [ 187.511568][ T7422] do_exit+0x5ab/0x2110 [ 187.515771][ T7422] ? put_task_struct+0x80/0x80 [ 187.520568][ T7422] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 187.526581][ T7422] ? _raw_spin_lock_irq+0xb7/0xf0 [ 187.531634][ T7422] do_group_exit+0x12c/0x2f0 [ 187.536244][ T7422] ? lockdep_hardirqs_on+0x94/0x140 [ 187.536273][ T7422] get_signal+0x7eb/0x12e0 [ 187.536311][ T7422] arch_do_signal_or_restart+0xe6/0x12a0 [ 187.551575][ T7422] ? __lock_acquire+0x7b50/0x7b50 [ 187.556637][ T7422] ? futex_exit_release+0x1c0/0x1c0 [ 187.561858][ T7422] ? get_sigframe_size+0x10/0x10 [ 187.566821][ T7422] ? __context_tracking_exit+0x4c/0x80 [ 187.572347][ T7422] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 187.578358][ T7422] ? exit_to_user_mode_loop+0x3b/0x130 [ 187.583840][ T7422] exit_to_user_mode_loop+0x9e/0x130 [ 187.589139][ T7422] exit_to_user_mode_prepare+0xee/0x180 [ 187.589164][ T7422] syscall_exit_to_user_mode+0x16/0x40 [ 187.600191][ T7422] do_syscall_64+0x58/0xa0 [ 187.604615][ T7422] ? clear_bhb_loop+0x30/0x80 [ 187.609309][ T7422] ? clear_bhb_loop+0x30/0x80 [ 187.614009][ T7422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.619918][ T7422] RIP: 0033:0x7f7508ef9159 [ 187.619937][ T7422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.619953][ T7422] RSP: 002b:00007f75071300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.619974][ T7422] RAX: fffffffffffffe00 RBX: 00007f7509181098 RCX: 00007f7508ef9159 [ 187.619989][ T7422] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7509181098 [ 187.620002][ T7422] RBP: 00007f7509181090 R08: 0000000000000000 R09: 0000000000000000 [ 187.620015][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.620028][ T7422] R13: 00007f7509181128 R14: 00007ffd1a3a0330 R15: 00007ffd1a3a0418 [ 187.620050][ T7422] getty: ttyS0: read error: Resource temporarily unavailable [ 188.527704][ T4198] Bluetooth: hci5: setting up ROME/QCA6390 Hü[ 188.659460][ T7463] overlayfs: failed to clone upperpath ü[ 190.232837][ T4552] net_ratelimit: 55 callbacks suppressed [ 190.866541][ T4502] Bluetooth: hci5: command 0xfc00 tx timeout [ 190.896885][ T7521] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 191.036567][ T7529] loop5: detected capacity change from 0 to 512 [ 191.161893][ T7535] fuse: Bad value for 'fd' [ 191.223962][ T7529] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.905: iget: bad i_size value: 38620345925642 [ 191.259401][ T7529] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.905: couldn't read orphan inode 15 (err -117) [ 191.363525][ T7529] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.540331][ T7547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.568781][ T7548] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.905: bg 0: block 5: invalid block bitmap [ 191.664039][ T7550] EXT4-fs (loop5): shut down requested (1) [ 193.214311][ T7588] loop6: detected capacity change from 0 to 2048 [ 193.406561][ T7588] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.826975][ T7600] FAULT_INJECTION: forcing a failure. [ 193.826975][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 193.874843][ T7600] CPU: 0 PID: 7600 Comm: syz.5.944 Not tainted syzkaller #0 [ 193.882202][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.892284][ T7600] Call Trace: [ 193.895606][ T7600] [ 193.898578][ T7600] dump_stack_lvl+0x188/0x250 [ 193.903295][ T7600] ? show_regs_print_info+0x20/0x20 [ 193.908524][ T7600] ? load_image+0x410/0x410 [ 193.913060][ T7600] ? __might_sleep+0xf0/0xf0 [ 193.917685][ T7600] ? __lock_acquire+0x7b50/0x7b50 [ 193.922751][ T7600] ? memset+0x1e/0x40 [ 193.926772][ T7600] should_fail+0x383/0x4b0 [ 193.931236][ T7600] should_failslab+0x5/0x20 [ 193.935772][ T7600] slab_pre_alloc_hook+0x51/0xc0 [ 193.940742][ T7600] kmem_cache_alloc_trace+0x47/0x290 [ 193.946057][ T7600] ? snd_seq_prioq_new+0x43/0x90 [ 193.951055][ T7600] snd_seq_prioq_new+0x43/0x90 [ 193.955857][ T7600] snd_seq_queue_alloc+0x137/0x740 [ 193.961024][ T7600] snd_seq_ioctl_create_queue+0x7b/0x320 [ 193.966698][ T7600] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 193.972980][ T7600] snd_seq_oss_open+0x622/0xf00 [ 193.977873][ T7600] ? snd_seq_oss_delete_client+0x50/0x50 [ 193.983588][ T7600] ? __mutex_lock_common+0x435/0x2400 [ 193.989008][ T7600] ? mutex_lock_io_nested+0x60/0x60 [ 193.994241][ T7600] ? snd_seq_oss_process_event+0x2910/0x2910 [ 194.000253][ T7600] ? async_call_lookup_ports+0x10/0x10 [ 194.005749][ T7600] ? do_raw_spin_unlock+0x11d/0x230 [ 194.010998][ T7600] odev_open+0x63/0x90 [ 194.015102][ T7600] chrdev_open+0x585/0x5f0 [ 194.019557][ T7600] ? cd_forget+0x160/0x160 [ 194.024016][ T7600] ? fsnotify_perm+0x3a7/0x560 [ 194.028811][ T7600] ? cd_forget+0x160/0x160 [ 194.028835][ T7600] do_dentry_open+0x7f7/0xf90 [ 194.028859][ T7600] ? vfs_open+0x2b/0x80 [ 194.037981][ T7600] path_openat+0x2718/0x2fb0 [ 194.038049][ T7600] ? __kasan_slab_alloc+0xa9/0xc0 [ 194.046780][ T7600] ? do_filp_open+0x400/0x400 [ 194.046842][ T7600] do_filp_open+0x1df/0x400 [ 194.056502][ T7600] ? vfs_tmpfile+0x300/0x300 [ 194.056567][ T7600] ? _raw_spin_unlock+0x24/0x40 [ 194.065706][ T7600] ? alloc_fd+0x59e/0x650 [ 194.065736][ T7600] do_sys_openat2+0x14b/0x500 [ 194.074924][ T7600] ? __lock_acquire+0x7b50/0x7b50 [ 194.074955][ T7600] ? do_sys_open+0xe0/0xe0 [ 194.084659][ T7600] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 194.095045][ T7600] ? lock_chain_count+0x20/0x20 [ 194.099934][ T7600] __x64_sys_openat+0x135/0x160 [ 194.104838][ T7600] do_syscall_64+0x4c/0xa0 [ 194.104865][ T7600] ? clear_bhb_loop+0x30/0x80 [ 194.104890][ T7600] ? clear_bhb_loop+0x30/0x80 [ 194.104921][ T7600] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.119215][ T7600] RIP: 0033:0x7f6186ae6159 [ 194.119238][ T7600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.119257][ T7600] RSP: 002b:00007f6184d3e028 EFLAGS: 00000246 [ 194.129977][ T7600] ORIG_RAX: 0000000000000101 [ 194.130000][ T7600] RAX: ffffffffffffffda RBX: 00007f6186d6dfa0 RCX: 00007f6186ae6159 [ 194.155999][ T7600] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 194.156017][ T7600] RBP: 00007f6186b7d06b R08: 0000000000000000 R09: 0000000000000000 [ 194.156031][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.168757][ T7600] R13: 00007f6186d6e038 R14: 00007f6186d6dfa0 R15: 00007ffc02e54478 [ 194.168793][ T7600] [ 194.228198][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.872832][ T7628] fuse: Bad value for 'fd' [ 195.264771][ C1] net_ratelimit: 55 callbacks suppressed [ 197.299405][ T7717] loop5: detected capacity change from 0 to 7 [ 197.333225][ T7717] loop5: [ 197.363393][ T7717] loop5: partition table partially beyond EOD, truncated [ 198.150888][ T26] audit: type=1326 audit(1790174612.291:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.5.981" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6186ae6159 code=0x0 [ 199.189600][ T4198] Bluetooth: hci5: Reading QCA version information failed (-110) [ 199.197628][ T4198] Bluetooth: hci5: Retry BT power ON:0 [ 200.315357][ C0] net_ratelimit: 59 callbacks suppressed [ 200.524010][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.651144][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.672519][ T7785] fuse: Bad value for 'fd' [ 200.923567][ T7775] netlink: 'syz.1.1000': attribute type 16 has an invalid length. [ 200.952055][ T7775] netlink: 'syz.1.1000': attribute type 17 has an invalid length. [ 200.979332][ T7775] device lo left promiscuous mode [ 201.011853][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 201.034811][ T4502] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 201.081699][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.098199][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.239616][ T7801] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 201.259570][ T7798] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1011'. [ 201.455532][ T4502] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.475776][ T4502] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.585462][ T4502] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 201.594545][ T4502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 201.605740][ T4502] usb 6-1: SerialNumber: syz [ 201.775888][ T7825] overlayfs: failed to clone upperpath [ 201.902402][ T4502] usb 6-1: 0:2 : does not exist [ 201.981221][ T4502] usb 6-1: USB disconnect, device number 6 [ 202.268404][ T7298] udevd[7298]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.813919][ T7866] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 205.344764][ C1] net_ratelimit: 79 callbacks suppressed [ 205.547202][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1052'. [ 205.733930][ T7969] device gretap0 entered promiscuous mode [ 209.639431][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.780154][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.240818][ T8037] netlink: 'syz.2.1082': attribute type 16 has an invalid length. [ 210.268335][ T8037] netlink: 'syz.2.1082': attribute type 17 has an invalid length. [ 210.358514][ T8037] device lo left promiscuous mode [ 210.387155][ C0] net_ratelimit: 54 callbacks suppressed [ 210.440072][ T4502] libceph: connect (1)[c::]:6789 error -101 [ 210.449907][ T4502] libceph: mon0 (1)[c::]:6789 connect error [ 210.458698][ T8037] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 210.502177][ T8044] ceph: No mds server is up or the cluster is laggy [ 210.510911][ T4502] libceph: connect (1)[c::]:6789 error -101 [ 210.576326][ T4502] libceph: mon0 (1)[c::]:6789 connect error [ 210.695580][ T8037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.838528][ T4230] libceph: connect (1)[c::]:6789 error -101 [ 210.844621][ T4230] libceph: mon0 (1)[c::]:6789 connect error [ 211.162594][ T8034] loop6: detected capacity change from 0 to 32768 [ 211.291821][ T8054] syz.2.1087[8054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.291988][ T8054] syz.2.1087[8054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.453154][ T8034] XFS (loop6): Mounting V5 Filesystem [ 211.630475][ T8034] XFS (loop6): Ending clean mount [ 211.814381][ T26] audit: type=1800 audit(1790174625.951:10): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1081" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 211.859478][ T8034] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 212.230393][ T8075] XFS (loop6): User initiated shutdown received. [ 212.237920][ T8075] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 212.253578][ T8075] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 212.411037][ T5699] XFS (loop6): Unmounting Filesystem [ 212.954906][ T4228] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 213.150785][ T8089] ceph: No mds server is up or the cluster is laggy [ 213.225240][ T4228] usb 6-1: Using ep0 maxpacket: 16 [ 213.375599][ T4228] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.384864][ T4228] usb 6-1: config 0 has no interface number 0 [ 213.575503][ T8078] device lo entered promiscuous mode [ 213.585281][ T4228] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 213.606490][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.614527][ T4228] usb 6-1: Product: syz [ 213.665686][ T4228] usb 6-1: Manufacturer: syz [ 213.670343][ T4228] usb 6-1: SerialNumber: syz [ 213.746069][ T4228] usb 6-1: config 0 descriptor?? [ 213.808267][ T8078] device tunl0 entered promiscuous mode [ 213.818150][ T4228] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 213.855311][ T8078] device gre0 entered promiscuous mode [ 214.539821][ T8078] device gretap0 entered promiscuous mode [ 214.649424][ T8078] device erspan0 entered promiscuous mode [ 214.711097][ T8078] device ip_vti0 entered promiscuous mode [ 214.738605][ T8078] device ip6_vti0 entered promiscuous mode [ 214.813460][ T8078] device sit0 entered promiscuous mode [ 214.999676][ T8078] device ip6tnl0 entered promiscuous mode [ 215.151166][ T8078] device ip6gre0 entered promiscuous mode [ 215.222369][ T8078] device syz_tun entered promiscuous mode [ 215.272833][ T8078] device ip6gretap0 entered promiscuous mode [ 215.397460][ T8078] device bridge0 entered promiscuous mode [ 215.475053][ T8078] device bond0 entered promiscuous mode [ 215.494815][ T8078] device bond_slave_0 entered promiscuous mode [ 215.501253][ T8078] device bond_slave_1 entered promiscuous mode [ 215.507570][ C1] net_ratelimit: 78 callbacks suppressed [ 215.572085][ T8078] device team0 entered promiscuous mode [ 215.578212][ T8078] device team_slave_0 entered promiscuous mode [ 215.584639][ T8078] device team_slave_1 entered promiscuous mode [ 215.644966][ T8078] device dummy0 entered promiscuous mode [ 215.689411][ T8078] device nlmon0 entered promiscuous mode [ 215.706393][ T8078] device caif0 entered promiscuous mode [ 215.728848][ T8078] device batadv0 entered promiscuous mode [ 215.745684][ T4228] gspca_spca1528: reg_r err -71 [ 215.754044][ T4228] spca1528: probe of 6-1:0.1 failed with error -71 [ 215.780597][ T4228] usb 6-1: USB disconnect, device number 7 [ 215.811802][ T8078] device vxcan0 entered promiscuous mode [ 215.833068][ T8078] device vxcan1 entered promiscuous mode [ 215.872945][ T8078] device wg0 entered promiscuous mode [ 215.902036][ T8078] device wg1 entered promiscuous mode [ 215.934060][ T8078] device wg2 entered promiscuous mode [ 215.951044][ T8078] device veth0_to_bridge entered promiscuous mode [ 216.034318][ T8078] device veth1_to_bridge entered promiscuous mode [ 216.100199][ T8078] device veth0_to_bond entered promiscuous mode [ 216.157279][ T8078] device veth1_to_bond entered promiscuous mode [ 216.212591][ T8078] device veth0_to_team entered promiscuous mode [ 216.311878][ T8078] device veth1_to_team entered promiscuous mode [ 216.447725][ T8078] device veth0_to_batadv entered promiscuous mode [ 216.486642][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.504908][ T8078] device batadv_slave_0 entered promiscuous mode [ 216.560932][ T8078] device veth1_to_batadv entered promiscuous mode [ 216.582785][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.631284][ T8078] device batadv_slave_1 entered promiscuous mode [ 216.677124][ T8078] device xfrm0 entered promiscuous mode [ 216.713914][ T8078] device veth0_to_hsr entered promiscuous mode [ 216.800992][ T8078] device veth1_to_hsr entered promiscuous mode [ 216.975228][ T8078] device hsr0 entered promiscuous mode [ 217.025658][ T8078] device veth1_virt_wifi entered promiscuous mode [ 217.154008][ T8078] device veth0_virt_wifi entered promiscuous mode [ 217.186925][ T8078] device virt_wifi0 entered promiscuous mode [ 217.331752][ T8078] device vlan0 entered promiscuous mode [ 217.355477][ T8078] device vlan1 entered promiscuous mode [ 217.376431][ T8078] device macvlan0 entered promiscuous mode [ 217.412467][ T8078] device macvlan1 entered promiscuous mode [ 217.427059][ T8078] device ipvlan0 entered promiscuous mode [ 217.433036][ T8078] device ipvlan1 entered promiscuous mode [ 217.531516][ T8078] device macvtap0 entered promiscuous mode [ 217.570050][ T8078] device macsec0 entered promiscuous mode [ 217.609430][ T8078] device geneve0 entered promiscuous mode [ 217.651849][ T8078] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.661354][ T8078] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.676381][ T8078] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.685859][ T8078] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.698503][ T8078] device geneve1 entered promiscuous mode [ 217.733197][ T8078] device netdevsim0 entered promiscuous mode [ 217.771357][ T8078] device netdevsim1 entered promiscuous mode [ 217.795928][ T8078] device netdevsim2 entered promiscuous mode [ 217.818925][ T8078] device netdevsim3 entered promiscuous mode [ 217.870739][ T8078] device wlan0 entered promiscuous mode [ 217.911302][ T8078] device wlan1 entered promiscuous mode [ 217.926658][ T8078] device ip6erspan0 entered promiscuous mode [ 217.946271][ T8078] device vlan2 entered promiscuous mode [ 217.961798][ T8078] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.970974][ T8078] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.979986][ T8078] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.989441][ T8078] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.006091][ T8078] device syzkaller0 entered promiscuous mode [ 218.017176][ T8078] device bridge0.257 entered promiscuous mode [ 218.024122][ T8121] netlink: 'syz.1.1110': attribute type 2 has an invalid length. [ 218.076711][ T8123] netlink: 'syz.1.1110': attribute type 2 has an invalid length. [ 218.084480][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 218.251166][ T8137] loop6: detected capacity change from 0 to 1024 [ 218.317227][ T8137] EXT4-fs (loop6): Ignoring removed nobh option [ 218.354027][ T8137] EXT4-fs (loop6): Ignoring removed orlov option [ 218.401777][ T8137] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobh,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 218.945447][ T4887] libceph: connect (1)[c::]:6789 error -101 [ 218.951556][ T4887] libceph: mon0 (1)[c::]:6789 connect error [ 218.981455][ T8150] ceph: No mds server is up or the cluster is laggy [ 218.992594][ T4887] libceph: connect (1)[c::]:6789 error -101 [ 219.005271][ T4887] libceph: mon0 (1)[c::]:6789 connect error [ 219.204727][ T8140] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1115'. [ 219.499844][ T8162] device gretap0 entered promiscuous mode [ 220.057676][ T8186] netlink: 'syz.6.1129': attribute type 2 has an invalid length. [ 220.150825][ T8188] netlink: 'syz.6.1129': attribute type 2 has an invalid length. [ 220.167598][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1129'. [ 220.389888][ T8195] loop5: detected capacity change from 0 to 1024 [ 220.600310][ T8195] EXT4-fs (loop5): Ignoring removed nobh option [ 220.619937][ T8195] EXT4-fs (loop5): Ignoring removed orlov option [ 220.634912][ C0] net_ratelimit: 56 callbacks suppressed [ 220.726967][ T8195] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobh,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 221.634843][ T8224] tipc: Enabling of bearer rejected, failed to enable media [ 221.743919][ T8220] loop6: detected capacity change from 0 to 4096 [ 222.063383][ T8220] ntfs: volume version 3.1. [ 222.240411][ T8233] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.1145'. [ 222.256427][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1145'. [ 223.137763][ T8248] netlink: 'syz.6.1146': attribute type 16 has an invalid length. [ 223.177573][ T8248] netlink: 'syz.6.1146': attribute type 17 has an invalid length. [ 223.245154][ T8248] device lo left promiscuous mode [ 223.377083][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.554071][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.613551][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.753314][ T8261] netlink: 11559 bytes leftover after parsing attributes in process `syz.5.1153'. [ 224.037835][ T8273] netlink: 'syz.5.1169': attribute type 1 has an invalid length. [ 224.212141][ T8273] device bond1 entered promiscuous mode [ 224.305583][ T8273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.824766][ C1] net_ratelimit: 59 callbacks suppressed [ 226.125156][ T8320] fuse: Bad value for 'fd' [ 226.875330][ T6125] Bluetooth: hci1: command 0x0406 tx timeout [ 228.115781][ T8338] fuse: Bad value for 'fd' [ 229.767548][ T8382] loop5: detected capacity change from 0 to 4096 [ 229.902760][ T8382] ntfs: volume version 3.1. [ 230.784825][ T4256] Bluetooth: hci0: command 0x0c20 tx timeout [ 230.864750][ C1] net_ratelimit: 51 callbacks suppressed [ 231.654878][ T4228] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 232.065063][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.076546][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.106821][ T4228] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.120767][ T4228] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.129960][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.146361][ T4228] usb 6-1: config 0 descriptor?? [ 232.564867][ T8446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.658230][ T4228] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 232.695874][ T4228] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 232.718443][ T8446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.175463][ T23] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 234.355028][ T23] usb 6-1: device descriptor read/64, error -32 [ 234.625096][ T23] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 234.738182][ T8492] loop6: detected capacity change from 0 to 512 [ 234.812911][ T8492] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.1240: iget: bad i_size value: 38620345925642 [ 234.815264][ T23] usb 6-1: device descriptor read/64, error -32 [ 234.835796][ T8492] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.1240: couldn't read orphan inode 15 (err -117) [ 234.848573][ T8492] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.890057][ T8492] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Out of memory [ 234.900042][ T8492] EXT4-fs error (device loop6): ext4_setattr:5586: inode #18: comm syz.6.1240: mark_inode_dirty error [ 234.912965][ T8492] EXT4-fs error (device loop6) in ext4_setattr:5645: Out of memory [ 234.935843][ T8500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.955110][ T8500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.145027][ T23] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 235.278419][ T8507] loop5: detected capacity change from 0 to 256 [ 235.395138][ T23] usb 6-1: device not accepting address 8, error -71 [ 235.452259][ T8507] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 235.653806][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1247'. [ 235.663355][ T8515] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1247'. [ 235.689157][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1247'. [ 235.698494][ T8515] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1247'. [ 235.947002][ T8519] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 235.984840][ C1] net_ratelimit: 52 callbacks suppressed [ 236.230880][ T21] usb 6-1: USB disconnect, device number 8 [ 236.993816][ T8538] device vlan3 entered promiscuous mode [ 237.553406][ T8536] loop5: detected capacity change from 0 to 32768 [ 237.649500][ T8536] (syz.5.1256,8536,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "da ‹=writeback" or missing value [ 237.664456][ T8536] (syz.5.1256,8536,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 238.014034][ T8548] device vlan2 entered promiscuous mode [ 238.506334][ T8567] fuse: Bad value for 'fd' [ 240.074781][ T13] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 240.275684][ T8611] fuse: Bad value for 'fd' [ 240.471471][ T8621] fuse: Bad value for 'fd' [ 240.506876][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.528062][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.545731][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.559856][ T13] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.569381][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.581541][ T13] usb 6-1: config 0 descriptor?? [ 241.029016][ T8639] tipc: Started in network mode [ 241.050433][ T8639] tipc: Node identity 1001001, cluster identity 4711 [ 241.080575][ T8639] tipc: Node number set to 16781313 [ 241.120081][ T13] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 241.135833][ T13] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 241.155271][ T8640] tipc: Enabled bearer , priority 0 [ 241.184773][ C1] net_ratelimit: 52 callbacks suppressed [ 241.417756][ T8645] fuse: Bad value for 'fd' [ 241.437865][ T23] usb 6-1: USB disconnect, device number 9 [ 242.336588][ C0] vxcan0: j1939_simple_recv: Received already invalidated message [ 242.526821][ T8637] device lo entered promiscuous mode [ 242.610991][ T8637] device tunl0 entered promiscuous mode [ 242.739493][ T8637] device gre0 entered promiscuous mode [ 242.909671][ T8637] device erspan0 entered promiscuous mode [ 242.954016][ T8637] device ip_vti0 entered promiscuous mode [ 243.001559][ T8637] device ip6_vti0 entered promiscuous mode [ 243.049277][ T8637] device sit0 entered promiscuous mode [ 243.115168][ T8637] device ip6tnl0 entered promiscuous mode [ 243.155663][ T8637] device ip6gre0 entered promiscuous mode [ 243.195510][ T8637] device syz_tun entered promiscuous mode [ 243.239015][ T8637] device ip6gretap0 entered promiscuous mode [ 243.283812][ T8637] device bridge0 entered promiscuous mode [ 243.324284][ T8637] device bond0 entered promiscuous mode [ 243.330072][ T8637] device bond_slave_0 entered promiscuous mode [ 243.336836][ T8637] device bond_slave_1 entered promiscuous mode [ 243.373627][ T8685] loop5: detected capacity change from 0 to 32768 [ 243.387492][ T8637] device team0 entered promiscuous mode [ 243.395845][ T8637] device team_slave_0 entered promiscuous mode [ 243.396039][ T8637] device team_slave_1 entered promiscuous mode [ 243.419744][ T8637] device dummy0 entered promiscuous mode [ 243.475269][ T8685] xfs: Unknown parameter 'smackfstransmute' [ 243.511268][ T8637] device nlmon0 entered promiscuous mode [ 243.549059][ T8637] device caif0 entered promiscuous mode [ 243.615199][ T8637] device batadv0 entered promiscuous mode [ 243.692980][ T8637] device vxcan0 entered promiscuous mode [ 243.735237][ T8698] fuse: Bad value for 'fd' [ 246.054903][ T8637] device vxcan1 entered promiscuous mode [ 246.224835][ C1] net_ratelimit: 59 callbacks suppressed [ 246.440956][ C1] vxcan0: j1939_simple_recv: Received already invalidated message [ 246.480965][ T8637] device wg0 entered promiscuous mode [ 246.565828][ T8637] device wg1 entered promiscuous mode [ 246.631668][ T8637] device wg2 entered promiscuous mode [ 246.659937][ T8637] device veth0_to_bridge entered promiscuous mode [ 246.721335][ T8637] device veth1_to_bridge entered promiscuous mode [ 246.782558][ T8637] device veth0_to_bond entered promiscuous mode [ 246.842189][ T8637] device veth1_to_bond entered promiscuous mode [ 246.893810][ T8637] device veth0_to_team entered promiscuous mode [ 246.956214][ T8637] device veth1_to_team entered promiscuous mode [ 247.007200][ T8637] device veth0_to_batadv entered promiscuous mode [ 247.028565][ T8637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.052986][ T8637] device batadv_slave_0 entered promiscuous mode [ 247.090935][ T8637] device veth1_to_batadv entered promiscuous mode [ 247.100896][ T8637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.117670][ T8637] device batadv_slave_1 entered promiscuous mode [ 247.137250][ T8637] device xfrm0 entered promiscuous mode [ 247.245349][ T8637] device veth0_to_hsr entered promiscuous mode [ 247.311986][ T8637] device veth1_to_hsr entered promiscuous mode [ 247.409151][ T8637] device hsr0 entered promiscuous mode [ 247.452694][ T8637] device veth1_virt_wifi entered promiscuous mode [ 247.511317][ T8637] device veth0_virt_wifi entered promiscuous mode [ 247.542482][ T8637] device virt_wifi0 entered promiscuous mode [ 247.732126][ T8637] device vlan0 entered promiscuous mode [ 247.741418][ T8637] device vlan1 entered promiscuous mode [ 247.777522][ T8637] device macvlan0 entered promiscuous mode [ 247.824548][ T8637] device macvlan1 entered promiscuous mode [ 247.841816][ T8637] device ipvlan0 entered promiscuous mode [ 247.855430][ T8637] device ipvlan1 entered promiscuous mode [ 247.961449][ T8637] device macvtap0 entered promiscuous mode [ 248.002128][ T8637] device macsec0 entered promiscuous mode [ 248.020615][ T8637] device geneve0 entered promiscuous mode [ 248.120885][ T8637] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.130346][ T8637] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.139920][ T8637] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.149589][ T8637] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.162477][ T8637] device geneve1 entered promiscuous mode [ 248.211763][ T8637] device netdevsim0 entered promiscuous mode [ 248.244665][ T8637] device netdevsim1 entered promiscuous mode [ 248.273927][ T8637] device netdevsim2 entered promiscuous mode [ 248.316064][ T8637] device netdevsim3 entered promiscuous mode [ 248.355890][ T8637] device wlan0 entered promiscuous mode [ 248.371914][ T8637] device wlan1 entered promiscuous mode [ 248.409393][ T8637] device bridge1 entered promiscuous mode [ 248.455964][ T8637] device bond1 entered promiscuous mode [ 248.481420][ T8637] device bridge2 entered promiscuous mode [ 248.515806][ T8637] device vlan3 entered promiscuous mode [ 248.521695][ T8637] device bridge0.257 entered promiscuous mode [ 248.560811][ T8637] device vlan4 entered promiscuous mode [ 248.832213][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 248.843971][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 249.342592][ T8763] loop5: detected capacity change from 0 to 512 [ 249.451244][ T8763] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 249.977772][ T8775] tipc: Started in network mode [ 249.982712][ T8775] tipc: Node identity beee143f27be, cluster identity 4711 [ 250.100238][ T8775] tipc: Enabled bearer , priority 0 [ 250.250728][ T8783] device syzkaller0 entered promiscuous mode [ 250.379263][ T8774] tipc: Resetting bearer [ 250.566712][ T8774] tipc: Disabling bearer [ 250.973844][ T8811] netlink: 15143 bytes leftover after parsing attributes in process `syz.5.1358'. [ 251.208307][ T26] audit: type=1800 audit(1790174665.351:11): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1360" name="syzkaller0" dev="sda1" ino=2057 res=0 errno=0 [ 251.344746][ C1] net_ratelimit: 53 callbacks suppressed [ 252.330768][ T8840] FAULT_INJECTION: forcing a failure. [ 252.330768][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 252.450322][ T8840] CPU: 0 PID: 8840 Comm: syz.5.1365 Not tainted syzkaller #0 [ 252.457771][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.467915][ T8840] Call Trace: [ 252.471220][ T8840] [ 252.474178][ T8840] dump_stack_lvl+0x188/0x250 [ 252.478891][ T8840] ? show_regs_print_info+0x20/0x20 [ 252.484128][ T8840] ? load_image+0x410/0x410 [ 252.488657][ T8840] ? __might_sleep+0xf0/0xf0 [ 252.493275][ T8840] ? __lock_acquire+0x7b50/0x7b50 [ 252.498339][ T8840] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 252.504275][ T8840] should_fail+0x383/0x4b0 [ 252.508739][ T8840] should_failslab+0x5/0x20 [ 252.513275][ T8840] slab_pre_alloc_hook+0x51/0xc0 [ 252.518248][ T8840] kmem_cache_alloc_trace+0x47/0x290 [ 252.523568][ T8840] ? io_uring_alloc_task_context+0x180/0x5c0 [ 252.529600][ T8840] io_uring_alloc_task_context+0x180/0x5c0 [ 252.535444][ T8840] ? __io_uring_add_tctx_node+0x500/0x500 [ 252.541221][ T8840] ? __lock_acquire+0x7b50/0x7b50 [ 252.546313][ T8840] ? __rwlock_init+0x140/0x140 [ 252.551121][ T8840] __io_uring_add_tctx_node+0x37b/0x500 [ 252.556714][ T8840] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 252.562676][ T8840] ? _raw_spin_unlock+0x24/0x40 [ 252.567560][ T8840] ? alloc_fd+0x59e/0x650 [ 252.571934][ T8840] io_uring_install_fd+0xc0/0xf0 [ 252.576918][ T8840] __se_sys_io_uring_setup+0x2303/0x2900 [ 252.582608][ T8840] ? __x64_sys_io_uring_setup+0x60/0x60 [ 252.588210][ T8840] ? lockdep_hardirqs_on+0x94/0x140 [ 252.593457][ T8840] do_syscall_64+0x4c/0xa0 [ 252.597922][ T8840] ? clear_bhb_loop+0x30/0x80 [ 252.602632][ T8840] ? clear_bhb_loop+0x30/0x80 [ 252.607346][ T8840] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.613287][ T8840] RIP: 0033:0x7f6186ae6159 [ 252.617735][ T8840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.637378][ T8840] RSP: 002b:00007f6184d3dfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 252.645838][ T8840] RAX: ffffffffffffffda RBX: 00002000000005c0 RCX: 00007f6186ae6159 [ 252.653844][ T8840] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000efe [ 252.661847][ T8840] RBP: 00007f6186b7d06b R08: 0000000000000000 R09: 0000000000000000 [ 252.669854][ T8840] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.677863][ T8840] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc02e54478 [ 252.685895][ T8840] [ 252.691077][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 253.502336][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1370'. [ 254.402880][ T8872] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 254.761974][ T8876] file system registered [ 255.062126][ T5155] ffs_data_put(): freeing [ 255.520246][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.678430][ T26] audit: type=1800 audit(1790174670.821:12): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1393" name=02 dev="sda1" ino=2058 res=0 errno=0 [ 256.926642][ T8919] loop5: detected capacity change from 0 to 256 [ 257.046477][ T8919] FAT-fs (loop5): Directory bread(block 64) failed [ 257.053065][ T8919] FAT-fs (loop5): Directory bread(block 65) failed [ 257.211062][ T8919] FAT-fs (loop5): Directory bread(block 66) failed [ 257.265144][ C0] net_ratelimit: 37 callbacks suppressed [ 257.286838][ T8919] FAT-fs (loop5): Directory bread(block 67) failed [ 257.293569][ T8919] FAT-fs (loop5): Directory bread(block 68) failed [ 257.381765][ T8919] FAT-fs (loop5): Directory bread(block 69) failed [ 257.402075][ T8919] FAT-fs (loop5): Directory bread(block 70) failed [ 257.424842][ T8919] FAT-fs (loop5): Directory bread(block 71) failed [ 257.431548][ T8919] FAT-fs (loop5): Directory bread(block 72) failed [ 257.527003][ T8919] FAT-fs (loop5): Directory bread(block 73) failed [ 258.282298][ T8934] overlayfs: failed to clone upperpath [ 258.464435][ T8942] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 258.532480][ T8942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.614550][ T8944] device syz_tun left promiscuous mode [ 258.622444][ T8944] tipc: Resetting bearer [ 258.633650][ T8944] tipc: Resetting bearer [ 258.648687][ T8944] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 258.734813][ T8951] capability: warning: `syz.6.1406' uses 32-bit capabilities (legacy support in use) [ 258.754662][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 259.302743][ T8973] fuse: Bad value for 'fd' [ 261.234930][ T1111] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 261.595615][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.612182][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.623028][ T1111] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 261.632372][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.644890][ T1111] usb 6-1: config 0 descriptor?? [ 262.120520][ T1111] savu 0003:1E7D:2D5A.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 262.474807][ C0] net_ratelimit: 41 callbacks suppressed [ 262.801210][ T1111] usb 6-1: USB disconnect, device number 10 [ 263.994099][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1463'. [ 267.117291][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 267.675241][ C0] net_ratelimit: 38 callbacks suppressed [ 268.267402][ T9144] xt_hashlimit: size too large, truncated to 1048576 [ 268.475410][ T13] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 271.738661][ T9247] overlayfs: failed to clone upperpath [ 271.747875][ T9247] overlayfs: failed to clone lowerpath [ 272.726581][ T9270] autofs4:pid:9270:autofs_fill_super: called with bogus options [ 272.784802][ C1] net_ratelimit: 52 callbacks suppressed [ 272.908006][ T9277] netlink: 'syz.6.1531': attribute type 1 has an invalid length. [ 272.999740][ T9277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.170370][ T9279] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 273.250394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 274.847577][ T9321] loop5: detected capacity change from 0 to 128 [ 275.001508][ T9321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 275.044788][ T9321] System zones: 1-3, 19-19, 35-36 [ 275.088675][ T9321] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 275.107230][ T9321] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 277.126294][ T4199] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 277.506011][ T9372] FAULT_INJECTION: forcing a failure. [ 277.506011][ T9372] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 277.584258][ T9372] CPU: 0 PID: 9372 Comm: syz.5.1564 Not tainted syzkaller #0 [ 277.591704][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.601793][ T9372] Call Trace: [ 277.605101][ T9372] [ 277.608055][ T9372] dump_stack_lvl+0x188/0x250 [ 277.612760][ T9372] ? show_regs_print_info+0x20/0x20 [ 277.617988][ T9372] ? load_image+0x410/0x410 [ 277.622524][ T9372] ? __lock_acquire+0x7b50/0x7b50 [ 277.627619][ T9372] ? __up_read+0x2b4/0x6b0 [ 277.632061][ T9372] should_fail+0x383/0x4b0 [ 277.636515][ T9372] _copy_to_user+0x2e/0x130 [ 277.641045][ T9372] __se_sys_move_pages+0x14dd/0x17f0 [ 277.646349][ T9372] ? __x64_sys_move_pages+0xf0/0xf0 [ 277.651618][ T9372] ? lock_chain_count+0x20/0x20 [ 277.656506][ T9372] ? __x64_sys_move_pages+0x1d/0xf0 [ 277.661731][ T9372] do_syscall_64+0x4c/0xa0 [ 277.666186][ T9372] ? clear_bhb_loop+0x30/0x80 [ 277.670892][ T9372] ? clear_bhb_loop+0x30/0x80 [ 277.675585][ T9372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.681509][ T9372] RIP: 0033:0x7f6186ae6159 [ 277.685958][ T9372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.705597][ T9372] RSP: 002b:00007f6184d3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 277.714066][ T9372] RAX: ffffffffffffffda RBX: 00007f6186d6dfa0 RCX: 00007f6186ae6159 [ 277.722065][ T9372] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 277.730062][ T9372] RBP: 00007f6186b7d06b R08: 0000200000000040 R09: 0300000000000000 [ 277.738072][ T9372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.746076][ T9372] R13: 00007f6186d6e038 R14: 00007f6186d6dfa0 R15: 00007ffc02e54478 [ 277.754095][ T9372] [ 278.304758][ C1] net_ratelimit: 39 callbacks suppressed [ 278.982907][ T9403] fuse: Bad value for 'fd' [ 279.268085][ T9406] loop5: detected capacity change from 0 to 1024 [ 279.293854][ T9406] hfsplus: unable to parse mount options [ 279.755115][ T4228] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 280.025044][ T4228] usb 6-1: Using ep0 maxpacket: 16 [ 280.145373][ T4228] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 280.166343][ T4228] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 280.186935][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.211669][ T4228] usb 6-1: config 0 descriptor?? [ 280.546981][ T9449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1593'. [ 280.697708][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.708230][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.723015][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.738532][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.753483][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.772050][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.786939][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.802345][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.817524][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.835027][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.841778][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.869039][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.875837][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.933442][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 280.984269][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.024020][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.105930][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.112704][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.170011][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.211367][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.218613][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.260757][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.267781][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.304760][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.311713][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.340458][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.362403][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.395091][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.401876][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.427251][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.445136][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.477787][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.484546][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.514997][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.521765][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.534875][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.541651][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.582551][ T4228] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x0 [ 281.618094][ T4228] lua 0003:1E7D:2C2E.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.5-1/input0 [ 281.710136][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 281.849388][ T9464] 8021q: adding VLAN 0 to HW filter on device team1 [ 281.897982][ T4230] usb 6-1: USB disconnect, device number 12 [ 282.146348][ T9468] overlayfs: failed to clone lowerpath [ 282.975175][ T9488] netlink: 'syz.6.1608': attribute type 10 has an invalid length. [ 283.078051][ T9488] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 283.167830][ T9488] team0: Failed to send options change via netlink (err -105) [ 283.178168][ T9488] team0: Port device netdevsim0 added [ 283.318314][ T26] audit: type=1326 audit(1790174697.461:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9491 comm="syz.6.1611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7508ef9159 code=0x0 [ 283.476437][ T9493] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1610'. [ 283.512398][ T9497] overlayfs: failed to clone upperpath [ 283.592178][ T4552] net_ratelimit: 34 callbacks suppressed [ 286.571228][ T9573] overlayfs: failed to clone lowerpath [ 286.623357][ T9577] overlayfs: failed to clone lowerpath [ 286.778160][ T9582] netlink: 'syz.6.1647': attribute type 39 has an invalid length. [ 287.574887][ T9592] capability: warning: `syz.6.1651' uses deprecated v2 capabilities in a way that may be insecure [ 288.784730][ C0] net_ratelimit: 40 callbacks suppressed [ 288.844012][ T9627] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.854009][ T9627] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.863092][ T9627] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.871860][ T9627] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.957935][ T9627] device syzkaller0 left promiscuous mode [ 289.574744][ T9637] device macvlan2 entered promiscuous mode [ 289.582580][ T9637] bond2: (slave macvlan2): Opening slave failed [ 289.895842][ T9647] device lo left promiscuous mode [ 289.901373][ T9647] device tunl0 left promiscuous mode [ 289.907188][ T9647] device gre0 left promiscuous mode [ 289.912673][ T9647] device gretap0 left promiscuous mode [ 289.919235][ T9647] device ip_vti0 left promiscuous mode [ 289.925000][ T9647] device ip6_vti0 left promiscuous mode [ 289.930782][ T9647] device sit0 left promiscuous mode [ 289.936410][ T9647] device ip6tnl0 left promiscuous mode [ 289.942204][ T9647] device ip6gre0 left promiscuous mode [ 289.950596][ T9647] device ip6gretap0 left promiscuous mode [ 289.956905][ T9647] device bond0 left promiscuous mode [ 289.962894][ T9647] device team0 left promiscuous mode [ 289.968862][ T9647] device dummy0 left promiscuous mode [ 289.976739][ T9647] device nlmon0 left promiscuous mode [ 289.982803][ T9647] device caif0 left promiscuous mode [ 289.989739][ T9647] device batadv0 left promiscuous mode [ 290.000923][ T9647] device vxcan0 left promiscuous mode [ 290.011593][ T9647] device vxcan1 left promiscuous mode [ 290.017371][ T9647] device wg0 left promiscuous mode [ 290.022968][ T9647] device wg1 left promiscuous mode [ 290.028624][ T9647] device wg2 left promiscuous mode [ 290.034215][ T9647] device veth0_to_bridge left promiscuous mode [ 290.041189][ T9647] device veth1_to_bridge left promiscuous mode [ 290.047993][ T9647] device veth0_to_bond left promiscuous mode [ 290.054990][ T9647] device bond_slave_0 left promiscuous mode [ 290.061383][ T9647] device veth1_to_bond left promiscuous mode [ 290.068404][ T9647] device bond_slave_1 left promiscuous mode [ 290.074938][ T9647] device veth0_to_team left promiscuous mode [ 290.081645][ T9647] device team_slave_0 left promiscuous mode [ 290.123325][ T9647] device veth1_to_team left promiscuous mode [ 290.155440][ T9647] device team_slave_1 left promiscuous mode [ 290.161581][ T9647] device veth0_to_batadv left promiscuous mode [ 290.161841][ T9647] device batadv_slave_0 left promiscuous mode [ 290.295535][ T9647] device veth1_to_batadv left promiscuous mode [ 290.301897][ T9647] device batadv_slave_1 left promiscuous mode [ 290.446519][ T9647] device xfrm0 left promiscuous mode [ 290.467057][ T9647] device veth0_to_hsr left promiscuous mode [ 290.505839][ T9647] device veth1_to_hsr left promiscuous mode [ 290.544459][ T9647] device hsr0 left promiscuous mode [ 290.585112][ T9647] device veth1_virt_wifi left promiscuous mode [ 290.627663][ T9647] device veth0_virt_wifi left promiscuous mode [ 290.697142][ T9647] device virt_wifi0 left promiscuous mode [ 290.715240][ T9647] device vlan0 left promiscuous mode [ 290.721071][ T9647] device vlan1 left promiscuous mode [ 290.726878][ T9647] device macvlan0 left promiscuous mode [ 290.732892][ T9647] device macvlan1 left promiscuous mode [ 290.738747][ T9647] device ipvlan0 left promiscuous mode [ 290.744631][ T9647] device ipvlan1 left promiscuous mode [ 290.750646][ T9647] device macvtap0 left promiscuous mode [ 290.757781][ T9647] device macsec0 left promiscuous mode [ 290.763483][ T9647] device geneve0 left promiscuous mode [ 290.770253][ T9647] device geneve1 left promiscuous mode [ 290.777614][ T9647] device netdevsim0 left promiscuous mode [ 290.783772][ T9647] device netdevsim1 left promiscuous mode [ 290.789833][ T9647] device netdevsim2 left promiscuous mode [ 290.796266][ T9647] device netdevsim3 left promiscuous mode [ 290.802223][ T9647] device wlan0 left promiscuous mode [ 290.814057][ T9647] device wlan1 left promiscuous mode [ 290.847872][ T9647] device ip6erspan0 left promiscuous mode [ 290.954939][ T9647] device vlan2 left promiscuous mode [ 290.960298][ T9647] device erspan0 left promiscuous mode [ 291.062273][ T9647] device bridge0.257 left promiscuous mode [ 291.145081][ T9647] device bridge0 left promiscuous mode [ 291.150834][ T9647] device vlan3 left promiscuous mode [ 291.184182][ T9649] device lo left promiscuous mode [ 291.200351][ T9649] device tunl0 left promiscuous mode [ 291.243984][ T9649] device gre0 left promiscuous mode [ 291.271485][ T9649] device erspan0 left promiscuous mode [ 291.295198][ T9649] device ip_vti0 left promiscuous mode [ 291.313397][ T9649] device ip6_vti0 left promiscuous mode [ 291.330111][ T9649] device sit0 left promiscuous mode [ 291.349936][ T9649] device ip6tnl0 left promiscuous mode [ 291.385010][ T9649] device ip6gre0 left promiscuous mode [ 291.390811][ T9649] device syz_tun left promiscuous mode [ 291.397188][ T9649] device ip6gretap0 left promiscuous mode [ 291.403452][ T9649] device bond0 left promiscuous mode [ 291.410305][ T9649] device team0 left promiscuous mode [ 291.417286][ T9649] device dummy0 left promiscuous mode [ 291.423120][ T9649] device nlmon0 left promiscuous mode [ 291.430405][ T9649] device caif0 left promiscuous mode [ 291.437578][ T9649] device batadv0 left promiscuous mode [ 291.443545][ T9649] device vxcan0 left promiscuous mode [ 291.451400][ T9649] device vxcan1 left promiscuous mode [ 291.457330][ T9649] device wg0 left promiscuous mode [ 291.462862][ T9649] device wg1 left promiscuous mode [ 291.468520][ T9649] device wg2 left promiscuous mode [ 291.475242][ T9649] device veth0_to_bridge left promiscuous mode [ 291.483496][ T9649] device veth1_to_bridge left promiscuous mode [ 291.490884][ T9649] device veth0_to_bond left promiscuous mode [ 291.497851][ T9649] device bond_slave_0 left promiscuous mode [ 291.504200][ T9649] device veth1_to_bond left promiscuous mode [ 291.510927][ T9649] device bond_slave_1 left promiscuous mode [ 291.517497][ T9649] device veth0_to_team left promiscuous mode [ 291.523883][ T9649] device team_slave_0 left promiscuous mode [ 291.531142][ T9649] device veth1_to_team left promiscuous mode [ 291.538432][ T9649] device team_slave_1 left promiscuous mode [ 291.545123][ T9649] device veth0_to_batadv left promiscuous mode [ 291.551441][ T9649] device batadv_slave_0 left promiscuous mode [ 291.585237][ T9649] device veth1_to_batadv left promiscuous mode [ 291.591620][ T9649] device batadv_slave_1 left promiscuous mode [ 291.614993][ T9649] device xfrm0 left promiscuous mode [ 291.626343][ T9649] device veth0_to_hsr left promiscuous mode [ 291.654952][ T9649] device veth1_to_hsr left promiscuous mode [ 291.661197][ T9649] device hsr0 left promiscuous mode [ 291.694839][ T9649] device veth1_virt_wifi left promiscuous mode [ 291.701247][ T9649] device veth0_virt_wifi left promiscuous mode [ 291.725397][ T9649] device virt_wifi0 left promiscuous mode [ 291.731495][ T9649] device vlan0 left promiscuous mode [ 291.749443][ T9649] device vlan1 left promiscuous mode [ 291.765059][ T9649] device macvlan0 left promiscuous mode [ 291.771947][ T9649] device macvlan1 left promiscuous mode [ 291.777915][ T9649] device ipvlan0 left promiscuous mode [ 291.783902][ T9649] device ipvlan1 left promiscuous mode [ 291.790344][ T9649] device macvtap0 left promiscuous mode [ 291.796468][ T9649] device macsec0 left promiscuous mode [ 291.804860][ T9649] device geneve0 left promiscuous mode [ 291.810911][ T9649] device geneve1 left promiscuous mode [ 291.817055][ T9649] device netdevsim0 left promiscuous mode [ 291.823242][ T9649] device netdevsim1 left promiscuous mode [ 291.829297][ T9649] device netdevsim2 left promiscuous mode [ 291.835575][ T9649] device netdevsim3 left promiscuous mode [ 291.845060][ T9649] device wlan0 left promiscuous mode [ 291.850492][ T9649] device wlan1 left promiscuous mode [ 291.866574][ T9649] device bridge1 left promiscuous mode [ 291.872250][ T9649] device bond1 left promiscuous mode [ 291.894959][ T9649] device bridge2 left promiscuous mode [ 291.900678][ T9649] device vlan2 left promiscuous mode [ 291.920178][ T9649] device vlan3 left promiscuous mode [ 291.931294][ T9679] loop5: detected capacity change from 0 to 32768 [ 291.938830][ T9649] device bridge0.257 left promiscuous mode [ 291.950649][ T9649] device bridge0 left promiscuous mode [ 291.987234][ T9649] device vlan4 left promiscuous mode [ 292.126300][ T9679] rtl2832: probe of 0-0001 failed with error -5 [ 292.134147][ T9679] i2c i2c-0: new_device: Instantiated device rtl2832 at 0x01 [ 292.361447][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 292.786079][ T9696] loop5: detected capacity change from 0 to 40427 [ 292.841222][ T9696] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 292.900079][ T9696] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 293.017917][ T9696] F2FS-fs (loop5): Found nat_bits in checkpoint [ 293.031738][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 293.272442][ T9696] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 293.320848][ T9696] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 293.527036][ T9743] tipc: Enabling of bearer rejected, failed to enable media [ 294.144743][ C1] net_ratelimit: 27 callbacks suppressed [ 294.678067][ T9766] UBIFS error (pid: 9766): cannot open "ubi0_0", error -19 [ 294.703963][ T9768] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 294.723730][ T9766] UBIFS error (pid: 9766): cannot open "ubi0", error -19 [ 294.739447][ T9766] UBIFS error (pid: 9766): cannot open "ubi:0", error -19 [ 294.806686][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1706'. [ 295.976077][ T9806] overlayfs: failed to clone upperpath [ 297.916119][ T9847] netlink: 'syz.1.1741': attribute type 2 has an invalid length. [ 298.214742][ T4199] Bluetooth: Wrong link type (-22) [ 298.494767][ T4228] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 298.744824][ T4228] usb 6-1: Using ep0 maxpacket: 16 [ 298.895197][ T4228] usb 6-1: config 0 has an invalid interface number: 105 but max is -1 [ 298.903609][ T4228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.934792][ T4228] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 298.943724][ T4228] usb 6-1: config 0 has no interface number 0 [ 298.964868][ T4228] usb 6-1: config 0 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.001100][ T4228] usb 6-1: config 0 interface 105 has no altsetting 0 [ 299.185375][ T4228] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 299.194573][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 299.254758][ T4228] usb 6-1: Product: syz [ 299.259100][ T4228] usb 6-1: Manufacturer: syz [ 299.259122][ T4228] usb 6-1: SerialNumber: syz [ 299.324013][ T9878] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562067975) [ 299.344877][ C1] net_ratelimit: 34 callbacks suppressed [ 299.358767][ T4228] usb 6-1: config 0 descriptor?? [ 299.434043][ T9878] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 299.724645][ T9855] kvm_msr_ignored_check: 51 callbacks suppressed [ 299.823967][ T1111] usb 6-1: USB disconnect, device number 13 [ 299.897835][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 300.980390][ T9922] jffs2: notice: (9922) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 301.444378][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1775'. [ 303.067187][ T9979] overlayfs: failed to clone upperpath [ 303.106955][ T9981] 9pnet_virtio: no channels available for device syz [ 303.404596][ T26] audit: type=1326 audit(1790174717.541:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1796" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15288159 code=0x7fc00000 [ 303.437300][ T26] audit: type=1326 audit(1790174717.581:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1796" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fbd15288159 code=0x7fc00000 [ 303.478132][ T26] audit: type=1326 audit(1790174717.611:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9991 comm="syz.3.1796" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15288159 code=0x7fc00000 [ 303.542237][ T4199] Bluetooth: hci0: unexpected event for opcode 0x041b [ 304.544734][ C1] net_ratelimit: 26 callbacks suppressed [ 305.607955][T10022] loop5: detected capacity change from 0 to 2048 [ 305.746725][T10027] ffs_data_put(): freeing [ 305.875494][T10022] UDF-fs: warning (device loop5): udf_fill_super: No fileset found [ 307.580137][T10078] overlayfs: failed to clone upperpath [ 308.214478][T10050] loop5: detected capacity change from 0 to 32768 [ 308.368757][T10050] XFS (loop5): Mounting V5 Filesystem [ 308.614103][T10050] XFS (loop5): Ending clean mount [ 308.789535][ T5155] XFS (loop5): Unmounting Filesystem [ 308.918618][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1848'. [ 309.744719][ C1] net_ratelimit: 31 callbacks suppressed [ 310.008274][T10126] tipc: Resetting bearer [ 310.115792][T10126] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.125003][T10126] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.133888][T10126] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.142805][T10126] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.734911][ T4887] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 311.095040][ T4887] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.119691][ T4887] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.132322][ T4887] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.141995][ T4887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.185547][T10138] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 311.267366][T10162] overlayfs: failed to clone upperpath [ 312.355243][T10133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.426832][T10133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.226433][T10133] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.235614][T10133] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.244508][T10133] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.255759][T10133] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.839902][ T4228] usb 6-1: USB disconnect, device number 14 [ 315.024929][ C1] net_ratelimit: 27 callbacks suppressed [ 315.507934][T10186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.720207][T10186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.587981][T10186] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.607051][T10186] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.627470][T10186] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.644781][T10186] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.904494][T10186] device bond1 left promiscuous mode [ 316.910684][T10186] device ipip0 left promiscuous mode [ 316.953679][T10186] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.966731][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.973192][T10186] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.982140][T10186] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.991091][T10186] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.115548][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 317.183550][T10204] netlink: 'syz.5.1878': attribute type 1 has an invalid length. [ 317.616787][T10249] netlink: 'syz.6.1890': attribute type 1 has an invalid length. [ 317.790918][T10249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.083566][T10257] syz.5.1892 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 318.293269][T10249] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.357928][T10249] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.398654][T10249] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.486539][T10249] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.584063][T10249] bond2: (slave geneve2): making interface the new active one [ 318.711536][T10249] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 318.770092][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 318.812753][T10274] loop5: detected capacity change from 0 to 512 [ 318.899581][T10249] syz.6.1890 (10249) used greatest stack depth: 19376 bytes left [ 318.924371][T10274] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 319.071091][T10274] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1898: bg 0: block 104: invalid block bitmap [ 319.241764][T10274] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 319.266965][T10274] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1898: invalid indirect mapped block 1 (level 1) [ 319.350865][T10274] EXT4-fs (loop5): 1 truncate cleaned up [ 319.405033][T10274] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 320.295351][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1907'. [ 320.401713][T10303] device ip6gre1 entered promiscuous mode [ 320.464717][ C1] net_ratelimit: 32 callbacks suppressed [ 320.518677][ T4229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 320.535451][ T4229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 320.544959][ T1111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.034927][ T4229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.520982][ T1111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.235782][T10347] netlink: 64467 bytes leftover after parsing attributes in process `syz.6.1927'. [ 322.782979][T10368] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.791973][T10368] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.801051][T10368] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.809856][T10368] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.781535][T10401] bridge0: port 3(vlan5) entered blocking state [ 323.788118][T10401] bridge0: port 3(vlan5) entered disabled state [ 323.796601][T10401] device vlan5 entered promiscuous mode [ 323.845476][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.891771][T10401] device bridge_slave_1 left promiscuous mode [ 323.912667][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.944022][T10401] bond0: (slave bond_slave_0): Releasing backup interface [ 323.981233][T10401] bond0: (slave bond_slave_1): Releasing backup interface [ 324.023078][T10401] team0: Port device team_slave_0 removed [ 324.048836][T10401] team0: Port device team_slave_1 removed [ 324.124640][T10401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.154536][T10401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.204550][T10401] device vlan5 left promiscuous mode [ 324.227689][T10401] device bridge_slave_0 left promiscuous mode [ 324.247725][T10401] bridge0: port 3(vlan5) entered disabled state [ 324.536896][ T26] audit: type=1804 audit(1790174738.681:17): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1954" name=2020736C20206C6F63616C5F616464726573732072656D5F6164647265737320202073742074785F71756575652072785F717565756520747220746D2D3E7768656E20726574726E736D74202020756964202074696D656F757420696E6F646520202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020200A dev="ramfs" ino=52121 res=1 errno=0 [ 324.784991][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.824724][ C1] net_ratelimit: 12 callbacks suppressed [ 326.088502][T10486] ip_tables: iptables: counters copy to user failed while replacing table [ 326.592072][T10465] loop5: detected capacity change from 0 to 40427 [ 326.685581][T10465] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 326.693392][T10465] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 326.832995][T10465] F2FS-fs (loop5): invalid crc value [ 326.887236][T10465] F2FS-fs (loop5): Found nat_bits in checkpoint [ 327.249608][T10465] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 327.282794][T10465] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 328.523976][ T26] audit: type=1804 audit(1790174742.661:18): pid=10579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1992" name="/newroot/260/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=25827 res=1 errno=0 [ 328.640530][ T26] audit: type=1804 audit(1790174742.781:19): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2010" name="bus" dev="ramfs" ino=53343 res=1 errno=0 [ 329.680007][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'. [ 329.785579][T10598] ceph: No mds server is up or the cluster is laggy [ 330.843605][T10689] FAULT_INJECTION: forcing a failure. [ 330.843605][T10689] name failslab, interval 1, probability 0, space 0, times 0 [ 330.901414][T10689] CPU: 1 PID: 10689 Comm: syz.5.2051 Not tainted syzkaller #0 [ 330.908939][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.919024][T10689] Call Trace: [ 330.922329][T10689] [ 330.925316][T10689] dump_stack_lvl+0x188/0x250 [ 330.930025][T10689] ? show_regs_print_info+0x20/0x20 [ 330.935246][T10689] ? load_image+0x410/0x410 [ 330.939803][T10689] ? __lock_acquire+0x7b50/0x7b50 [ 330.944859][T10689] ? memset+0x1e/0x40 [ 330.948872][T10689] ? lockdep_init_map_type+0x98/0x900 [ 330.954290][T10689] should_fail+0x383/0x4b0 [ 330.958790][T10689] should_failslab+0x5/0x20 [ 330.963323][T10689] slab_pre_alloc_hook+0x51/0xc0 [ 330.968293][T10689] __kmalloc_node+0x6d/0x3a0 [ 330.972914][T10689] ? mempool_init_node+0x12b/0x480 [ 330.978052][T10689] ? __init_waitqueue_head+0xa4/0x140 [ 330.983462][T10689] mempool_init_node+0x12b/0x480 [ 330.988440][T10689] ? msgpool_alloc+0x1b0/0x1b0 [ 330.993244][T10689] ? msgpool_alloc+0x1b0/0x1b0 [ 330.998041][T10689] ? ceph_msgpool_init+0x180/0x180 [ 331.003187][T10689] mempool_create+0x7d/0xc0 [ 331.007714][T10689] ceph_msgpool_init+0xa3/0x180 [ 331.012609][T10689] ceph_osdc_init+0x52c/0x8a0 [ 331.017328][T10689] ceph_create_client+0x242/0x300 [ 331.022404][T10689] ceph_get_tree+0xf6/0x1290 [ 331.027025][T10689] ? bpf_lsm_capable+0x5/0x10 [ 331.031728][T10689] ? security_capable+0x85/0xb0 [ 331.036622][T10689] vfs_get_tree+0x88/0x270 [ 331.041063][T10689] vfs_fsconfig_locked+0x22f/0x400 [ 331.046207][T10689] __se_sys_fsconfig+0x69e/0x7e0 [ 331.046296][T10689] ? __x64_sys_fsconfig+0xc0/0xc0 [ 331.046331][ C0] net_ratelimit: 11 callbacks suppressed [ 331.046332][T10689] ? lockdep_hardirqs_on+0x94/0x140 [ 331.046357][T10689] ? __x64_sys_fsconfig+0x1c/0xc0 [ 331.046384][T10689] do_syscall_64+0x4c/0xa0 [ 331.046403][T10689] ? clear_bhb_loop+0x30/0x80 [ 331.046425][T10689] ? clear_bhb_loop+0x30/0x80 [ 331.046449][T10689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.046473][T10689] RIP: 0033:0x7f6186ae6159 [ 331.046494][T10689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.046515][T10689] RSP: 002b:00007f6184d3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 331.046539][T10689] RAX: ffffffffffffffda RBX: 00007f6186d6dfa0 RCX: 00007f6186ae6159 [ 331.046557][T10689] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 331.046570][T10689] RBP: 00007f6186b7d06b R08: 0000000000000000 R09: 0000000000000000 [ 331.046586][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.046600][T10689] R13: 00007f6186d6e038 R14: 00007f6186d6dfa0 R15: 00007ffc02e54478 [ 331.046631][T10689] [ 331.854065][T10699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2057'. [ 332.607479][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2070'. [ 332.777334][T10736] : renamed from veth0_to_bond [ 332.871470][T10736] device  entered promiscuous mode [ 332.944861][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.050067][T10746] tipc: Enabled bearer , priority 0 [ 333.116326][T10744] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.213057][T10744] device bridge_slave_0 left promiscuous mode [ 333.220232][T10744] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.472576][T10789] netem: change failed [ 334.896592][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2094'. [ 334.996486][T10809] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.384713][ C1] net_ratelimit: 13 callbacks suppressed [ 337.024048][T10873] ceph: No mds server is up or the cluster is laggy [ 339.802646][T10955] loop5: detected capacity change from 0 to 512 [ 339.952341][T10955] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2147: invalid indirect mapped block 4294967295 (level 1) [ 339.974588][T10955] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2147: invalid indirect mapped block 4294967295 (level 1) [ 339.990286][T10955] EXT4-fs (loop5): 2 truncates cleaned up [ 339.996191][T10955] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 340.460079][T10972] overlayfs: failed to clone upperpath [ 340.758969][T10979] mmap: syz.1.2152 (10979): VmData 45850624 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 340.920368][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.013503][T10981] device bridge_slave_0 left promiscuous mode [ 341.054560][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.561325][T11002] overlayfs: failed to clone upperpath [ 341.744734][ C1] net_ratelimit: 14 callbacks suppressed [ 341.823426][T11006] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.832469][T11006] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.841590][T11006] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.850355][T11006] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.162705][T11006] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.171904][T11006] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.180969][T11006] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.189918][T11006] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.453945][T11007] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.462935][T11007] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.471747][T11007] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.480781][T11007] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.529121][T11007] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.538192][T11007] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.547110][T11007] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.557616][T11007] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.860856][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'. [ 342.927011][T11023] 9pnet_virtio: no channels available for device syz [ 343.970161][T11056] 9pnet_virtio: no channels available for device syz [ 344.699396][T11085] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 344.792560][T11058] ceph: No mds server is up or the cluster is laggy [ 345.426671][T11108] jffs2: notice: (11108) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 345.490585][T11113] 9pnet_virtio: no channels available for device syz [ 345.744908][ T27] INFO: task getty:3942 blocked for more than 143 seconds. [ 345.753256][ T27] Not tainted syzkaller #0 [ 345.761835][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 345.772735][ T27] task:getty state:D stack:22288 pid: 3942 ppid: 1 flags:0x00004002 [ 345.782930][ T27] Call Trace: [ 345.785952][ T9] nf_conntrack: new packet for ffff88802a4fe000 [ 345.786302][ T9] nf_nat: Already setup manip DST for ct ffff88802a4fe000 (status bits 0x188) [ 345.786330][ T9] nf_nat: Already setup manip SRC for ct ffff88802a4fe000 (status bits 0x188) [ 345.796388][ C1] virtqueue callback for ffff88814815f200 (ffffffff85491a80) [ 345.802091][ T27] [ 345.812322][ C1] No more buffers in queue [ 345.819038][ T27] __schedule+0x11c3/0x4350 [ 345.821052][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 345.825597][ T27] ? __lock_acquire+0x13dc/0x7b50 [ 345.830024][ C1] No more buffers in queue [ 345.830130][ C1] tcp_in_window: START [ 345.836694][ T27] ? trace_pelt_se_tp+0x39/0x100 [ 345.840901][ C1] tcp_in_window: [ 345.840914][ C1] seq=571089497 ack=1901175983+(0) sack=1901175983+(0) win=24567 end=571089498 [ 345.845468][ T27] ? release_firmware_map_entry+0x190/0x190 [ 345.849443][ C1] tcp_in_window: sender end=571089497 maxend=574234329 maxwin=3144576 scale=7 receiver end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 [ 345.854488][ T27] ? verify_lock_unused+0x140/0x140 [ 345.858069][ C1] tcp_in_window: [ 345.858080][ C1] seq=571089497 ack=1901175983+(0) sack=1901175983+(0) win=24567 end=571089498 [ 345.858105][ C1] tcp_in_window: sender end=571089497 maxend=574234329 maxwin=3144576 scale=7 receiver end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 [ 345.858146][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 345.858163][ C1] tcp_in_window: res=1 sender end=571089498 maxend=574234329 maxwin=3144576 receiver end=1901175983 maxend=1904320559 maxwin=3144832 [ 345.858188][ C1] tcp_conntracks: [ 345.858197][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 345.950658][ T27] schedule+0x11b/0x1e0 [ 345.954960][ T27] schedule_timeout+0xbd/0x2d0 [ 345.959821][ T27] ? console_conditional_schedule+0x40/0x40 [ 345.965896][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 345.971977][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 345.977436][ T27] ? lock_chain_count+0x20/0x20 [ 345.982406][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 345.988210][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 345.993585][ T27] do_wait_for_common+0x295/0x460 [ 345.998767][ T27] ? console_conditional_schedule+0x40/0x40 [ 346.005085][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 346.011805][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 346.016069][ C1] virtqueue callback for ffff88814815f200 (ffffffff85491a80) [ 346.017145][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 346.029911][ T27] ? start_flush_work+0x784/0x830 [ 346.035046][ C0] virtqueue callback for ffff88801e607900 (ffffffff8444ab50) [ 346.035102][ C0] virtqueue interrupt with no work for ffff88801e607800 [ 346.035115][ C0] virtqueue interrupt with no work for ffff88801e607700 [ 346.056921][ T4503] Added buffer head 0 to ffff88801e607900 [ 346.063645][ T27] wait_for_completion+0x48/0x60 [ 346.069126][ T27] __flush_work+0x15a/0x210 [ 346.073780][ T27] ? lock_chain_count+0x20/0x20 [ 346.078809][ T27] ? flush_work+0x20/0x20 [ 346.083258][ T27] ? try_to_grab_pending+0xfb/0x820 [ 346.088602][ T27] ? start_flush_work+0x830/0x830 [ 346.094152][ T27] ? lock_chain_count+0x20/0x20 [ 346.099497][ T27] ? trace_percpu_free_percpu+0x81/0x1a0 [ 346.105271][ T27] ? __cancel_work_timer+0x36a/0x560 [ 346.110672][ T27] __cancel_work_timer+0x3f4/0x560 [ 346.115967][ T27] ? cancel_work_sync+0x20/0x20 [ 346.120971][ T27] hci_unregister_dev+0x163/0x590 [ 346.126355][ T27] hci_uart_tty_close+0x268/0x330 [ 346.131488][ T27] tty_ldisc_reinit+0xe4/0x460 [ 346.136431][ T27] tty_ldisc_hangup+0x360/0x4a0 [ 346.141381][ T27] __tty_hangup+0x44e/0x670 [ 346.146024][ T27] disassociate_ctty+0x38d/0x860 [ 346.149939][ C1] nf_conntrack: new packet for ffff888066b6c780 [ 346.151118][ T27] do_exit+0x5f9/0x2110 [ 346.157271][ C1] nf_nat: Already setup manip DST for ct ffff888066b6c780 (status bits 0x188) [ 346.157319][ C1] nf_nat: Already setup manip SRC for ct ffff888066b6c780 (status bits 0x188) [ 346.163912][ C1] nf_conntrack: normal packet for ffff888075da8300 [ 346.173355][ T27] ? put_task_struct+0x80/0x80 [ 346.179488][ C1] tcp_in_window: START [ 346.179501][ C1] tcp_in_window: [ 346.186168][ T27] ? lock_chain_count+0x20/0x20 [ 346.190801][ C1] seq=1901175983 ack=571089498+(0) sack=571089498+(0) win=24569 end=1901175983 [ 346.190828][ C1] tcp_in_window: sender end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 receiver end=571089498 maxend=574234329 maxwin=3144576 scale=7 [ 346.196996][ T27] do_group_exit+0x12c/0x2f0 [ 346.198568][ C1] tcp_in_window: [ 346.198582][ C1] seq=1901175983 ack=571089498+(0) sack=571089498+(0) win=24569 end=1901175983 [ 346.203608][ T27] __x64_sys_exit_group+0x3b/0x40 [ 346.212447][ C1] tcp_in_window: sender end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 receiver end=571089498 maxend=574234329 maxwin=3144576 scale=7 [ 346.212479][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 346.212500][ C1] tcp_in_window: res=1 sender end=1901175983 maxend=1904320559 maxwin=3144832 receiver end=571089498 maxend=574234330 maxwin=3144576 [ 346.227117][ T27] do_syscall_64+0x4c/0xa0 [ 346.231627][ C1] tcp_conntracks: [ 346.231639][ C1] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 346.231925][ C1] No more buffers in queue [ 346.235729][ T27] ? clear_bhb_loop+0x30/0x80 [ 346.244937][ C1] virtqueue callback for ffff88814815f200 (ffffffff85491a80) [ 346.244967][ C1] eth0: xmit ffff88802a26cc80 42:01:0a:80:00:01 [ 346.250094][ T27] ? clear_bhb_loop+0x30/0x80 [ 346.264532][ C1] Added buffer head 5 to ffff88814815f300 [ 346.264599][ C1] virtqueue callback for ffff88814815f300 (ffffffff85491b70) [ 346.270045][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 346.284113][ C1] Sent skb ffff88802a26cc80 [ 346.290736][ T27] RIP: 0033:0x7fca463696c5 [ 346.292010][ C1] No more buffers in queue [ 346.292070][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 346.298701][ T27] RSP: 002b:00007ffd2589e3a8 EFLAGS: 00000206 [ 346.301853][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 346.306695][ T27] ORIG_RAX: 00000000000000e7 [ 346.313945][ C1] No more buffers in queue [ 346.314041][ C1] tcp_in_window: START [ 346.321214][ T27] RAX: ffffffffffffffda RBX: 00007fca4646afe8 RCX: 00007fca463696c5 [ 346.324931][ C1] tcp_in_window: [ 346.324943][ C1] seq=571089497 ack=1901175983+(0) sack=1901175983+(0) win=24567 end=571089498 [ 346.330749][ T27] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 346.338069][ C1] tcp_in_window: sender end=571089498 maxend=574234330 maxwin=3144576 scale=7 receiver end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 [ 346.338099][ C1] tcp_in_window: [ 346.338108][ C1] seq=571089497 ack=1901175983+(0) sack=1901175983+(0) win=24567 end=571089498 [ 346.344123][ T27] RBP: 0000000000000001 R08: 00007ffd2589e338 R09: 0000000000000000 [ 346.348525][ C1] tcp_in_window: sender end=571089498 maxend=574234330 maxwin=3144576 scale=7 receiver end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 [ 346.348557][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 346.348575][ C1] tcp_in_window: res=1 sender end=571089498 maxend=574234330 maxwin=3144576 receiver end=1901175983 maxend=1904320559 maxwin=3144832 [ 346.348603][ C1] tcp_conntracks: [ 346.348612][ C1] syn=0 ack=1 fin=1 rst=0 old=5 new=6 [ 346.348647][ C1] tcp_in_window: START [ 346.348656][ C1] tcp_in_window: [ 346.348666][ C1] seq=571089497 ack=1901175983+(0) sack=1901175983+(0) win=24567 end=571089498 [ 346.348690][ C1] tcp_in_window: sender end=571089498 maxend=574234330 maxwin=3144576 scale=7 receiver end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 [ 346.348720][ C1] tcp_in_window: [ 346.348729][ C1] seq=571089497 ack=1901175983+(0) sack=1901175983+(0) win=24567 end=571089498 [ 346.348753][ C1] tcp_in_window: sender end=571089498 maxend=574234330 maxwin=3144576 scale=7 receiver end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 [ 346.348782][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 346.348800][ C1] tcp_in_window: res=1 sender end=571089498 maxend=574234330 maxwin=3144576 receiver end=1901175983 maxend=1904320559 maxwin=3144832 [ 346.353296][ T27] R10: 00007ffd2589e1d0 R11: 0000000000000206 R12: 0000000000000000 [ 346.357657][ C1] tcp_conntracks: [ 346.357668][ C1] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 346.363664][ T27] R13: 0000000000000001 R14: 00007fca46469680 R15: 00007fca4646b000 [ 346.369906][ C1] nf_conntrack: normal packet for ffff888075da8300 [ 346.375491][ T27] [ 346.375623][ T27] [ 346.375623][ T27] Showing all locks held in the system: [ 346.380727][ C1] tcp_in_window: START [ 346.380739][ C1] tcp_in_window: [ 346.380748][ C1] seq=1901175983 ack=571089498+(0) sack=571089498+(0) win=24569 end=1901175983 [ 346.385896][ C0] wireguard: wg2: Handshake for peer 42 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 6) [ 346.389271][ C1] tcp_in_window: sender end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 receiver end=571089498 maxend=574234330 maxwin=3144576 scale=7 [ 346.401368][ T27] 9 locks held by ksoftirqd/1/20: [ 346.409879][ C1] tcp_in_window: [ 346.409890][ C1] seq=1901175983 ack=571089498+(0) sack=571089498+(0) win=24569 end=1901175983 [ 346.409913][ C1] tcp_in_window: sender end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 receiver end=571089498 maxend=574234330 maxwin=3144576 scale=7 [ 346.409939][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 346.409955][ C1] tcp_in_window: res=1 sender end=1901175983 maxend=1904320559 maxwin=3144832 receiver end=571089498 maxend=574234330 maxwin=3144576 [ 346.409987][ C1] tcp_conntracks: [ 346.418496][ T27] 1 lock held by khungtaskd/27: [ 346.432558][ C1] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 346.432674][ C1] No more buffers in queue [ 346.432688][ C1] eth0: xmit ffff8880604c7140 42:01:0a:80:00:01 [ 346.432713][ C1] Added buffer head 5 to ffff88814815f300 [ 346.432743][ C1] virtqueue callback for ffff88814815f300 (ffffffff85491b70) [ 346.432871][ C1] nf_conntrack: normal packet for ffff888075da8300 [ 346.432890][ C1] tcp_in_window: START [ 346.436730][ T27] #0: [ 346.445527][ C1] tcp_in_window: [ 346.445539][ C1] seq=1901175983 ack=571089498+(0) sack=571089498+(0) win=24569 end=1901175983 [ 346.445562][ C1] tcp_in_window: sender end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 receiver end=571089498 maxend=574234330 maxwin=3144576 scale=7 [ 346.445590][ C1] tcp_in_window: [ 346.445599][ C1] seq=1901175983 ack=571089498+(0) sack=571089498+(0) win=24569 end=1901175983 [ 346.453705][ T27] ffffffff8c31ef60 [ 346.468126][ C1] tcp_in_window: sender end=1901175983 maxend=1904320559 maxwin=3144832 scale=7 receiver end=571089498 maxend=574234330 maxwin=3144576 scale=7 [ 346.468155][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 346.468172][ C1] tcp_in_window: res=1 sender end=1901175983 maxend=1904320559 maxwin=3144832 receiver end=571089498 maxend=574234330 maxwin=3144576 [ 346.468198][ C1] tcp_conntracks: [ 346.468207][ C1] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 346.468307][ C1] Sent skb ffff8880604c7140 [ 346.468350][ C1] No more buffers in queue [ 346.468361][ C1] eth0: xmit ffff8880604c78c0 42:01:0a:80:00:01 [ 346.468384][ C1] Added buffer head 5 to ffff88814815f300 [ 346.468415][ C1] virtqueue callback for ffff88814815f300 (ffffffff85491b70) [ 346.470581][ C1] Sent skb ffff8880604c78c0 [ 346.477968][ T27] ( [ 346.487467][ C1] No more buffers in queue [ 346.579746][ T3519] sd 0:0:1:0: cmd ffff8880239e9528 CDB: 0x2a [ 346.586157][ T27] rcu_read_lock [ 346.586422][ T3519] Added buffer head 8 to ffff88802119b800 [ 346.591794][ T27] ){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 346.591871][ T27] 3 locks held by jbd2/sda1-8/3519: [ 346.602194][ C1] virtqueue callback for ffff88802119b800 (ffffffff85068310) [ 346.608250][ T27] 1 lock held by klogd/3546: [ 346.609947][ C1] sd 0:0:1:0: cmd ffff8880239e9528 response 0 status 0x0 sense_len 0 [ 346.617724][ T27] 2 locks held by getty/3942: [ 346.617736][ T27] #0: ffff88814d8b41c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: __tty_hangup+0xc0/0x670 [ 346.617790][ T27] #1: ffff88814d8b4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x68/0xb0 [ 346.617839][ T27] 3 locks held by kworker/u5:4/4198: [ 346.617849][ T27] #0: [ 346.622356][ C1] No more buffers in queue [ 346.673100][T11118] hub 7-0:1.0: hub_suspend [ 346.714377][ T27] ffff888147714938 [ 346.890799][ C1] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 346.895234][ T27] ( [ 346.898965][ C1] kcov: kcov_start: t = ffff88801878bb80, size = 262144, area = ffffc900022d9000 [ 346.899182][ C1] kcov: kcov_start: t = ffff88801878bb80, size = 524288, area = ffffc9000e0aa000 [ 346.902498][ T27] (wq_completion)hci5){+.+.}-{0:0} [ 346.908555][ C1] kcov: kcov_move_area: ffffc900170c5000 1048576 <= ffffc900022d9000 19 [ 346.910074][ C1] No more buffers in queue [ 346.916393][ T27] , at: process_one_work+0x75c/0xff0 [ 346.920294][ C1] No more buffers in queue [ 346.920871][ C1] No more buffers in queue [ 346.928034][ C0] net_ratelimit: 12 callbacks suppressed [ 346.928072][ C0] wireguard: wg1: Receiving keepalive packet from peer 33 ([::1]:20001/0%0) [ 346.937671][T11113] kcov: kcov_task_exit: t = ffff88807c02d940, kcov->t = ffff88807c02d940 [ 346.955122][T11118] usb usb7: bus auto-suspend, wakeup 1 [ 346.969375][ T1092] sd 0:0:1:0: cmd ffff8880213d1928 CDB: 0x35 [ 346.969406][ T1092] Added buffer head 8 to ffff88802119b800 [ 346.969507][ C1] virtqueue callback for ffff88802119b800 (ffffffff85068310) [ 346.969531][ C1] sd 0:0:1:0: cmd ffff8880213d1928 response 0 status 0x0 sense_len 0 [ 346.969554][ C1] No more buffers in queue [ 346.972249][ T27] #1: [ 347.016923][T11118] usb usb7: dummy_bus_suspend [ 347.021324][T11115] kcov: kcov_task_exit: t = ffff88807c029dc0, kcov->t = ffff88807c029dc0 [ 347.030945][ C0] virtqueue callback for ffff88801e607900 (ffffffff8444ab50) [ 347.063020][ T27] ffffc90002f8fd00 [ 347.069356][ C0] virtqueue interrupt with no work for ffff88801e607800 [ 347.089752][ T27] ( [ 347.093912][ C0] virtqueue interrupt with no work for ffff88801e607700 [ 347.094195][ C0] wireguard: wg0: Handshake for peer 38 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 347.118247][ T27] (work_completion)(&hdev->power_on) [ 347.124253][ T4503] Added buffer head 0 to ffff88801e607900 [ 347.130079][ T155] wireguard: wg0: Sending handshake initiation to peer 38 ([::1]:20003/0%0) [ 347.185981][ T27] ){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 347.192557][ T27] #2: ffff888019ff93f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0xa4/0x12a0 [ 347.202740][ T27] 2 locks held by syz.3.2168/11010: [ 347.208263][ T27] 2 locks held by syz.3.2194/11098: [ 347.213547][T11119] kcov: kcov_task_exit: t = ffff88804758bb80, kcov->t = ffff88804758bb80 [ 347.222611][ T27] 1 lock held by cmp/11125: [ 347.227471][ T27] [ 347.229899][ T27] ============================================= [ 347.229899][ T27] [ 347.239113][ T155] nf_conntrack: new packet for ffff888075da8c00 [ 347.246287][ T155] nf_nat: Already setup manip DST for ct ffff888075da8c00 (status bits 0x188) [ 347.255221][ T155] nf_nat: Already setup manip SRC for ct ffff888075da8c00 (status bits 0x188) [ 347.269147][T11122] kcov: kcov_task_exit: t = ffff888047589dc0, kcov->t = ffff888047589dc0 [ 347.279050][ T27] NMI backtrace for cpu 1 [ 347.283509][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 347.290759][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.300999][ T27] Call Trace: [ 347.304321][ T27] [ 347.307282][ T27] dump_stack_lvl+0x188/0x250 [ 347.312025][ T27] ? show_regs_print_info+0x20/0x20 [ 347.317264][ T27] ? load_image+0x410/0x410 [ 347.321811][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 347.327236][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 347.332402][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 347.337386][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 347.343580][ T27] ? _printk+0xda/0x130 [ 347.347770][ T27] ? load_image+0x410/0x410 [ 347.352310][ T27] ? load_image+0x410/0x410 [ 347.356847][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 347.362963][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 347.368988][ T27] watchdog+0xe1b/0xe60 [ 347.373194][ T27] kthread+0x42e/0x520 [ 347.377339][ T27] ? hungtask_pm_notify+0x40/0x40 [ 347.382425][ T27] ? kthread_blkcg+0xd0/0xd0 [ 347.387048][ T27] ret_from_fork+0x1f/0x30 [ 347.391510][ T27] [ 347.394614][ T27] Sending NMI from CPU 1 to CPUs 0: [ 347.399886][ C0] NMI backtrace for cpu 0 [ 347.399898][ C0] CPU: 0 PID: 11010 Comm: syz.3.2168 Not tainted syzkaller #0 [ 347.399913][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.399922][ C0] RIP: 0010:preempt_count_add+0x3e/0x190 [ 347.399944][ C0] Code: 2f 96 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 eb 00 00 00 83 3d 52 27 dd 14 00 75 07 65 8b 05 91 17 b0 7e 65 01 3d 8a 17 b0 7e <48> c7 c0 80 7f 2f 96 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e6 00 [ 347.399960][ C0] RSP: 0018:ffffc9000339eec0 EFLAGS: 00000282 [ 347.399974][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffffff962f7f03 [ 347.399986][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 347.399995][ C0] RBP: ffffc9000339f050 R08: ffff88804a1216ef R09: 1ffff110094242dd [ 347.400007][ C0] R10: dffffc0000000000 R11: ffffed10094242de R12: ffffea0001128e00 [ 347.400019][ C0] R13: 0000000000001000 R14: dffffc0000000000 R15: dffffc0000000000 [ 347.400030][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 347.400043][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.400054][ C0] CR2: 00007f0918a5fe9c CR3: 00000000475c1000 CR4: 00000000003506f0 [ 347.400068][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 347.400076][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 347.400086][ C0] Call Trace: [ 347.400091][ C0] [ 347.400097][ C0] copy_page_from_iter_atomic+0xa4/0x14d0 [ 347.400123][ C0] ? pipe_zero+0x380/0x380 [ 347.400142][ C0] ? shmem_write_begin+0xcd/0x1a0 [ 347.400163][ C0] generic_perform_write+0x30b/0x550 [ 347.400179][ C0] ? atime_needs_update+0x770/0x770 [ 347.400203][ C0] ? grab_cache_page_write_begin+0xa0/0xa0 [ 347.400218][ C0] ? file_remove_privs+0x5d0/0x5d0 [ 347.400237][ C0] ? rwsem_write_trylock+0x135/0x1c0 [ 347.400255][ C0] ? clear_nonspinnable+0x60/0x60 [ 347.400273][ C0] __generic_file_write_iter+0x261/0x4e0 [ 347.400287][ C0] ? generic_write_checks+0x3be/0x460 [ 347.400307][ C0] generic_file_write_iter+0xa6/0x1b0 [ 347.400323][ C0] __kernel_write+0x522/0x980 [ 347.400341][ C0] ? vfs_read+0xd50/0xd50 [ 347.400361][ C0] ? get_dump_page+0xee/0x670 [ 347.400378][ C0] ? down_read_killable+0x1ce/0x340 [ 347.400396][ C0] __dump_emit+0x258/0x380 [ 347.400415][ C0] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 347.400431][ C0] ? dump_user_range+0x119/0x340 [ 347.400445][ C0] ? dump_emit+0x145/0x3d0 [ 347.400462][ C0] dump_user_range+0x84/0x340 [ 347.400479][ C0] elf_core_dump+0x2fe0/0x3530 [ 347.400505][ C0] ? load_elf_library+0x980/0x980 [ 347.400525][ C0] ? verify_lock_unused+0x140/0x140 [ 347.400545][ C0] ? dump_vma_snapshot+0xaf1/0xe40 [ 347.400576][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 347.400596][ C0] ? getname_kernel+0x142/0x2e0 [ 347.400615][ C0] do_coredump+0x14e8/0x2a40 [ 347.400639][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 347.400665][ C0] ? lock_chain_count+0x20/0x20 [ 347.400684][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 347.400700][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 347.400719][ C0] get_signal+0x531/0x12e0 [ 347.400747][ C0] arch_do_signal_or_restart+0xe6/0x12a0 [ 347.400768][ C0] ? _raw_spin_unlock+0x40/0x40 [ 347.400786][ C0] ? force_sig_info_to_task+0x318/0x3c0 [ 347.400806][ C0] ? get_sigframe_size+0x10/0x10 [ 347.400824][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 347.400847][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 347.400863][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 347.400878][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 347.400893][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 347.400910][ C0] exc_page_fault+0x88/0x100 [ 347.400927][ C0] asm_exc_page_fault+0x22/0x30 [ 347.400943][ C0] RIP: 0033:0x7fbd1513dbd7 [ 347.400956][ C0] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 347.400969][ C0] RSP: 002b:00007fbd134c1120 EFLAGS: 00010202 [ 347.400981][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbd15288159 [ 347.400990][ C0] RDX: 00007fbd134c1140 RSI: 00007fbd134c1270 RDI: 000000000000000b [ 347.401001][ C0] RBP: 00007fbd1531f06b R08: 0000000000000000 R09: 0000000000000000 [ 347.401010][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 347.401019][ C0] R13: 00007fbd15510038 R14: 00007fbd1550ffa0 R15: 00007ffea38e0e38 [ 347.401037][ C0] [ 347.621247][ C1] nf_conntrack: new packet for ffff888066b6c780 [ 347.635886][ T5155] send_to_group: group=ffff8881449a4000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88801ffd7190 data_type=1 dir=0000000000000000 cookie=0 [ 347.640579][ C1] nf_nat: Already setup manip DST for ct ffff888066b6c780 (status bits 0x188) [ 347.645033][ T5155] inotify_handle_inode_event: group=ffff8881449a4000 mark=ffff8880720b3d48 mask=8 [ 347.649806][ C1] nf_nat: Already setup manip SRC for ct ffff888066b6c780 (status bits 0x188) [ 347.654492][ T5155] fsnotify_insert_event: group=ffff8881449a4000 event=ffff888076f92a40 [ 347.667344][ C1] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 347.809194][ T155] bond2: (slave geneve2): Send learning packet: mac 82:a2:89:aa:b9:fe vlan 0 [ 347.814600][ C1] tcp_in_window: START [ 347.824121][ T155] nf_conntrack: new packet for ffff88802a4fed80 [ 347.830989][ C1] tcp_in_window: [ 347.831004][ C1] seq=0 ack=0+(0) sack=0+(0) win=1024 end=524 [ 347.831028][ C1] tcp_in_window: sender end=524 maxend=1548 maxwin=1024 scale=0 receiver end=0 maxend=1024 maxwin=1024 scale=0 [ 347.839461][ T155] nf_nat: Already setup manip DST for ct ffff88802a4fed80 (status bits 0x188) [ 347.842497][ C1] tcp_in_window: [ 347.848793][ T155] nf_nat: Already setup manip SRC for ct ffff88802a4fed80 (status bits 0x188) [ 347.863652][ C1] seq=0 ack=0+(0) sack=0+(0) win=1024 end=524 [ 347.863679][ C1] tcp_in_window: sender end=524 maxend=1548 maxwin=1024 scale=0 receiver end=0 maxend=1024 maxwin=1024 scale=0 [ 347.863705][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 347.882880][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 347.891259][ C1] tcp_in_window: res=1 sender end=524 maxend=1548 maxwin=1024 receiver end=0 maxend=1024 maxwin=1024 [ 347.899405][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 347.899426][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.899438][ T27] Call Trace: [ 347.899447][ T27] [ 347.899455][ T27] dump_stack_lvl+0x188/0x250 [ 347.907844][ C1] tcp_conntracks: [ 347.916538][ T27] ? show_regs_print_info+0x20/0x20 [ 347.916562][ T27] ? load_image+0x410/0x410 [ 347.920627][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 347.926884][ T27] panic+0x2f8/0x850 [ 347.926909][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 347.933788][ C1] wireguard: wg0: Handshake for peer 37 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 347.936597][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 347.936625][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 347.956827][ T3557] get_one_event: group=ffff8881449a4000 event=ffff888076f92a40 [ 347.957187][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 347.957222][ T27] watchdog+0xe5a/0xe60 [ 347.957249][ T27] kthread+0x42e/0x520 [ 347.961279][ T3557] fsnotify_remove_first_event: group=ffff8881449a4000 event=ffff888076f92a40 [ 347.970128][ T27] ? hungtask_pm_notify+0x40/0x40 [ 347.970150][ T27] ? kthread_blkcg+0xd0/0xd0 [ 347.970170][ T27] ret_from_fork+0x1f/0x30 [ 347.979692][ T154] wireguard: wg0: Sending handshake initiation to peer 37 ([::1]:20002/0%0) [ 347.987959][ T27] [ 347.988326][ T27] Kernel Offset: disabled [ 348.149575][ T27] Rebooting in 86400 seconds..