last executing test programs: 5m6.526631342s ago: executing program 4 (id=5): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 5m3.569451952s ago: executing program 5 (id=6): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x80, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4m50.340574568s ago: executing program 32 (id=5): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 4m48.193482713s ago: executing program 33 (id=6): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x80, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4m28.506501299s ago: executing program 1 (id=59): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) 4m25.797883055s ago: executing program 1 (id=61): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 4m18.898514485s ago: executing program 0 (id=69): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1802"], 0x0, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000240), 0x4) socket$xdp(0x2c, 0x3, 0x0) clock_adjtime(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 4m14.380530082s ago: executing program 1 (id=73): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) write(r2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"bcffffff", 0x0, 0x5, 0x1, 0x0, 0x0, '\x00', "00aa071e", "0300", "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000140)={0xa4a, 0x4e1bf1cf, 0x3, 0x1, 0x8000, 0x2, "4c1fb5dad047e5bdde79394a909a25bb", 0x4, 0x0, 0x6, 0x0, 0xe, 0x3, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, 0x0) io_uring_setup(0x6281, &(0x7f0000000080)) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_group_source_req(r5, 0x29, 0x3, &(0x7f00000001c0)={0x10001, {{0xa, 0x4e24, 0x9, @empty, 0x81}}, {{0xa, 0x4e22, 0x8, @loopback, 0x81}}}, 0x108) 4m14.150891804s ago: executing program 0 (id=75): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000b00)='./file0/../file0/file0/file0\x00', 0x400) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x6000, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x4, 0x40488060, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x40, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034320e42fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4e4b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f6260206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce7350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8001000, 0x0, 0xa000, 0x10000, 0x0, r6, 0x738}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000006680)="8e503ba12553ae35664093744598ff2ed98313cfeff69bbb1f3ba451bc98d27cf439225d75522ac543a153ac5284bf131a87e53d0b20f8dddcb2af841def3e560070344be18fcee4983553ba856738012b512e3dc760fb581a17e5622e0e22e22546476d6cc6d6d94d828a2fa22ec77a1cf082f5ca88f1f8976e8b6c3a7a537f8f50b432bf4df69c912bfcc539a65851f86b23f24e714e0643429ec1198ea1647316538a3ce23fad21e19e087c0dedc7aa6d5e4b0dcbfcbe22c857f5a848aef15126b9ecc810249cbbc82c8b6ba49e46b71cb79f6ef9449d0838b9130946398941a4c64f6e2d84118b60ed4ccfed8a26446032fecf87434e71b7989253f64feb6d2e1013673a9600b1915174e55ad78d1d666fb75c24142e44ceca89a18ca66b4b5e66ba953ca42fb6a36d4a3612a2948393f67a7d1d0957a8553c73855fd007abbb6c3d4bbc943f3b102bb2ea6f40e714516a3de91acc6e1468e9e7b66ee57815da23054153d9d5fca6bdb26ed8f7754d88154d46df2f2e4964ee5d7f47e9218d6877c3b232c945cddeef70b24e5c6c434fa30fd0a2ad1c348c3658494f7cfdfb6bb56b43f1d9b2d049c1166161c3232ada01f3c789b2d6958cdd9f044a654f8397d64cb928f4d57f0c4e9739afbf3afbf0e9f84d56a1aba6db7538d98404b7cdfa97f8770a6df4a13145c1d0cfb7ec0349b5639d9180eada54b2f8c12472fb379901e6d514fbfd6d41d2dd77eb42608a784fc016ae48fb126776b10be5c03f62ec90987e766d20d821a17c03e0d867f4aa3f4902fb803e8261833aa9397e107e6c100daa3d8b792bf4b5081ef56670762b5ae3f528836029ca332f44fcc5cf3750f39091985032afa8dd2e80b69cbffc29aa13fcdc0ff811a108794b4154ecaf70e58a9f70a573cf9d1040e23f5a04a873a583e4ab0fa5f77d620c60f0a45cdc789b849e9e8746528846bbbf8251a84f2aa97ccc3e49f4c9b6abf0248344e86a71486eba9e62ff5920bb80ceccc5813f068da0d5aa208c440b7889118d2f4e8baf22a84544f232d6a3a1aedf31d5fc22f0ece56ac611b1363ff35e5071342a0257d3f146dc3ea1cc795d2f06afeb1d6995e50eb2d2d21dc6c4377a2626dd9486446517d03a4a03c43ef2e255a92b775c198bfe92c21375599235aac33c69190bbbfaad76860d0c9e70ad53273460c370b06bdf94ee8bfc31c48609ff6de0d39f873ec11e8c2835f17b3f18891c8ae335a7074fb5a5c794007a327fbb2622e71d62e43f50a00cc59b7eeb3f8ceed5d87fa5eb62a7a8c74ec90b1096a0b24606bf14b1f13f78ea4ab522304c7ca1d7b8ae47b5859f6a0d9baf3b6ffd29a4fb6782732febcfa51446aa87691ac81bf891717fbf8e4deaccac63477d3bc7b8ed52e9b6ca3fd39eefee6a337c2ad76df9739e2fbff34bf36027be0cfbebfe5b2fd168d75b2fd64479e2faf85654c013955e04044a9b7bf8b3d42da91962796bfe6eb53fe29e36a7a7512a155c712ae561d885703cb26d72e6f1df3976cc665960f871f3110309ffb6b5a79e54057a7a286c62c11e973ef671e86051686f77992f985d729740f38fecf83e03a1fef542cd6b4cee48546f67873a9c682c4afe4a5beccfc64085c622c5a0b5a1f6355f938d16925cabe61426a837c48fd6ad790afe54448fb296a03322f3427e132e8c0623bd311af8a619c2d91415e851744941700f09a2d8471def9dbc448c6aefb4c664f8902c872cc7de9d26e8b300b55b1d08a80257095efef35d9b497487607a22bc95c68f39aeeae243e76ccd40dd1b7ccad6eb39b35d91d239b2b005c8bb6e50037ffb1253276e20384398a5e97ad705fcffd04c720539ddf80cf4e929e82e3fec3d7542e0b7495733eb5da29f6dff5a34ec88a71881f660a5bc9481e755fd3c5683e95ed97cc91ab0edf49afda477aea42bc436b364747d973d61be806e1e63b6982e42814a13c5adb3bd767ec724d2d654afb106198fba6b4c798f4b82f329c2b8055ac4d247da971e32eb4cb971c9ac99d18c0a216d48dd7dffd372e0cad9ce6f05b06e47842c2f53b7c987139c6ddac3446fdb163342f8ca8f5401db91d324a6b710f28dece5839d37760c2515d6ad815a746cd7ccd3a438a5d3f28ca331f6874dedbab107c64127a7590a2813c1287ca977807827d52df80a9c19bc7ef335791da1be53c89f6de8ee1f02f26069b786f22bfd23cd8366e3ca02c0b296d0966d7f8fdbc0ef06895c547224f1a01c92d5f43f81b35539469d1fd9cd76dbf8cdd21b479a6474578863c9906ce6b12d0dbf5a458dafc042fcabe64aeebeb70c0da9300ed22e5d2851c5e77b20f9da1cd26cd810e0b8f1ba17d7c819e8a8ad86aa5bc4eb64748b75ab4a85f05bb1dc542234ac175eced1fe8f3fbd86f1c7349a360f5af0244818df303dce6842ea7afa722be19cf162d671256e5659c77c5569d827b28dc44b7dbb7d9433bc9eff26edbff36cf796b8afb285393f2dab6bb9a3ed40dd065ba8a8ab62cb575e696b97a2853b1700835ae429b983a5bb88972e367f5996a21e9a3b00e943e15c1163fdee023e1cf6e8dc42655cb175590fb6b8c46148b37957c5026aa94e96cbb71bcf9e7899c489edd9b34ca2d3d0dbd29f135cb158652ded6c959820b26a5fb6e8f3a6cfb80bcfa52c36ae0a3868914bda36b5ac09d2ae6cfccff9859550cfc5c6c3b30cddf6a2130c0c563445ae10634f38c65a47aeb8c72a0f25a6747a6787e703e1723303dd6d5bd4303240cb6d4659ee32d80b92859327e882ec84d9bb2a6976d9c6fa450d5598c6af1c92fc4ed7614e3192a06e62e704278424e2e5d521ec4f2cbd87d9b8a65405e807f6247e3f9228e8a5c44e31c9de9247d1b8248ce71d34663cbfcce728c9f08628629fca3f334566118aeb86470886147d714d2dce240408fac3c971b851dd33cb7997e238a2362195ba4f0e83d5c1c5039328817f258d6645bcbc20512398a7a34e2288585b4dc626c6867f3af5a0f573492cdb04e5613bd95bcfe6a61541c3912b4e841b34db2820ed5aca226dcba496f9586b83ab44ed3b9f34cfd2397f36dc4f9811815b975a208b6cd163031296b289b7d202036bca9c4e862f6b1d6356c3c54d47de63e0d0b38e7b9e41e1b25d94fbd03853f786fcf2325020355469e52dd2cfc879e2758382f609173cb2c01775030d1d536af97f5bd0a4b71ad9bf3e5becfccd7dce72fa8882733d2c32cab1338ce67f301be74b1c51dbacff9bdc22868f3f16531cb86b7597aff03040a821c4f7cae2b5b92db792f327dce81e79ac83d4ca15aa248ddc2fad518ebd360c5ac8ff3636e15e8ff61501b1e5c6338847ff43c0d3ed38c87aa623c318c8facffb72fbad8bf4effdd2013dc60ad91f1f5a791905b572321ce0956ffded80e2152b0672875fe71923de673ce343a665d327560c5267223b6fa636ef188b94d4a42884721b4f2d51f90ff3e5145aab164fb56982648a7215601d23017b749c01b684082e250330d109af89bf5d20ca788fbd95fd8d1c128aad3306c4e1bd1c054def7b7ea1948e3c95826078991d234808f55c2314706c8177d7674b2378792afe66b2d65484b481b0e52d8b60e0980163fcf2fffa2cd81f4dbf57afd76fd4e71ec8a6604a697fcaf57e65bba50489f6f0c5b4c046a14303eac05700550ee10fa29d8f68a9eb02fa504b640865f7e2c21f1451ed7d75c90a4734ba64327bc3597b5aff23d0a8f1229f0539720bece2b980f85e11c5ecbf3a560e5dedc40e1260349ccbc647d4d9763b17a45fe1b63e5d16e1a49d55c0011e3ab898b64a6618682bd7bb7e8ed18dafa1b462f20f6aaf2d7c4777a6fb73aa7a1720d67a644f4f4b0bc3ff965e696fd3513979f2e72289dec447af56b240380cfa2a9ce38a808e961d26b6ee6810c75778e9d23a93b3f79b3b293f138f23ef2596b60ecd4afc2036debb7e14f61774d84c1325ee7b8f95dc80c12b001e32e894516473a82aa2c24b5ff7f8c3374e245f1b3ff2a8cf0cc33ecd4b9b7528c34cf54d77756ed3e1b74a0e66c9c1dd8e53c123872c084f70e8a04efe8a8c3527ba75f4d9ced8469229ad7453a1376cae90b155638696103216a07b02e93e3924c4a98d159ce8633b2c8bda44ef28f37ba5edf1e80184c9ac2c8b0db77096dbf2f866536ac4f5ee9eed4bb8dfe0dad4361e901450ba499c119aa1af2a1a7c527b09562a47d8260bd7647e29ee422432f063a84d195e9c843e6f6fa684dd044bd09b8cb3e7a976df68049f09caba37b69a595cea61667f2631e561be743309568b4c37fdaed8ebc628889bc3bf9c5a63bc74e9358a9c2228f51370eb483ee39e682cd4f56f15a16217904c6189ef50044e04f244da23d1c9f41a5209f4f485df4ad8d1922203d365eb11102d48c93c09b700e177aef00f8bf729c0406b89de32490fca998bd34f80c99be60601d4de10e9a86a5a22652eb9df948daa66529b6445cdde70ad125d06e41a3469216233a8b9eeb928f2d041eded321d518f0435ca377e90ae49e95793aabccf299c1f1a82ddec49b2b8732aecd1610d5f09cc5e509d4065c5cfb4edc55f6a15fbaf4dea24439ea95b63bae312ed90e47787000810f22ab9b6aa0622ab969fa30b724b24d82447d6a357468b2d1ec61a80ae680ff7b8b894158218b0e63f99103879f3c1dae33aedec60a1e755755604e33a6698cd0e378b0a0b04017278411f33eade9c4c0e3b7d0d6e62fdc3ebf5559310e0a2913d5aff1ce1bead51578b3879c0e25d96a7a150ba655c97875d864c3a6d5b595ff9dd9698857b3b0bab2d087bbf7f80f5a7225cdebf794ede16a61ca73201f311f87ef9cececb8fd07b2bf384a22a8ae988a5e91e6355e26ac923e78004968bf7f4ae3b319e61a422a43841831a51e2c41df8a118da5239c87b4b0aceb32854413d53e0228090babc167ed6600041390ce04e96c94c65c51fdc00e617e4ed870fe9ed2bbef84c1e1f3f796b2867b0f383b6e01ba2b82ecfced722ac5a7c092716d18b9b41674c342a1a6a7ef961893d451648cce5d0ccb4c180e0493a53f5453de43a6535c486acbfb9f480f3255f998831b684a468a88840e1e7e8a310ef296ce89bef65b7e54265c88bff204e48963cea9945608260e5de37b949acacc938e8e2de9fff925022c010f94a0cd6c7bf16d4e3132034a8a3301f1c1950b9a31ee8227b17cbf460db666f6207a59783064115eac2d4f29f9483ebcd34e8792809d5c25a380b2137bbcd7cda502f4a41a043f7d626e922adec9b4c6478ac0df9842bd4e8912deb2ad2026461510ca392383ee9a7ad0388ae499951a4283db39ca57ed9bebf43dcaa6caa391169077a189641fda3151d8e3a3a0b525dcafa2d9d7b2a01468e658c10c27a8ba74b487a968b05031a3d53b59139068b28ca87c5bfd9db867c0e9b9abd91142c96dbf8883e1a89db8d96c9f0a8999a4f9d6b07f32d6f8bb2ea6d2eaa8a531edf85f25aef35c84eb4bf3f46ab4213602be20cad885d404ef47fafc7793247247848f1c3a06ea31c23d0cbffa07aa5981714dc85736e95cd4d60ed1f25351b1c723e4f042f55f02d24a089862df124c75cc4f618853914439c1406a393a0f1ec0f2346f4cbd6beb17713149d67b9bf1854c814bd8ba3a199218e6eac655db998c955df382c8dee2b4d30c750a63a08e9a88009840e96a331bde3767bce177fc5c44528cb673e862e24c2dc2399be1435cd20916e9e060f8bef39d4b47f335dde4493e0e44b0f619822a35e69b7c5d93dc69575ff71ced7c858e43dbee46f4e50846288cbc8fecbb9291d455a015fdd6e1412aec0e6104d0377074b8e160ec7d813bbc6d3b8e6b0256bce8d255d7a592b408cdf6e63164c99d94f00a693e06c2ecba9dc6d36c6a35697c1647f942df4c805c18344b8e5ac885689068f864c395e8c970702e40cf6c683d10455c7ad75fc035ae260f359c2d8c91305406c6f56ec535be445601c75ffdde1758904787f29a558d0f3bd04bfa08f1612a7ee8a7acf129ed5eb854bba757d34afa354098ed8b4e3a599db4b7611a665fcbbb182a0774cb026a00714d8b91c7fb8691b629b6a93f92da2f3701348885dcefe5a548c90101e50dbaf3f4907611623f7616bcea943bd3feedecf3b3681b4d04a938ac83d9f18a21991a90dc17005e7c56d2e09a0f4ad9f3c676e7da478e96122046d0a167f7e1a28d97d514aa68d24dac8501a1a35ddb6f3703311b26bfa3319361ff5e4d38cd55a04ef1b4fb417a3b638cde7f8569531a22c0fa12ad3a55dfe3c2642205fe1ba0c82d36f8815ec52f6381fe789fcf89efb305498a9b1f0ffafe01bcc5581f5b5d195bba77797085ab1837fd081cf5f086da2a16b6a7f8ca9efbc4c9cf771961b70626120e3715b16b222932291e4ee2449591b1807d56a53d4d86f25011704e7d5efcb799ab130ec2aacd54afd3c43c8acda1c5874ce23234b090c4eaa8ddaedf979b1218a5b9dfb36b8196ce05924dcdc7f50d96b95d0c288551a0498ff23f56c7ccdfb8966480477849c7471bea99cb0af35dbcaa5e781b5ddecf3cde51d78067aed9ca267550dfae119a3d83710ecb92fe80841837b41a40d262f5fad16c20203d1cc3455ca63ebdf0f5dbb7a498b4629dcb87333f2d58726871e6b5adf60faa0f8c9cb4718005e5e199457330da1a11cd0d7e78f617b6805fff8fa45c2cb56e1e17904773e165d2a39470ce1616418e7e15481c798afed92efad9c2babcc3e3346f8022ce30b3e1db015a2b9f5dbd4560ee9776c77eb9cff5cf2af28ebf1085650e29bd8dac01b814e6c285bf964da2eb1a442aeb671589a02c29d58208829c9501c355644ac28c38835f4025dcdabfd3852b1a16e45e9c032e97f7f2f0f612739c6569f44731692e3f3b97ba5bcd0b7f2dea1ee6303b5f92514c022e54aa4c587eff74a5d509c17785686c613bf6b778e3624ff3653674e6daab3f788ec9cf879f06957a673a20fdccf721ced05a0d23e074de82614f775a84dfcd31c621cf0369e28791ab742b62f271218fa1bc8681e9d41b4a93b05cc693013d54d367b1e6e1a7e74b43b44b920192ed8fbb63b89f393e5ffab584d7c201d1b99b7bc6907033109986a4fe7bb79e803315c4df94ed471cba889e148645fd1748374015ea8c696ff64bf6d23bce7e5efa7c7e6215ceefa938cd88aa0374da4ee1e10cbfa96d5283b4a0867f4d76b8492fc618e2bca34ba9bc2ff3368756080a78a1ece2f0d1d1cc30cb721677de3c4cd6da378697c40419bc1f2184b86b8e40abd627aab9c308d8fd2db8daf8b43225003ea9124c11dfcbd1b6ea959a86623e360b40c381d991892c1fa6c0c81bb4d03d8d3656cedd1e48539192fc8bd1474ce961159816dcdc76e95ed9d9893e91a0ca670cd1152cb014310facf952fa9fd0d30900196b604c10596c1a31c1e70416824c207656426b09ef9b558496ae87fc7449bfdba0d5628e9af6397385ddadc986424fde545c07664fb6ef2756ed9e443e39257eef2179fb9e4a9e84062f9b6048125151e2e7fad2560df277323b5e22ab2731dc802d6f372d2a335b5da7e5a86508329b3dceb56f0d4f9f6f9e48507af3ec99fc172c237e67ece3d51198a033a9c66f3243ef694893af85421ff6f93ecb95eacceba5fdc1a76810e999a40733b46433328b24ee17b718b135b74dd535202c7966de2de5a26412e600971704bb90007e42d3e6a3acd33e7358da6b32883c9ad30c2abb1cdef7452e211734c6fb6d199a397bea8aa3cf1f014929941c34ba06096e70d852fc420effc7924ec29c03bea29f289c82338f0115e00de549007456d5867253a5b9bb4493bcff815a3100fc45a0de0aad7b0b5c641ed1be3e8f07fb3b1a8a496ecfd3dff5abf0d8f5854621faeb4a9920d8c52b7a0338d49fd21d99c24e1943de3ba2668aea7bc95bcf21e2bf0b2d5f899f33d0cec31b60df4ef5a23e1b173cc89390c8bc3ee96e38de06f6016a2b0eafe86af9dc59bead4f5f948a81b1008a95e3ab39f8009bdb4f268f3002245e73ee2ff50cf1cd37e867cbe44ad370b9336e0dddcffb6dd8f2f79155235300bce6385e544105e6d278d345870216e61100337a871ab51b2cde74fe976e1f8b77a90bb8b51eefe7e4201db41915f482edbe1f8ae268314d5af95ffdeb94aba3f4e316990792d281a123d7febbba7f6abaed7ccfc0c567d4bd1c2d9ca217535167c9a09f1ad0ecaa99cc08338fead5deef7fab77d2082d893b91c27f8ea4e48e052a2a31c8e3f9510c4ce94ef16053bcc25eafa324e5a1d045a3de8f7d731e58ec9130427552323bcfde47f6b55b5634e8cb190fe183af132f12d72ef5e4d98508b57106ccb647ab505369c728958a0789c67ee80acc4bbf41b97fa56d8701c3ec5ead411aed16882dfb026c50c28b5fcc442c432837a82f8bfd47650b83aa71b909be61ea77cc029a0c615f8e390874995d19e224c38349c64bc166f50c54332d1a3eff0071d7a0b11a901c56a847b93ab5bd0bfad8f965cbfb53c2184c588fb7dbc5c693a3ade89b303e801a650b79c1ea957aabed937998b5df77ff29fd43515e8a5ffe441e323fefa45a2775237e1c749897d448f1f3ef60c7755d1a1441b96a136a86d341471d57c68c859813656658266c40b8bb8bafded8ed0d940f8c5954923eb43ad5afb58eb452d6430990bc924afb97191f31cd1a1f58e30b0c243f9636245c459280d16da1df1a30ff63de677554d6b252487455e8aff91370c4a0ba9f341384cf8483d18b9d3f2fc51b07ba8a5fa795d7925189ca344f0fddb8bf55e35013f6fab3806b3c4d17499ec1ae819d4f3aa6b6a570c2ea68558fa33373394584dbf11d41f7059b55f186bd54bdc30dea390872737bf0312f4c68dc963d28d5b218eca6314e23b7381cfbcd01c325d9a3869f1176eb82c183b37d65c8500a48e9bbb1c465e27bfb668a16100e5384d9116aa35f3b00b4ee3bc84700ab17283d4db6b420e6140d14d09b51ad020fc8e505d2c820ac307d45b211213c18487ce12dff233a5caf87cd94a77d0eba69d61452f41c1f82cbe32b567a39a4615a6d2155cc73c3b90dc55daf33c8d9eba3eb0e182c79dede1293dd30840ebf048df8a93e38d0136e856d94ea105cd04323406dc429b5551538625109105d88b1ac480d0fb1e9d1977099707f9f9534b683d855c4d3c30a29c6678a3221e0dea7772f8859f572420708da9a030ddf973cf9f221404117b05efb76bb08ecf34aa9b36b0418c74f90a07e8e5c91e1d7c8a8ea596c0de9b10c222e9588c2bbc77d860b7197b42b42a1ab834ce24fccbbe20f2579ec6dbd4efb9aa1a3d2e062de594d289273e98342440045a0c134e400003b50d4243826b029ecd177cf3d2cf3d164ddc58f88a970a0bbdc7f0d60271cab0df2dde79d1b929cd3028effccbe94c05008f4261297024e4f72604d52db9da7b0e5f2f4f59ebe77b319c54aaab9581a8355b75594eb6dc0fc25e91052c89764256ca464f9f6e45bc34d6e5aa28e1fd93997b58f21feff551aa3ecb5375c19ee4543f7339418c11b9ea18fe2637a9bc9744cc9fcb21a7643eb87683694732154bd1eec746f1c57bac65cf18a83267ea437f7993644c510ac44307703ea28b20e52644dbaabbe9ee1e23a38b29b91cf9077fecdb98ff4e4749c9d6ad2901c5a891c07a8b0c26ad1f8126e6db537df7fff65486afeb85eda80e2a04d09d46720330700267cbcf205b5c00076c01d9db0a64d5426864d14cce1781098afdc28f9f5948ab7791627baf78c3e9df2c0ed9ce50b083bc7a34ee0087f4efde579e2dea313e4e20580c5e63d5ef4509c05a9dc38ced91340bbb9cf948bb03ea5e60c666a1a5c4acd385d0c1a01797b9b3183f4afbc925dd2641d21410b4b1af2f21f8cca330fbc08834e1e8210fdcf332f70f08b48a2655cf017ec8a19640f2f263c54876d6f4ad2193be944667f6498baa32225d2b5b82abd3f2fc64033f1db9adff6b1c788555d5ffa1a35d4a691802447b163ba9a615d6c958036528bbab84230d676145054828d530f0e3af417ad0480eaf2004b9002b644bcd8f0ecf860c31766ace95769ab4fd01f297c595b45e6c7b1c9f662044f43fc82b6244e5d08b1e556599096c034600e20ff000d996b6ba3a6700116127b9468c9567ad920ddcf7ccf9c0a74f49984e24a7aaa2321ee58583c1bdba668cb98c319f682ffc5957015ba1799930d4b676bd3bc76037f6bc2d9ddcb47efebd366a90dc7e67076ebc25e2ef2929a89faee06aa04538a3ae7b196dfecd33725ce9f859c5df4713b220ecd18b1613ba76aebbe8f9f93eeaea9e88e46e7ed24c4efbd86fcd57a4f9fc76152175782871ab211a18ae303be8e9459aab930597d17875c5f5f24d9b16bd8dc4e25f6a7a1de05763da11ee7e26e1e32ee0a5ab2de5d069d03a6ea95a33abc1025d59800fccfff1f0e0f7335e2778b8731cbae94828dbe70507c5369f36d457e98d6042e342cbffde2ee74e05cf0f8aa7185de485e5050294472cd8c7ae03977b62cb287a9d6e4d66650dbc4d89e58ad4f7c24d46573acf85f633d1af73cf655788b431bf22315bdae78d9f6f9cfe32330cbf77bb0195a60244d4bcd0ea35b94bcdf7255ff58f1fb11a09a06747337c95f332a0ade622d49ce0f2943517fb4da8049f3c1b53cb68475c2eb52551d40cbeaf5e79a748c5314bb531b4fc28494b65ee8513427e1fd3cc990fe4ef5ead14b65f1c3e9e0598edf42e2862e2eb180b3e674fc3005859ac56ad17022a8f48b49dcc97e991cfece1d52b7ca82e711944a877567ca0da0663276480d69fa4be56f425bb84dc9177d3e3ed45fb737ce026b8df38336f9efedb89a8650f9fb73918d300c909e9f9189458e1930f09b05433980e79a2eacd0dda32852bdb1a417e4ba62b83d0e17ac8d39834f41c8cd49517013ec658c4e10b38d0788df96764d13ce074271b51041671240549d18540271c8898a5c9e4be4895881235d59666a1f0f3b3cd098786afd6ab4781b73275232b488fb3d9eff77e71f8448a95c653fc80d069c15aa2a80d5799e6c45eb27ea8d6675f28f7aa7cfe3cef877c91ecf3e576e942a20312ffb48a64a91876ec5d1ad2f6a68946e73db4785894736106906731793c3482365d4151051c8d5f16dcb0348628e3aba4087ea8c9ce24bb93190fa12916f529c8eed6dfd3f5bc24d09b1ad377699de3f687b392ec921d81e35dc27bd14be4d004e713c3d07cf600255d45fdfb326b4327c9507c6f69d01236eb9383133dbaa787ba37de14a12e850ec60381a9ffab939ce16cb9b490685343048c0933bc280e809fc8114096ae2d303bbcbbc941b70b5d1d03f59f0b534fa195cbcf34e57d2aaee9c1dcddb5eafd8399fd1d53bfdb48a6f6d3153bb903ce411800f7220bdcfa312ac603672c163a0896b85409859b817cd304e73f278634fab0b1dbe226d7e4f93f220180c3434c7c22ac3143e06702f9a21e66a46d4980bd20d9b0c62846362d0a1151584a28a87902dd0f35187850d501c68900", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x0, 0x16, 0x0, 0x12754f40, 0x0, {0x1, 0x7, 0x2, 0x4, 0x3, 0x100000000000008, 0x80000000, 0x800, 0x3, 0x6000, 0xffffffff, 0x0, r6, 0x0, 0x8049}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m11.860538135s ago: executing program 0 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xb, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) iopl(0x5) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') bind$802154_raw(0xffffffffffffffff, &(0x7f00000012c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90100b03bd9000008000240000000000900010073797a30000000000900020073797a320000000014000580080001400000003208000240b8"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m11.810709411s ago: executing program 1 (id=79): dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) gettid() recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) writev(0xffffffffffffffff, 0x0, 0x0) 4m9.410667048s ago: executing program 0 (id=82): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, &(0x7f0000000000)=""/42, 0x2a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000"], 0x4c}}, 0xc050) 4m8.005838712s ago: executing program 0 (id=83): io_uring_setup(0x669, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) 4m5.685817918s ago: executing program 0 (id=85): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = fspick(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='&\x00', &(0x7f0000000540)='%\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x861, 0x401, 0x8, 0x5800, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="060f0400011104"], 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r6, @ANYBLOB="3893c02651e327b4fb8b4cdea284dc19ed18f7cbe2662957b1f984e0d11f63f0a3ae03ea8c6f11b5b5d36aba46af9032bb373a69494615f9b9558ea8cc1ad5e951eb94587401b99e3e69476007a26ce5734870551dc49308130164446263b8c5362e6945357672b6adba20f3d42d8944d591a43357a50b06550a624636737a29b6a95a5c93d0b1474fa5bfe67c0e609eaf5186d58ec4351bb0c422cfafa7"], 0x20}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000580)={0x2, 0xab, 0x4, 0x1, 0x400, 0x823db05}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 4m5.132315226s ago: executing program 1 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000280)={0x0}, 0x1) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe000000"], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00') ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000002c0)=0x7) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') 4m3.155742975s ago: executing program 1 (id=90): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) socket$inet6(0xa, 0x80002, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfa, 0x77, 0xb0, 0x10, 0xb48, 0x1008, 0x325e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x9d, 0x87, 0xd8}}]}}]}}, 0x0) 3m50.352545226s ago: executing program 34 (id=85): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = fspick(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='&\x00', &(0x7f0000000540)='%\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x861, 0x401, 0x8, 0x5800, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="060f0400011104"], 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r6, @ANYBLOB="3893c02651e327b4fb8b4cdea284dc19ed18f7cbe2662957b1f984e0d11f63f0a3ae03ea8c6f11b5b5d36aba46af9032bb373a69494615f9b9558ea8cc1ad5e951eb94587401b99e3e69476007a26ce5734870551dc49308130164446263b8c5362e6945357672b6adba20f3d42d8944d591a43357a50b06550a624636737a29b6a95a5c93d0b1474fa5bfe67c0e609eaf5186d58ec4351bb0c422cfafa7"], 0x20}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000580)={0x2, 0xab, 0x4, 0x1, 0x400, 0x823db05}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) 3m47.154564131s ago: executing program 35 (id=90): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) socket$inet6(0xa, 0x80002, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfa, 0x77, 0xb0, 0x10, 0xb48, 0x1008, 0x325e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x9d, 0x87, 0xd8}}]}}]}}, 0x0) 25.295016812s ago: executing program 2 (id=525): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) sendfile(r0, r0, 0x0, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 21.97468827s ago: executing program 2 (id=530): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xd0, 0x80c40, 0x23456}) io_uring_enter(r2, 0x47f4, 0x0, 0x0, 0x0, 0x0) 17.525137879s ago: executing program 9 (id=540): unshare(0x6020480) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80c484, &(0x7f00000000c0)=ANY=[], 0x1, 0x67e, &(0x7f0000001600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/214, 0xd6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 14.304785938s ago: executing program 7 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001100)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 14.239897546s ago: executing program 8 (id=544): r0 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r0, 0x0, 0x1000, 0xa000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x221f, 0x0, 0x23, 0x0, 0x0) 14.11667464s ago: executing program 6 (id=545): syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/mnt\x00') io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xae37, 0x3000}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 12.973168221s ago: executing program 7 (id=546): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10) ftruncate(r0, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) 11.772575405s ago: executing program 6 (id=547): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) getgroups(0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400903000000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r2, 0x0, 0x0) 11.721437944s ago: executing program 9 (id=548): socket$pppl2tp(0x18, 0x1, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x242002, 0x0) fcntl$setstatus(r0, 0x403, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0) 11.660994757s ago: executing program 8 (id=549): r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), 0xffffffffffffffff) connect$qrtr(r1, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) 11.364147771s ago: executing program 3 (id=550): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14d802, 0x0) dup(r1) open(&(0x7f0000000240)='./file1\x00', 0x183142, 0x2f) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) 10.579276793s ago: executing program 2 (id=551): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10ffff) 10.274139388s ago: executing program 8 (id=552): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sysinfo(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0xd2, 0x0, &(0x7f00000002c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x40000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f00000006c0)={0x50d, 0x7d, 0x0, {{0x500, 0x1f7, 0x0, 0x0, {}, 0x1000000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50d) write(r1, 0x0, 0x0) 10.192594417s ago: executing program 3 (id=553): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) io_uring_setup(0x2987, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x100000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00'}, 0x10) sync() sync() 10.170580884s ago: executing program 9 (id=554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x72a, 0x0, 0x0) 8.270666473s ago: executing program 9 (id=555): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r1, r2, 0x0, 0xff7e82) truncate(0x0, 0x3000000) 8.207813278s ago: executing program 2 (id=556): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r4 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 8.1944147s ago: executing program 8 (id=557): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 8.05668459s ago: executing program 3 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000080)={[{@dmode={'dmode', 0x3d, 0x7f}}, {@overriderock}, {@check_relaxed}, {@map_off}, {@showassoc}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp852'}}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) add_key$user(&(0x7f0000000240), 0x0, &(0x7f0000000700)="201779a1", 0x4, 0xfffffffffffffffe) 7.155531527s ago: executing program 6 (id=559): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x8000000000000001, 0x20002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000002080)='./file1\x00', 0x342, 0x2e) openat$tun(0xffffffffffffff9c, 0x0, 0x402000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b52, &(0x7f0000000000)) 6.896896593s ago: executing program 8 (id=560): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 6.858897202s ago: executing program 3 (id=561): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x94d7, 0x0, 0x0, 0x97}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f000007b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000239000/0x1000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 6.812800484s ago: executing program 7 (id=562): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40004) socket$netlink(0x10, 0x3, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) socket(0x2, 0x80805, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6.333926584s ago: executing program 2 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/4090, 0xffa}], 0x1}, 0xacd2}], 0x1, 0x12040, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f0000002500), 0x0, 0x40000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) socket$netlink(0x10, 0x3, 0x0) 6.188258579s ago: executing program 7 (id=564): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001280)={[{@noblock_validity}, {@inlinecrypt}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x100000000}}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x190, 0x6c, 0x0, 0x0, 0x0, 0x2c0, 0x258, 0x258, 0x2c0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [], [], 'lo\x00', 'erspan0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3f0) 5.47461181s ago: executing program 6 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xa86, 0x0) 5.296369516s ago: executing program 2 (id=566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.295754563s ago: executing program 8 (id=567): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902"], 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x7687, 0x10100, 0x3, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.162040848s ago: executing program 9 (id=568): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000f80)) 4.279640106s ago: executing program 7 (id=569): sched_setattr(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x4e20, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='batadv_slave_0\x00', 0x30000000000, 0x101, 0x8}) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 3.748584746s ago: executing program 3 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2200c840) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffe4, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) process_mrelease(0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) io_uring_setup(0x7bda, 0x0) 3.075367843s ago: executing program 6 (id=571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) 2.394730243s ago: executing program 7 (id=572): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES16=0x0], 0x1, 0x196, &(0x7f0000000200)="$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") sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0xffffffffffffffff, 0x1, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1.215067205s ago: executing program 3 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x111}}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/4090, 0xffa}], 0x1}, 0xacd2}], 0x1, 0x12040, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f0000002500), 0x0, 0x40000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) socket$netlink(0x10, 0x3, 0x0) 1.174005459s ago: executing program 9 (id=574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) kernel console output (not intermixed with test programs): head error at folio 59 @ nid 36 [ 196.179837][ T6544] erofs (device loop2): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 196.188659][ T6544] erofs (device loop2): readahead error at folio 58 @ nid 36 [ 196.197221][ T6544] erofs (device loop2): readahead error at folio 56 @ nid 36 [ 196.208411][ T6544] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 196.217333][ T6544] erofs (device loop2): readahead error at folio 47 @ nid 36 [ 196.225823][ T6544] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 196.235818][ T6544] erofs (device loop2): readahead error at folio 46 @ nid 36 [ 196.243860][ T6544] erofs (device loop2): readahead error at folio 45 @ nid 36 [ 196.252376][ T6544] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 196.261283][ T6544] erofs (device loop2): readahead error at folio 43 @ nid 36 [ 196.269097][ T6544] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 196.276978][ T5850] Bluetooth: hci7: command tx timeout [ 196.277860][ T6544] erofs (device loop2): readahead error at folio 42 @ nid 36 [ 196.291073][ T6544] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 196.299462][ T6544] erofs (device loop2): readahead error at folio 41 @ nid 36 [ 196.307148][ T6544] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 196.315549][ T6544] erofs (device loop2): readahead error at folio 40 @ nid 36 [ 196.323101][ T6544] erofs (device loop2): readahead error at folio 39 @ nid 36 [ 196.332398][ T6544] erofs (device loop2): readahead error at folio 38 @ nid 36 [ 196.339058][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 196.340418][ T6544] erofs (device loop2): readahead error at folio 36 @ nid 36 [ 196.355153][ T6544] erofs (device loop2): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 196.363660][ T6544] erofs (device loop2): readahead error at folio 31 @ nid 36 [ 196.370125][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 196.379137][ T6544] erofs (device loop2): readahead error at folio 25 @ nid 36 [ 196.386832][ T6544] erofs (device loop2): readahead error at folio 24 @ nid 36 [ 196.394916][ T6544] erofs (device loop2): readahead error at folio 19 @ nid 36 [ 196.403277][ T6544] syz.2.111: attempt to access beyond end of device [ 196.403277][ T6544] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 196.418590][ T6544] syz.2.111: attempt to access beyond end of device [ 196.418590][ T6544] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 196.434942][ T6544] syz.2.111: attempt to access beyond end of device [ 196.434942][ T6544] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 196.445095][ T5859] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 196.451177][ T6544] syz.2.111: attempt to access beyond end of device [ 196.451177][ T6544] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 196.463150][ T5859] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 196.470357][ T6544] syz.2.111: attempt to access beyond end of device [ 196.470357][ T6544] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 196.508114][ T6544] syz.2.111: attempt to access beyond end of device [ 196.508114][ T6544] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 196.521170][ T5863] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 197.451995][ T5859] Bluetooth: hci4: command tx timeout [ 198.335646][ T5859] Bluetooth: hci7: command tx timeout [ 198.395298][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 198.439016][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.458771][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.478996][ T6132] bridge_slave_1: entered allmulticast mode [ 198.512919][ T6132] bridge_slave_1: entered promiscuous mode [ 198.565574][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 198.577231][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.578139][ T24] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 198.618711][ T6389] batadv_slave_0: entered promiscuous mode [ 198.653514][ T5859] Bluetooth: hci9: command tx timeout [ 198.661222][ T5859] Bluetooth: hci8: command tx timeout [ 198.668405][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.735569][ T24] usb 3-1: config 0 descriptor?? [ 198.817690][ T24] as10x_usb: device has been detected [ 198.832311][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 198.971666][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.976260][ T24] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 199.181647][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.205019][ T6550] autofs: Unknown parameter '0x0000000000000000' [ 199.249841][ T24] as10x_usb: error during firmware upload part1 [ 199.252677][ T6529] bond0: (slave rose0): Enslaving as an active interface with an up link [ 199.299786][ T24] Registered device nBox DVB-T Dongle [ 199.444591][ T24] usb 3-1: USB disconnect, device number 2 [ 199.526150][ T5859] Bluetooth: hci4: command tx timeout [ 199.738043][ T6519] lo speed is unknown, defaulting to 1000 [ 199.751933][ T24] Unregistered device nBox DVB-T Dongle [ 199.825767][ T24] as10x_usb: device has been disconnected [ 199.968189][ T6527] lo speed is unknown, defaulting to 1000 [ 200.090780][ T6539] lo speed is unknown, defaulting to 1000 [ 200.337809][ T6540] lo speed is unknown, defaulting to 1000 [ 200.417614][ T5859] Bluetooth: hci7: command tx timeout [ 200.725171][ T5859] Bluetooth: hci8: command tx timeout [ 200.736392][ T51] Bluetooth: hci9: command tx timeout [ 200.960939][ T6567] ALSA: mixer_oss: invalid OSS volume '' [ 201.606258][ T5859] Bluetooth: hci4: command tx timeout [ 202.129428][ T6389] bridge0: port 3(syz_tun) entered disabled state [ 202.274122][ T6577] loop3: detected capacity change from 0 to 512 [ 202.554728][ T5859] Bluetooth: hci7: command tx timeout [ 202.805060][ T5859] Bluetooth: hci8: command tx timeout [ 202.810791][ T5859] Bluetooth: hci9: command tx timeout [ 202.968090][ T6577] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.118: iget: bad i_size value: 38620345925642 [ 202.995678][ T6577] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.118: couldn't read orphan inode 15 (err -117) [ 203.028151][ T6577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.155976][ T6580] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 203.594025][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.656297][ T6389] syz_tun (unregistering): left allmulticast mode [ 203.675914][ T6389] syz_tun (unregistering): left promiscuous mode [ 203.682309][ T6389] bridge0: port 3(syz_tun) entered disabled state [ 203.978904][ T6583] loop3: detected capacity change from 0 to 32768 [ 204.090886][ T6583] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.249144][ T6583] XFS (loop3): Ending clean mount [ 204.262067][ T6583] XFS (loop3): Quotacheck needed: Please wait. [ 204.329308][ T6583] XFS (loop3): Quotacheck: Done. [ 204.884781][ T5859] Bluetooth: hci8: command tx timeout [ 204.890796][ T51] Bluetooth: hci9: command tx timeout [ 205.215778][ T6408] raw-gadget.0 gadget.1: failed to queue disconnect event [ 205.495208][ T5846] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.720580][ T6621] loop3: detected capacity change from 0 to 512 [ 207.760826][ T6621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.733020][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.878101][ T6539] chnl_net:caif_netlink_parms(): no params data found [ 209.524675][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 209.918282][ T6519] chnl_net:caif_netlink_parms(): no params data found [ 210.261942][ T6540] chnl_net:caif_netlink_parms(): no params data found [ 210.671316][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.881862][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.900220][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.919987][ T6539] bridge_slave_0: entered allmulticast mode [ 211.976955][ T6539] bridge_slave_0: entered promiscuous mode [ 212.037506][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.051130][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.063759][ T6527] bridge_slave_0: entered allmulticast mode [ 212.086768][ T6527] bridge_slave_0: entered promiscuous mode [ 212.500702][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.820004][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.919076][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.038179][ T6539] bridge_slave_1: entered allmulticast mode [ 214.259453][ T6539] bridge_slave_1: entered promiscuous mode [ 214.288581][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.308567][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.323698][ T6527] bridge_slave_1: entered allmulticast mode [ 214.367422][ T6527] bridge_slave_1: entered promiscuous mode [ 214.569371][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.448963][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.467178][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.476398][ T6519] bridge_slave_0: entered allmulticast mode [ 215.498225][ T6519] bridge_slave_0: entered promiscuous mode [ 216.209550][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.223799][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.257164][ T6540] bridge_slave_0: entered allmulticast mode [ 216.265893][ T6540] bridge_slave_0: entered promiscuous mode [ 216.275750][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 216.289348][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 216.875179][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 216.881508][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 216.935119][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.956269][ T6690] ceph: No mds server is up or the cluster is laggy [ 217.225789][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.321136][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.339738][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.355573][ T6519] bridge_slave_1: entered allmulticast mode [ 217.367933][ T6519] bridge_slave_1: entered promiscuous mode [ 217.443017][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.491177][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.518195][ T6540] bridge_slave_1: entered allmulticast mode [ 217.545071][ T6540] bridge_slave_1: entered promiscuous mode [ 217.763880][ T6705] loop2: detected capacity change from 0 to 16 [ 217.848188][ T6705] erofs (device loop2): mounted with root inode @ nid 36. [ 217.913447][ T51] erofs (device loop2): failed to decompress -11 in[4096, 0] out[9000] [ 217.980745][ T6705] erofs (device loop2): failed to decompress -11 in[4096, 0] out[9000] [ 217.996438][ T6705] erofs (device loop2): read error -117 @ 0 of nid 89 [ 218.004912][ T30] audit: type=1800 audit(1753648731.817:7): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.135" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 218.348878][ T6705] syz.2.135 (6705) used greatest stack depth: 19912 bytes left [ 218.461883][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.571186][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.790292][ T6519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.768316][ T6714] loop2: detected capacity change from 0 to 256 [ 219.790605][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.198887][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.360124][ T6519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.202953][ T6719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.210830][ T6719] IPv6: NLM_F_CREATE should be set when creating new route [ 221.218380][ T6719] IPv6: NLM_F_CREATE should be set when creating new route [ 221.407927][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.530753][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 221.547213][ T6539] team0: Port device team_slave_0 added [ 221.573776][ T6539] team0: Port device team_slave_1 added [ 221.604952][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 221.879470][ T6527] team0: Port device team_slave_0 added [ 222.049886][ T6527] team0: Port device team_slave_1 added [ 222.141194][ T6519] team0: Port device team_slave_0 added [ 222.313075][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.372438][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.405381][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.868183][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.882233][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.926724][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.961948][ T6519] team0: Port device team_slave_1 added [ 223.366234][ T6540] team0: Port device team_slave_0 added [ 223.727096][ T6540] team0: Port device team_slave_1 added [ 224.111001][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.218080][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.474138][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.135500][ T6749] loop3: detected capacity change from 0 to 1024 [ 225.151692][ T6749] EXT4-fs: Ignoring removed oldalloc option [ 225.194130][ T6749] EXT4-fs: Ignoring removed orlov option [ 225.264613][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.271787][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.298938][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.307583][ T6749] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 226.060474][ T6749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.205989][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.213092][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.269087][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.332646][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.606687][ T6761] loop2: detected capacity change from 0 to 512 [ 227.721597][ T6761] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 227.792788][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.802443][ T6761] EXT4-fs (loop2): orphan cleanup on readonly fs [ 227.826367][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.863856][ T6761] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.145: bad orphan inode 15 [ 227.899215][ T6765] loop3: detected capacity change from 0 to 1024 [ 227.904944][ T6761] ext4_test_bit(bit=14, block=18) = 1 [ 227.911099][ T6761] is_bad_inode(inode)=0 [ 227.915506][ T6761] NEXT_ORPHAN(inode)=1023 [ 227.919834][ T6761] max_ino=32 [ 227.923037][ T6761] i_nlink=0 [ 227.930147][ T6761] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.145: corrupted xattr block 19: e_value size too large [ 227.955896][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.956555][ T6761] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 228.006866][ T6539] hsr_slave_0: entered promiscuous mode [ 228.020250][ T6761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 228.068650][ T6539] hsr_slave_1: entered promiscuous mode [ 228.368025][ T6767] hfsplus: bad catalog entry type [ 228.691658][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.745164][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.783082][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.847956][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.878284][ T6519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.915846][ T6157] hfsplus: b-tree write err: -5, ino 4 [ 228.956445][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.963475][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.058183][ T6519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.173958][ T6540] hsr_slave_0: entered promiscuous mode [ 229.181387][ T6540] hsr_slave_1: entered promiscuous mode [ 229.342793][ T6540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.352190][ T6540] Cannot create hsr debugfs directory [ 230.319930][ T6775] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 230.446595][ T6775] sctp: [Deprecated]: syz.2.147 (pid 6775) Use of int in max_burst socket option. [ 230.446595][ T6775] Use struct sctp_assoc_value instead [ 231.120761][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.260676][ T6779] loop3: detected capacity change from 0 to 128 [ 231.536678][ T6779] EXT4-fs (loop3): Test dummy encryption mode enabled [ 232.328834][ T6779] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.099501][ T6779] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.128674][ T6779] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 233.851143][ T6527] hsr_slave_0: entered promiscuous mode [ 233.890265][ T6527] hsr_slave_1: entered promiscuous mode [ 234.002523][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.034260][ T6527] Cannot create hsr debugfs directory [ 234.060671][ T5846] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.171565][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.637016][ T6792] openvswitch: netlink: IP tunnel dst address not specified [ 236.195010][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.568386][ T6519] hsr_slave_0: entered promiscuous mode [ 237.641093][ T6519] hsr_slave_1: entered promiscuous mode [ 237.751491][ T6519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.850362][ T6519] Cannot create hsr debugfs directory [ 238.329537][ T6808] loop2: detected capacity change from 0 to 4096 [ 238.355866][ T6808] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 239.263306][ T6813] x_tables: duplicate underflow at hook 1 [ 239.293432][ T6813] loop3: detected capacity change from 0 to 256 [ 242.770704][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.141420][ T6832] loop2: detected capacity change from 0 to 40427 [ 243.165360][ T6832] F2FS-fs (loop2): invalid crc value [ 243.249720][ T6832] F2FS-fs (loop2): Start checkpoint disabled! [ 243.260200][ T6832] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 243.324853][ T30] audit: type=1804 audit(1753648757.127:8): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.164" name="/newroot/62/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 243.387914][ T6492] kworker/u8:15: attempt to access beyond end of device [ 243.387914][ T6492] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 243.434886][ T6492] kworker/u8:15: attempt to access beyond end of device [ 243.434886][ T6492] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 243.463492][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.466119][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: kworker/u8:15 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 243.466178][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.466200][ T6492] Workqueue: writeback wb_workfn (flush-7:2) [ 243.466274][ T6492] Call Trace: [ 243.466287][ T6492] [ 243.466300][ T6492] dump_stack_lvl+0x189/0x250 [ 243.466350][ T6492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.466378][ T6492] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 243.466413][ T6492] ? __pfx_queue_work_on+0x10/0x10 [ 243.466451][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.466484][ T6492] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 243.466511][ T6492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 243.466538][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.466566][ T6492] ? f2fs_hw_is_readonly+0x39b/0x470 [ 243.466603][ T6492] f2fs_handle_critical_error+0x37c/0x540 [ 243.466641][ T6492] f2fs_write_end_io+0x495/0x810 [ 243.466676][ T6492] ? blkg_put+0x22/0x240 [ 243.466758][ T6492] __submit_merged_bio+0x27a/0x6a0 [ 243.466797][ T6492] __submit_merged_write_cond+0x255/0x530 [ 243.466855][ T6492] f2fs_write_data_pages+0x261d/0x3000 [ 243.466885][ T6492] ? __pfx___mutex_lock+0x10/0x10 [ 243.466964][ T6492] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 243.467015][ T6492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 243.467095][ T6492] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 243.467125][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.467170][ T6492] ? trace_f2fs_writepages+0x7f/0x200 [ 243.467199][ T6492] ? f2fs_write_node_pages+0x478/0x6e0 [ 243.467248][ T6492] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 243.467300][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.467338][ T6492] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 243.467369][ T6492] do_writepages+0x32e/0x550 [ 243.467413][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.467440][ T6492] ? reacquire_held_locks+0x127/0x1d0 [ 243.467472][ T6492] ? writeback_sb_inodes+0x372/0x1000 [ 243.467521][ T6492] __writeback_single_inode+0x145/0xff0 [ 243.467554][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.467581][ T6492] ? do_raw_spin_unlock+0x122/0x240 [ 243.467624][ T6492] writeback_sb_inodes+0x6b5/0x1000 [ 243.467678][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.467731][ T6492] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 243.467828][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.467855][ T6492] ? rcu_is_watching+0x15/0xb0 [ 243.467885][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.467926][ T6492] wb_writeback+0x43b/0xaf0 [ 243.467972][ T6492] ? queue_io+0x3b1/0x590 [ 243.468009][ T6492] ? __pfx_wb_writeback+0x10/0x10 [ 243.468056][ T6492] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.468089][ T6492] wb_workfn+0x409/0xef0 [ 243.468142][ T6492] ? __pfx_wb_workfn+0x10/0x10 [ 243.468176][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.468203][ T6492] ? __lock_acquire+0xab9/0xd20 [ 243.468248][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.468280][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.468314][ T6492] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.468336][ T6492] ? process_scheduled_works+0x9ef/0x17b0 [ 243.468364][ T6492] ? process_scheduled_works+0x9ef/0x17b0 [ 243.468397][ T6492] process_scheduled_works+0xae1/0x17b0 [ 243.468472][ T6492] ? __pfx_process_scheduled_works+0x10/0x10 [ 243.468514][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.468556][ T6492] worker_thread+0x8a0/0xda0 [ 243.468630][ T6492] kthread+0x711/0x8a0 [ 243.468674][ T6492] ? __pfx_worker_thread+0x10/0x10 [ 243.468711][ T6492] ? __pfx_kthread+0x10/0x10 [ 243.468742][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.468775][ T6492] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.468798][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 243.468825][ T6492] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.468853][ T6492] ? __pfx_kthread+0x10/0x10 [ 243.468891][ T6492] ret_from_fork+0x3fc/0x770 [ 243.468926][ T6492] ? __pfx_ret_from_fork+0x10/0x10 [ 243.468963][ T6492] ? __switch_to_asm+0x39/0x70 [ 243.468996][ T6492] ? __switch_to_asm+0x33/0x70 [ 243.469026][ T6492] ? __pfx_kthread+0x10/0x10 [ 243.469063][ T6492] ret_from_fork_asm+0x1a/0x30 [ 243.469123][ T6492] [ 243.469137][ T6492] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 244.381053][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.308943][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.457129][ T6843] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.167'. [ 245.752324][ T6842] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.167'. [ 246.738408][ T6539] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 246.812409][ T6539] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 247.477701][ T6539] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 247.497215][ T9] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 247.521790][ T9] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 247.646317][ T9] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 248.340636][ T9] hid-generic 0000:0004:0034.0001: hidraw0: HID v0.0e Device [syz0] on syz1 [ 248.531469][ T6539] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 248.718139][ T6860] fido_id[6860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 248.943828][ T6540] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 249.047594][ T59] bridge_slave_1: left allmulticast mode [ 249.053337][ T59] bridge_slave_1: left promiscuous mode [ 249.088094][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.139885][ T59] bridge_slave_0: left allmulticast mode [ 249.453221][ T6876] loop2: detected capacity change from 0 to 32768 [ 249.504809][ T59] bridge_slave_0: left promiscuous mode [ 249.511030][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.889830][ T59] bridge_slave_1: left allmulticast mode [ 249.919983][ T59] bridge_slave_1: left promiscuous mode [ 249.994248][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.149346][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.161539][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.199404][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.217887][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.230332][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.321672][ T59] bridge_slave_0: left allmulticast mode [ 250.361584][ T59] bridge_slave_0: left promiscuous mode [ 250.417905][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.427043][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 250.528171][ T59] bridge_slave_1: left allmulticast mode [ 250.534011][ T59] bridge_slave_1: left promiscuous mode [ 250.578234][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.709880][ T59] bridge_slave_0: left allmulticast mode [ 250.718545][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 250.739694][ T59] bridge_slave_0: left promiscuous mode [ 250.750917][ T6892] Illegal XDP return value 4294967274 on prog (id 48) dev N/A, expect packet loss! [ 250.765131][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.879077][ T59] bridge_slave_1: left allmulticast mode [ 250.894513][ T59] bridge_slave_1: left promiscuous mode [ 250.925786][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.976285][ T59] bridge_slave_0: left allmulticast mode [ 250.982073][ T59] bridge_slave_0: left promiscuous mode [ 250.998679][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.072144][ T59] bridge_slave_1: left allmulticast mode [ 251.104815][ T59] bridge_slave_1: left promiscuous mode [ 251.127226][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.177445][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.191438][ T59] bridge_slave_0: left allmulticast mode [ 251.197232][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.215748][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.242106][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.259979][ T6903] netlink: 52 bytes leftover after parsing attributes in process `syz.2.173'. [ 251.272787][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.278856][ T59] bridge_slave_0: left promiscuous mode [ 251.331957][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.407892][ T5863] Bluetooth: hci0: command tx timeout [ 252.585737][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.615435][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.636795][ T59] bond0 (unregistering): Released all slaves [ 252.838089][ T59] bond0 (unregistering): Released all slaves [ 253.079662][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.130217][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.140899][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.150913][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.160188][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.209262][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.223181][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.245278][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.255849][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.270826][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.364760][ T5859] Bluetooth: hci1: command tx timeout [ 253.603307][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.620760][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.632982][ T59] bond0 (unregistering): Released all slaves [ 253.778940][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.791287][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.802956][ T59] bond0 (unregistering): Released all slaves [ 254.525560][ T5859] Bluetooth: hci0: command tx timeout [ 254.673103][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.691041][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.703139][ T59] bond0 (unregistering): Released all slaves [ 254.724047][ T6540] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 255.215031][ T5859] Bluetooth: hci3: command tx timeout [ 255.364717][ T5859] Bluetooth: hci6: command tx timeout [ 255.378957][ T59] tipc: Left network mode [ 255.444652][ T5859] Bluetooth: hci1: command tx timeout [ 255.562451][ T6915] loop2: detected capacity change from 0 to 512 [ 255.637616][ T6915] udf: Unknown parameter '/proc/sys/fs/binfmt_misc/register' [ 255.662200][ T6911] lo speed is unknown, defaulting to 1000 [ 255.753080][ T6898] lo speed is unknown, defaulting to 1000 [ 256.308409][ T6909] lo speed is unknown, defaulting to 1000 [ 256.621890][ T5859] Bluetooth: hci0: command tx timeout [ 257.294557][ T5859] Bluetooth: hci3: command tx timeout [ 257.505788][ T5859] Bluetooth: hci6: command tx timeout [ 257.524848][ T5859] Bluetooth: hci1: command tx timeout [ 258.654775][ T5859] Bluetooth: hci0: command tx timeout [ 258.956821][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 259.365129][ T5859] Bluetooth: hci3: command tx timeout [ 259.531589][ T5859] Bluetooth: hci6: command tx timeout [ 259.604534][ T5859] Bluetooth: hci1: command tx timeout [ 259.734742][ T6881] lo speed is unknown, defaulting to 1000 [ 260.418691][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.544921][ T5859] Bluetooth: hci3: command tx timeout [ 261.624599][ T5859] Bluetooth: hci6: command tx timeout [ 261.827956][ T6955] bridge0: entered promiscuous mode [ 261.883384][ T6955] batman_adv: batadv0: Adding interface: macsec1 [ 261.913251][ T6955] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.957244][ T6955] batman_adv: batadv0: Interface activated: macsec1 [ 262.106311][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 262.305420][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 262.860196][ T6898] chnl_net:caif_netlink_parms(): no params data found [ 264.932851][ T6911] chnl_net:caif_netlink_parms(): no params data found [ 265.933468][ T6909] chnl_net:caif_netlink_parms(): no params data found [ 266.090452][ T59] hsr_slave_0: left promiscuous mode [ 266.102581][ T59] hsr_slave_1: left promiscuous mode [ 266.124899][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.132581][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.159119][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.183762][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.214146][ T59] hsr_slave_0: left promiscuous mode [ 266.235402][ T59] hsr_slave_1: left promiscuous mode [ 266.250241][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.281222][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.298612][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.340898][ T59] hsr_slave_0: left promiscuous mode [ 266.355382][ T59] hsr_slave_1: left promiscuous mode [ 266.371908][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.392776][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.412227][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.430148][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.627611][ T59] veth1_macvtap: left promiscuous mode [ 266.644358][ T59] veth0_macvtap: left promiscuous mode [ 266.651817][ T59] veth1_vlan: left promiscuous mode [ 266.664717][ T59] veth0_vlan: left promiscuous mode [ 266.688760][ T59] veth1_macvtap: left promiscuous mode [ 266.761980][ T59] veth0_macvtap: left promiscuous mode [ 266.823160][ T59] veth1_vlan: left promiscuous mode [ 266.891983][ T59] veth0_vlan: left promiscuous mode [ 266.961160][ T59] veth1_macvtap: left promiscuous mode [ 267.044784][ T59] veth0_macvtap: left promiscuous mode [ 267.103125][ T59] veth1_vlan: left promiscuous mode [ 267.116517][ T59] veth0_vlan: left promiscuous mode [ 269.374662][ T30] audit: type=1326 audit(1753648783.177:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa938d8e9a9 code=0x7ffc0000 [ 269.423108][ T30] audit: type=1326 audit(1753648783.177:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa938d8e9a9 code=0x7ffc0000 [ 269.452852][ T30] audit: type=1326 audit(1753648783.237:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fa938d8e9a9 code=0x7ffc0000 [ 269.614083][ T30] audit: type=1326 audit(1753648783.237:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa938d8e9a9 code=0x7ffc0000 [ 269.891997][ T30] audit: type=1326 audit(1753648783.237:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa938d8e9a9 code=0x7ffc0000 [ 271.145792][ T7049] loop2: detected capacity change from 0 to 256 [ 271.166427][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.582865][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.754444][ T59] team0 (unregistering): Port device team_slave_1 removed [ 273.038896][ T59] team0 (unregistering): Port device team_slave_0 removed [ 274.411418][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 275.620930][ T59] team0 (unregistering): Port device team_slave_1 removed [ 275.688821][ T59] team0 (unregistering): Port device team_slave_0 removed [ 277.694150][ T59] team0 (unregistering): Port device team_slave_1 removed [ 277.777754][ T59] team0 (unregistering): Port device team_slave_0 removed [ 278.508302][ T24] lo speed is unknown, defaulting to 1000 [ 278.534285][ T24] syz0: Port: 1 Link DOWN [ 278.550929][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.585242][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.601760][ T6898] bridge_slave_0: entered allmulticast mode [ 278.613631][ T6898] bridge_slave_0: entered promiscuous mode [ 278.695853][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 278.798595][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.806171][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.813528][ T6898] bridge_slave_1: entered allmulticast mode [ 278.822381][ T6898] bridge_slave_1: entered promiscuous mode [ 279.058839][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.086635][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.096991][ T6911] bridge_slave_0: entered allmulticast mode [ 279.155723][ T6911] bridge_slave_0: entered promiscuous mode [ 279.213498][ T6898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.420978][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.434514][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.447398][ T6911] bridge_slave_1: entered allmulticast mode [ 279.456349][ T6911] bridge_slave_1: entered promiscuous mode [ 279.466963][ T6898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.561941][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.576485][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.615157][ T6909] bridge_slave_0: entered allmulticast mode [ 279.622947][ T6909] bridge_slave_0: entered promiscuous mode [ 280.219258][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.226937][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.238177][ T6909] bridge_slave_1: entered allmulticast mode [ 280.248043][ T6909] bridge_slave_1: entered promiscuous mode [ 280.559341][ T6911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.615677][ T6898] team0: Port device team_slave_0 added [ 280.706779][ T7117] loop2: detected capacity change from 0 to 512 [ 280.772414][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.799745][ T7117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.848536][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.891110][ T7122] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 280.911369][ T6911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.922836][ T7122] overlayfs: missing 'lowerdir' [ 281.006472][ T6898] team0: Port device team_slave_1 added [ 281.024936][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.034580][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.041993][ T6881] bridge_slave_0: entered allmulticast mode [ 281.076424][ T6881] bridge_slave_0: entered promiscuous mode [ 281.118713][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.153186][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.168941][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.174812][ T6881] bridge_slave_1: entered allmulticast mode [ 281.198317][ T6881] bridge_slave_1: entered promiscuous mode [ 281.932317][ T6909] team0: Port device team_slave_0 added [ 281.965040][ T6911] team0: Port device team_slave_0 added [ 281.984415][ T6909] team0: Port device team_slave_1 added [ 281.993441][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.004997][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.061700][ T6898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.088235][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.136210][ T6911] team0: Port device team_slave_1 added [ 282.167360][ T7134] loop2: detected capacity change from 0 to 32768 [ 282.222433][ T7134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.229 (7134) [ 282.281665][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.304005][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.372276][ T6898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.384000][ T7134] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.413233][ T7134] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 282.424862][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.434450][ T7134] BTRFS info (device loop2): disk space caching is enabled [ 282.441970][ T7134] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 282.689238][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.697197][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.714335][ T7134] BTRFS info (device loop2): rebuilding free space tree [ 282.775020][ T6909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.936387][ T7134] BTRFS info (device loop2): disabling free space tree [ 282.975480][ T7134] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 282.987978][ T7134] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 283.022197][ T6881] team0: Port device team_slave_0 added [ 283.073646][ T6911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.104476][ T6911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.184678][ T6911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.222627][ T6911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.244544][ T6911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.320922][ T6911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.345898][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.368502][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.439010][ T5843] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.458619][ T6909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.502868][ T6898] hsr_slave_0: entered promiscuous mode [ 283.510866][ T6898] hsr_slave_1: entered promiscuous mode [ 283.518125][ T6898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.526650][ T6898] Cannot create hsr debugfs directory [ 283.540771][ T6881] team0: Port device team_slave_1 added [ 283.939956][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.979983][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.050343][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.083261][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.125260][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.168685][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.827165][ T6909] hsr_slave_0: entered promiscuous mode [ 284.856781][ T6909] hsr_slave_1: entered promiscuous mode [ 284.863475][ T6909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.903326][ T6909] Cannot create hsr debugfs directory [ 285.503757][ T6881] hsr_slave_0: entered promiscuous mode [ 285.516781][ T6881] hsr_slave_1: entered promiscuous mode [ 285.535951][ T7175] loop2: detected capacity change from 0 to 40427 [ 285.579564][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.598458][ T6881] Cannot create hsr debugfs directory [ 285.627854][ T6911] hsr_slave_0: entered promiscuous mode [ 285.653897][ T6911] hsr_slave_1: entered promiscuous mode [ 285.661156][ T7175] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 285.676363][ T6911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.692585][ T6911] Cannot create hsr debugfs directory [ 285.703350][ T7175] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 285.730052][ T7175] F2FS-fs (loop2): heap/no_heap options were deprecated [ 285.759933][ T7175] F2FS-fs (loop2): build fault injection type: 0x0 [ 285.787938][ T7175] F2FS-fs (loop2): invalid crc value [ 286.067022][ T7175] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 286.075394][ T7175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 286.103486][ T7175] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 286.111857][ T7175] F2FS-fs (loop2): heap/no_heap options were deprecated [ 286.119648][ T7175] F2FS-fs (loop2): build fault injection type: 0x0 [ 287.189085][ T7195] netlink: 36 bytes leftover after parsing attributes in process `syz.3.238'. [ 287.401213][ T7195] Zero length message leads to an empty skb [ 287.619049][ T7199] loop2: detected capacity change from 0 to 256 [ 287.738844][ T7199] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d) [ 289.099784][ T6898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 289.137021][ T6898] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.210792][ T6898] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 289.322868][ T6898] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 289.914744][ T7226] loop2: detected capacity change from 0 to 40427 [ 289.943360][ T7226] F2FS-fs (loop2): invalid crc value [ 290.038589][ T7226] F2FS-fs (loop2): Start checkpoint disabled! [ 290.065414][ T7226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 290.213318][ T30] audit: type=1804 audit(1753648804.007:14): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.245" name="/newroot/98/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 290.497546][ T1120] kworker/u8:7: attempt to access beyond end of device [ 290.497546][ T1120] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 290.561922][ T1120] CPU: 1 UID: 0 PID: 1120 Comm: kworker/u8:7 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 290.561959][ T1120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.561975][ T1120] Workqueue: writeback wb_workfn (flush-7:2) [ 290.562013][ T1120] Call Trace: [ 290.562023][ T1120] [ 290.562033][ T1120] dump_stack_lvl+0x189/0x250 [ 290.562071][ T1120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.562098][ T1120] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 290.562125][ T1120] ? __pfx_queue_work_on+0x10/0x10 [ 290.562158][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.562187][ T1120] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 290.562213][ T1120] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.562239][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.562267][ T1120] ? f2fs_hw_is_readonly+0x39b/0x470 [ 290.562299][ T1120] f2fs_handle_critical_error+0x37c/0x540 [ 290.562334][ T1120] f2fs_write_end_io+0x495/0x810 [ 290.562363][ T1120] ? blkg_put+0x22/0x240 [ 290.562420][ T1120] __submit_merged_bio+0x27a/0x6a0 [ 290.562454][ T1120] __submit_merged_write_cond+0x255/0x530 [ 290.562504][ T1120] f2fs_write_data_pages+0x261d/0x3000 [ 290.562532][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.562601][ T1120] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 290.562627][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.562674][ T1120] ? unwind_next_frame+0xa5/0x2390 [ 290.562739][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.562796][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.562835][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.562878][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.562905][ T1120] ? update_curr+0x78/0x8b0 [ 290.562935][ T1120] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 290.562965][ T1120] do_writepages+0x32e/0x550 [ 290.563005][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.563032][ T1120] ? reacquire_held_locks+0x127/0x1d0 [ 290.563063][ T1120] ? writeback_sb_inodes+0x372/0x1000 [ 290.563108][ T1120] __writeback_single_inode+0x145/0xff0 [ 290.563142][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.563170][ T1120] ? do_raw_spin_unlock+0x122/0x240 [ 290.563213][ T1120] writeback_sb_inodes+0x6b5/0x1000 [ 290.563248][ T1120] ? try_to_wake_up+0x7e5/0x1290 [ 290.563289][ T1120] ? raise_softirq+0xa5/0x120 [ 290.563323][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.563366][ T1120] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 290.563449][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.563477][ T1120] ? rcu_is_watching+0x15/0xb0 [ 290.563507][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.563545][ T1120] wb_writeback+0x43b/0xaf0 [ 290.563588][ T1120] ? queue_io+0x3b1/0x590 [ 290.563624][ T1120] ? __pfx_wb_writeback+0x10/0x10 [ 290.563667][ T1120] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.563699][ T1120] wb_workfn+0x409/0xef0 [ 290.563745][ T1120] ? __pfx_wb_workfn+0x10/0x10 [ 290.563783][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.563811][ T1120] ? __lock_acquire+0xab9/0xd20 [ 290.563851][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.563883][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.563916][ T1120] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.563939][ T1120] ? process_scheduled_works+0x9ef/0x17b0 [ 290.563967][ T1120] ? process_scheduled_works+0x9ef/0x17b0 [ 290.563998][ T1120] process_scheduled_works+0xae1/0x17b0 [ 290.564064][ T1120] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.564103][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.564142][ T1120] worker_thread+0x8a0/0xda0 [ 290.564205][ T1120] kthread+0x711/0x8a0 [ 290.564245][ T1120] ? __pfx_worker_thread+0x10/0x10 [ 290.564278][ T1120] ? __pfx_kthread+0x10/0x10 [ 290.564311][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.564344][ T1120] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.564367][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.564395][ T1120] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.564420][ T1120] ? __pfx_kthread+0x10/0x10 [ 290.564457][ T1120] ret_from_fork+0x3fc/0x770 [ 290.564488][ T1120] ? __pfx_ret_from_fork+0x10/0x10 [ 290.564523][ T1120] ? __switch_to_asm+0x39/0x70 [ 290.564555][ T1120] ? __switch_to_asm+0x33/0x70 [ 290.564586][ T1120] ? __pfx_kthread+0x10/0x10 [ 290.564623][ T1120] ret_from_fork_asm+0x1a/0x30 [ 290.564677][ T1120] [ 290.938661][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.076808][ T1120] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 291.111183][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.128897][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.136141][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.201370][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.208624][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.683154][ T6898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.817436][ T6881] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 292.970424][ T6881] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 293.011904][ T6881] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 293.238010][ T6881] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 293.519984][ T7265] loop2: detected capacity change from 0 to 32768 [ 293.532269][ T7265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.246 (7265) [ 293.723455][ T7265] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 293.836834][ T7265] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 294.151114][ T7265] BTRFS info (device loop2): using free-space-tree [ 295.504515][ T6898] veth0_vlan: entered promiscuous mode [ 295.521086][ T6898] veth1_vlan: entered promiscuous mode [ 295.535462][ T5843] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.629121][ T1120] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 296.016127][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.043191][ T6898] veth0_macvtap: entered promiscuous mode [ 296.252636][ T6909] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 296.373589][ T6898] veth1_macvtap: entered promiscuous mode [ 296.478111][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.526034][ T6909] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 296.671042][ T6909] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 296.824903][ T6909] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 296.909194][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.916859][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.378161][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.385529][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.573600][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.781250][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.963037][ T6898] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.994512][ T6898] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.014446][ T6898] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.023453][ T6898] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.071828][ T6911] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 298.124268][ T6911] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 298.166550][ T6911] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 298.199556][ T6911] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 298.997774][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.025986][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.152287][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.334485][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.375470][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.380152][ T6909] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.500141][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.533884][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.541132][ T6500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.642201][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.649451][ T6500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.729731][ T6911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.012808][ T6911] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.065694][ T7361] loop2: detected capacity change from 0 to 32768 [ 300.219021][ T6909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.284628][ T6909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.950005][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.957454][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.231699][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.239040][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.291156][ T7361] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow [ 301.291191][ T7361] allowing incompatible features above 0.0: (unknown version) [ 301.291206][ T7361] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 301.331808][ T7361] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 301.384049][ T7361] bcachefs (loop2): initializing new filesystem [ 301.470471][ T7361] bcachefs (loop2): going read-write [ 301.778786][ T7361] bcachefs (loop2): marking superblocks [ 301.846647][ T6911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.078726][ T7361] bcachefs (loop2): bch2_trans_mark_dev_sb(): error ENOMEM_disk_accounting [ 302.158001][ T7361] bcachefs (loop2): bch2_fs_initialize(): error marking superblocks ENOMEM_disk_accounting [ 302.215604][ T7361] bcachefs (loop2): bch2_fs_initialize(): error ENOMEM_disk_accounting [ 302.234822][ T7361] bcachefs (loop2): bch2_fs_start(): error starting filesystem ENOMEM_disk_accounting [ 302.276194][ T7361] bcachefs (loop2): shutting down [ 302.281342][ T7361] bcachefs (loop2): going read-only [ 302.298680][ T7361] bcachefs (loop2): finished waiting for writes to stop [ 302.416860][ T7361] bcachefs (loop2): flushing journal and stopping allocators, journal seq 1 [ 302.437212][ T6881] veth0_vlan: entered promiscuous mode [ 302.492971][ T6881] veth1_vlan: entered promiscuous mode [ 302.568012][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.604632][ T7361] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 1 [ 302.723791][ T6881] veth0_macvtap: entered promiscuous mode [ 302.755155][ T7361] bcachefs (loop2): clean shutdown complete, journal seq 2 [ 302.763865][ T7361] bcachefs (loop2): done going read-only, filesystem not clean [ 302.768228][ T6881] veth1_macvtap: entered promiscuous mode [ 302.952118][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.989633][ T7361] bcachefs (loop2): shutdown complete [ 303.043237][ T6911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.112765][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.139105][ T7396] loop6: detected capacity change from 0 to 40427 [ 303.234479][ T7396] F2FS-fs (loop6): invalid crc value [ 303.247475][ T6881] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.294522][ T6881] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.344851][ T6881] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.353677][ T6881] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.732573][ T7396] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 303.972730][ T6898] syz-executor: attempt to access beyond end of device [ 303.972730][ T6898] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 304.023926][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 304.023968][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.023985][ T6898] Call Trace: [ 304.023995][ T6898] [ 304.024005][ T6898] dump_stack_lvl+0x189/0x250 [ 304.024063][ T6898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.024089][ T6898] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 304.024118][ T6898] ? __pfx_queue_work_on+0x10/0x10 [ 304.024152][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.024181][ T6898] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 304.024204][ T6898] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 304.024229][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.024254][ T6898] ? f2fs_hw_is_readonly+0x39b/0x470 [ 304.024295][ T6898] f2fs_handle_critical_error+0x37c/0x540 [ 304.024331][ T6898] f2fs_write_end_io+0x495/0x810 [ 304.024359][ T6898] ? blkg_put+0x22/0x240 [ 304.024426][ T6898] __submit_merged_bio+0x27a/0x6a0 [ 304.024461][ T6898] __submit_merged_write_cond+0x255/0x530 [ 304.024521][ T6898] f2fs_write_data_pages+0x261d/0x3000 [ 304.024603][ T6898] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 304.024695][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.024738][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.024766][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.024794][ T6898] ? __kasan_check_byte+0x12/0x40 [ 304.024854][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.024881][ T6898] ? __lock_acquire+0xab9/0xd20 [ 304.024922][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.024949][ T6898] ? do_raw_spin_lock+0x121/0x290 [ 304.024995][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.025035][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.025061][ T6898] ? do_raw_spin_unlock+0x122/0x240 [ 304.025094][ T6898] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 304.025124][ T6898] do_writepages+0x32e/0x550 [ 304.025168][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.025203][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.025230][ T6898] ? do_raw_spin_unlock+0x122/0x240 [ 304.025273][ T6898] filemap_fdatawrite+0x191/0x230 [ 304.025311][ T6898] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 304.025343][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.025439][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.025475][ T6898] ? do_raw_spin_unlock+0x122/0x240 [ 304.025517][ T6898] f2fs_sync_dirty_inodes+0x31f/0x830 [ 304.025574][ T6898] f2fs_write_checkpoint+0x94a/0x1de0 [ 304.025642][ T6898] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 304.025746][ T6898] ? kill_f2fs_super+0x298/0x6c0 [ 304.025789][ T6898] kill_f2fs_super+0x2c3/0x6c0 [ 304.025833][ T6898] ? __pfx_kill_f2fs_super+0x10/0x10 [ 304.025862][ T6898] ? radix_tree_delete_item+0x2b6/0x400 [ 304.025900][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.025929][ T6898] ? shrinker_free+0x2ce/0x3e0 [ 304.025962][ T6898] deactivate_locked_super+0xbc/0x130 [ 304.025998][ T6898] cleanup_mnt+0x425/0x4c0 [ 304.026034][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.026062][ T6898] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.026096][ T6898] task_work_run+0x1d4/0x260 [ 304.026142][ T6898] ? __pfx_task_work_run+0x10/0x10 [ 304.026178][ T6898] ? __x64_sys_umount+0x122/0x160 [ 304.026221][ T6898] ? exit_to_user_mode_loop+0x40/0x110 [ 304.026255][ T6898] exit_to_user_mode_loop+0xec/0x110 [ 304.026284][ T6898] do_syscall_64+0x2bd/0x3b0 [ 304.026313][ T6898] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.026339][ T6898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.026363][ T6898] ? srso_alias_return_thunk+0x5/0xfbef5 [ 304.026390][ T6898] ? exc_page_fault+0x9f/0xf0 [ 304.026421][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.026446][ T6898] RIP: 0033:0x7f022a58fcd7 [ 304.026469][ T6898] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 304.026491][ T6898] RSP: 002b:00007fff7603fbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 304.026519][ T6898] RAX: 0000000000000000 RBX: 00007f022a610b55 RCX: 00007f022a58fcd7 [ 304.026537][ T6898] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7603fc70 [ 304.026553][ T6898] RBP: 00007fff7603fc70 R08: 0000000000000000 R09: 0000000000000000 [ 304.026568][ T6898] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff76040d00 [ 304.026585][ T6898] R13: 00007f022a610b55 R14: 000000000004a2c6 R15: 00007fff76040d40 [ 304.026629][ T6898] [ 304.122814][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.182933][ T6898] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 304.189802][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.677239][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.710534][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.851968][ T6909] veth0_vlan: entered promiscuous mode [ 304.908923][ T6909] veth1_vlan: entered promiscuous mode [ 305.337429][ T6909] veth0_macvtap: entered promiscuous mode [ 305.398578][ T6911] veth0_vlan: entered promiscuous mode [ 305.442731][ T6909] veth1_macvtap: entered promiscuous mode [ 305.611801][ T6911] veth1_vlan: entered promiscuous mode [ 305.644228][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.712287][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.760492][ T6909] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.774933][ T6909] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.785445][ T6909] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.805470][ T6909] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.870938][ T6911] veth0_macvtap: entered promiscuous mode [ 306.116016][ T7458] syz.8.103 (7458) used greatest stack depth: 17992 bytes left [ 306.125139][ T7457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 306.160623][ T7457] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 306.367904][ T7457] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 306.374374][ T6911] veth1_macvtap: entered promiscuous mode [ 306.381430][ T7457] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 306.412421][ T7457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 306.434883][ T7457] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 306.535450][ T6911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.541460][ T7457] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 306.571347][ T6911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.619972][ T7457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 306.659299][ T6911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.664940][ T7457] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 306.681222][ T6911] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.690338][ T6911] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.699500][ T6911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.773000][ T7457] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 306.842473][ T7457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 306.863931][ T7457] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 306.911046][ T7457] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 306.995786][ T7457] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 307.042929][ T7457] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 307.119776][ T7457] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 307.402064][ T6157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.413538][ T6157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.458223][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 307.508505][ T5829] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 307.723867][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.738339][ T5829] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.757957][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.765282][ T5829] usb 7-1: config 0 has no interface number 0 [ 307.824543][ T5829] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 307.867100][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.902063][ T5829] usb 7-1: config 0 descriptor?? [ 307.933294][ T7361] bcachefs: bch2_fs_get_tree() error: ENOMEM_disk_accounting [ 307.972100][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.033481][ T5829] usb 7-1: selecting invalid altsetting 1 [ 308.050139][ T5829] dvb_ttusb_budget: ttusb_init_controller: error [ 308.074472][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.091285][ T5829] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 308.267602][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.303100][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.434434][ T5863] Bluetooth: hci5: command 0x0406 tx timeout [ 308.484734][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 308.647754][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 308.694153][ T7476] loop9: detected capacity change from 0 to 64 [ 308.854093][ T5829] DVB: Unable to find symbol cx22700_attach() [ 308.885308][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.045643][ T5863] Bluetooth: hci6: command 0x0c1a tx timeout [ 309.098409][ T7470] loop8: detected capacity change from 0 to 32768 [ 309.138246][ T7470] XFS: ikeep mount option is deprecated. [ 309.232401][ T7470] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 309.289616][ T5829] DVB: Unable to find symbol tda10046_attach() [ 309.460770][ T7483] loop6: detected capacity change from 0 to 4096 [ 309.496899][ T5829] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 309.519908][ T5829] usb 7-1: USB disconnect, device number 2 [ 309.532930][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 310.388466][ T7483] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 310.489156][ T5863] Bluetooth: hci5: command 0x0406 tx timeout [ 310.581825][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 310.590984][ T7470] XFS (loop8): Ending clean mount [ 310.623134][ T7470] XFS (loop8): Quotacheck needed: Please wait. [ 310.728948][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.876700][ T7470] XFS (loop8): Quotacheck: Done. [ 310.905452][ T7483] ntfs3(loop6): Failed to load $Extend (-22). [ 311.004892][ T7483] ntfs3(loop6): Failed to initialize $Extend. [ 311.034804][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 311.134621][ T5863] Bluetooth: hci6: command 0x0c1a tx timeout [ 311.419806][ T6881] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 311.728482][ T30] audit: type=1800 audit(1753648825.537:15): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.283" name="file2" dev="loop6" ino=31 res=0 errno=0 [ 312.587087][ T7526] syz.3.295 uses obsolete (PF_INET,SOCK_PACKET) [ 312.648194][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 312.805702][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.836620][ T7521] loop7: detected capacity change from 0 to 40427 [ 313.023527][ T7521] F2FS-fs (loop7): invalid crc value [ 313.048127][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 313.204635][ T5863] Bluetooth: hci6: command 0x0c1a tx timeout [ 313.223208][ T7521] F2FS-fs (loop7): Start checkpoint disabled! [ 313.259642][ T7533] loop9: detected capacity change from 0 to 4096 [ 313.286223][ T7521] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 313.478398][ T30] audit: type=1804 audit(1753648827.257:16): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.293" name="/newroot/2/file0/file0" dev="loop7" ino=10 res=1 errno=0 [ 313.836006][ T30] audit: type=1800 audit(1753648827.647:17): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.296" name="file1" dev="loop9" ino=33 res=0 errno=0 [ 313.872467][ T4259] kworker/u8:9: attempt to access beyond end of device [ 313.872467][ T4259] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 314.014603][ T4259] CPU: 1 UID: 0 PID: 4259 Comm: kworker/u8:9 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 314.014642][ T4259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.014659][ T4259] Workqueue: writeback wb_workfn (flush-7:7) [ 314.014725][ T4259] Call Trace: [ 314.014735][ T4259] [ 314.014745][ T4259] dump_stack_lvl+0x189/0x250 [ 314.014783][ T4259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.014810][ T4259] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 314.014838][ T4259] ? __pfx_queue_work_on+0x10/0x10 [ 314.014870][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.014899][ T4259] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 314.014924][ T4259] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.014948][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.014975][ T4259] ? f2fs_hw_is_readonly+0x39b/0x470 [ 314.015011][ T4259] f2fs_handle_critical_error+0x37c/0x540 [ 314.015045][ T4259] f2fs_write_end_io+0x495/0x810 [ 314.015073][ T4259] ? blkg_put+0x22/0x240 [ 314.015130][ T4259] __submit_merged_bio+0x27a/0x6a0 [ 314.015164][ T4259] __submit_merged_write_cond+0x255/0x530 [ 314.015215][ T4259] f2fs_write_data_pages+0x261d/0x3000 [ 314.015286][ T4259] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 314.015313][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.015361][ T4259] ? unwind_next_frame+0xa5/0x2390 [ 314.015422][ T4259] ? ret_from_fork_asm+0x1a/0x30 [ 314.015463][ T4259] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 314.015499][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.015547][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.015579][ T4259] ? __lock_acquire+0xab9/0xd20 [ 314.015614][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.015653][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.015691][ T4259] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 314.015721][ T4259] do_writepages+0x32e/0x550 [ 314.015761][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.015789][ T4259] ? reacquire_held_locks+0x127/0x1d0 [ 314.015819][ T4259] ? writeback_sb_inodes+0x372/0x1000 [ 314.015864][ T4259] __writeback_single_inode+0x145/0xff0 [ 314.015897][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.015926][ T4259] ? do_raw_spin_unlock+0x122/0x240 [ 314.015967][ T4259] writeback_sb_inodes+0x6b5/0x1000 [ 314.016009][ T4259] ? __lock_acquire+0xab9/0xd20 [ 314.016046][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.016089][ T4259] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 314.016173][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.016201][ T4259] ? rcu_is_watching+0x15/0xb0 [ 314.016231][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.016271][ T4259] wb_writeback+0x43b/0xaf0 [ 314.016315][ T4259] ? queue_io+0x3b1/0x590 [ 314.016351][ T4259] ? __pfx_wb_writeback+0x10/0x10 [ 314.016395][ T4259] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.016428][ T4259] wb_workfn+0x409/0xef0 [ 314.016474][ T4259] ? __pfx_wb_workfn+0x10/0x10 [ 314.016506][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.016534][ T4259] ? __lock_acquire+0xab9/0xd20 [ 314.016571][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.016603][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.016636][ T4259] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.016659][ T4259] ? process_scheduled_works+0x9ef/0x17b0 [ 314.016688][ T4259] ? process_scheduled_works+0x9ef/0x17b0 [ 314.016720][ T4259] process_scheduled_works+0xae1/0x17b0 [ 314.016786][ T4259] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.016825][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.016865][ T4259] worker_thread+0x8a0/0xda0 [ 314.016901][ T4259] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.016936][ T4259] ? __kthread_parkme+0x7b/0x200 [ 314.016981][ T4259] kthread+0x711/0x8a0 [ 314.017025][ T4259] ? __pfx_worker_thread+0x10/0x10 [ 314.017055][ T4259] ? __pfx_kthread+0x10/0x10 [ 314.017087][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.017121][ T4259] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.017144][ T4259] ? srso_alias_return_thunk+0x5/0xfbef5 [ 314.017172][ T4259] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.017198][ T4259] ? __pfx_kthread+0x10/0x10 [ 314.017235][ T4259] ret_from_fork+0x3fc/0x770 [ 314.017267][ T4259] ? __pfx_ret_from_fork+0x10/0x10 [ 314.017302][ T4259] ? __switch_to_asm+0x39/0x70 [ 314.017334][ T4259] ? __switch_to_asm+0x33/0x70 [ 314.017366][ T4259] ? __pfx_kthread+0x10/0x10 [ 314.017403][ T4259] ret_from_fork_asm+0x1a/0x30 [ 314.017458][ T4259] [ 314.478837][ T4259] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 316.609359][ T6697] libceph: connect (1)[c::]:6789 error -101 [ 316.618476][ T6697] libceph: mon0 (1)[c::]:6789 connect error [ 316.986933][ T6005] libceph: connect (1)[c::]:6789 error -101 [ 317.051841][ T6005] libceph: mon0 (1)[c::]:6789 connect error [ 317.238885][ T7580] loop2: detected capacity change from 0 to 131072 [ 317.249862][ T7580] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945) [ 317.258327][ T7580] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 317.296263][ T7580] F2FS-fs (loop2): invalid crc value [ 317.308841][ T7586] ceph: No mds server is up or the cluster is laggy [ 317.645623][ T7580] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 317.652795][ T7580] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 317.736162][ T30] audit: type=1800 audit(1753648831.547:18): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.307" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 319.263597][ T922] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 319.721703][ T922] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.755259][ T922] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.777928][ T922] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.843258][ T922] usb 10-1: config 0 descriptor?? [ 320.064457][ T6005] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 321.216104][ T6005] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.225133][ T6005] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 321.236183][ T6005] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.245985][ T6005] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 321.439523][ T7639] loop8: detected capacity change from 0 to 128 [ 321.462639][ T7639] EXT4-fs: Ignoring removed nobh option [ 321.542195][ T6005] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 321.720319][ T922] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 321.763624][ T7639] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.771201][ T922] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0002/input/input6 [ 321.783630][ T6005] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 321.797757][ T7639] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 321.808514][ T6005] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 321.816963][ T6005] usb 7-1: Product: syz [ 321.823214][ T6005] usb 7-1: Manufacturer: syz [ 321.853311][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.938636][ T6005] cdc_wdm 7-1:1.0: skipping garbage [ 321.968347][ T6005] cdc_wdm 7-1:1.0: skipping garbage [ 322.234627][ T6005] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 322.305241][ T6005] cdc_wdm 7-1:1.0: Unknown control protocol [ 322.495983][ T6881] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.349697][ T7648] loop7: detected capacity change from 0 to 131072 [ 323.484366][ T7648] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 323.504398][ T7648] F2FS-fs (loop7): lookup inode (7) has corrupted xattr [ 323.525454][ T7648] F2FS-fs (loop7): lookup inode (7) has corrupted xattr [ 323.540413][ T7648] F2FS-fs (loop7): lookup inode (7) has corrupted xattr [ 323.645534][ T922] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 323.866144][ T922] usb 10-1: USB disconnect, device number 2 [ 324.047582][ T5829] usb 7-1: USB disconnect, device number 3 [ 324.089706][ T7670] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 324.289056][ T7666] fido_id[7666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 324.329085][ T5212] udevd[5212]: worker [7143] terminated by signal 33 (Unknown signal 33) [ 324.406115][ T5212] udevd[5212]: worker [7143] failed while handling '/devices/virtual/block/loop9' [ 324.456367][ T5212] udevd[5212]: worker [7649] terminated by signal 33 (Unknown signal 33) [ 324.506962][ T7678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.528993][ T5212] udevd[5212]: worker [7649] failed while handling '/devices/virtual/block/loop7' [ 324.673725][ T7685] loop8: detected capacity change from 0 to 128 [ 324.860688][ T7685] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.987893][ T7691] batadv_slave_1: entered promiscuous mode [ 325.005652][ T7690] batadv_slave_1: left promiscuous mode [ 325.024662][ T7685] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.228803][ T7685] EXT4-fs (loop8): shut down requested (1) [ 326.176743][ T6881] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.186075][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.599601][ T7704] loop2: detected capacity change from 0 to 4096 [ 326.633785][ T7714] loop8: detected capacity change from 0 to 1024 [ 326.826508][ T7704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.874008][ T7714] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.951703][ T7714] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.048775][ T30] audit: type=1800 audit(1753648840.857:19): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.318" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 327.433133][ T6881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.529574][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.992315][ T7740] loop8: detected capacity change from 0 to 40427 [ 329.011896][ T7740] F2FS-fs (loop8): invalid crc value [ 329.144036][ T7740] F2FS-fs (loop8): Start checkpoint disabled! [ 329.200643][ T7740] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 329.475119][ T30] audit: type=1804 audit(1753648843.247:20): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.349" name="/newroot/13/file0/file0" dev="loop8" ino=10 res=1 errno=0 [ 329.496732][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.629088][ T7750] loop7: detected capacity change from 0 to 512 [ 329.669313][ T7750] EXT4-fs: Ignoring removed bh option [ 329.702396][ T7750] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 329.851287][ T6492] kworker/u8:15: attempt to access beyond end of device [ 329.851287][ T6492] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.920772][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: kworker/u8:15 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 329.920830][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.920850][ T6492] Workqueue: writeback wb_workfn (flush-7:8) [ 329.920912][ T6492] Call Trace: [ 329.920923][ T6492] [ 329.920934][ T6492] dump_stack_lvl+0x189/0x250 [ 329.920975][ T6492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.920998][ T6492] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 329.921025][ T6492] ? __pfx_queue_work_on+0x10/0x10 [ 329.921072][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.921099][ T6492] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 329.921121][ T6492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 329.921143][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.921166][ T6492] ? f2fs_hw_is_readonly+0x39b/0x470 [ 329.921196][ T6492] f2fs_handle_critical_error+0x37c/0x540 [ 329.921227][ T6492] f2fs_write_end_io+0x495/0x810 [ 329.921255][ T6492] ? blkg_put+0x22/0x240 [ 329.921308][ T6492] __submit_merged_bio+0x27a/0x6a0 [ 329.921341][ T6492] __submit_merged_write_cond+0x255/0x530 [ 329.921387][ T6492] f2fs_write_data_pages+0x261d/0x3000 [ 329.921453][ T6492] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 329.921495][ T6492] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 329.921561][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.921610][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.921647][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.921687][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.921713][ T6492] ? update_curr+0x78/0x8b0 [ 329.921743][ T6492] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 329.921771][ T6492] do_writepages+0x32e/0x550 [ 329.921809][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.921834][ T6492] ? reacquire_held_locks+0x127/0x1d0 [ 329.921865][ T6492] ? writeback_sb_inodes+0x372/0x1000 [ 329.921908][ T6492] __writeback_single_inode+0x145/0xff0 [ 329.921940][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.921966][ T6492] ? do_raw_spin_unlock+0x122/0x240 [ 329.922006][ T6492] writeback_sb_inodes+0x6b5/0x1000 [ 329.922052][ T6492] ? try_to_wake_up+0x7e5/0x1290 [ 329.922091][ T6492] ? raise_softirq+0xa5/0x120 [ 329.922125][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.922165][ T6492] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 329.922245][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.922271][ T6492] ? rcu_is_watching+0x15/0xb0 [ 329.922299][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.922334][ T6492] wb_writeback+0x43b/0xaf0 [ 329.922372][ T6492] ? queue_io+0x3b1/0x590 [ 329.922403][ T6492] ? __pfx_wb_writeback+0x10/0x10 [ 329.922440][ T6492] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.922466][ T6492] wb_workfn+0x409/0xef0 [ 329.922511][ T6492] ? __pfx_wb_workfn+0x10/0x10 [ 329.922540][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.922565][ T6492] ? __lock_acquire+0xab9/0xd20 [ 329.922604][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.922634][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.922664][ T6492] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.922686][ T6492] ? process_scheduled_works+0x9ef/0x17b0 [ 329.922712][ T6492] ? process_scheduled_works+0x9ef/0x17b0 [ 329.922737][ T6492] process_scheduled_works+0xae1/0x17b0 [ 329.922797][ T6492] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.922832][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.922867][ T6492] worker_thread+0x8a0/0xda0 [ 329.922922][ T6492] kthread+0x711/0x8a0 [ 329.922959][ T6492] ? __pfx_worker_thread+0x10/0x10 [ 329.922986][ T6492] ? __pfx_kthread+0x10/0x10 [ 329.923014][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.923055][ T6492] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.923076][ T6492] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.923101][ T6492] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.923125][ T6492] ? __pfx_kthread+0x10/0x10 [ 329.923159][ T6492] ret_from_fork+0x3fc/0x770 [ 329.923188][ T6492] ? __pfx_ret_from_fork+0x10/0x10 [ 329.923220][ T6492] ? __switch_to_asm+0x39/0x70 [ 329.923249][ T6492] ? __switch_to_asm+0x33/0x70 [ 329.923273][ T6492] ? __pfx_kthread+0x10/0x10 [ 329.923303][ T6492] ret_from_fork_asm+0x1a/0x30 [ 329.923348][ T6492] [ 329.923357][ T6492] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 329.995213][ T7750] EXT4-fs (loop7): 1 truncate cleaned up [ 329.999197][ T44] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 330.143143][ T7750] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.344515][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 330.626587][ T44] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.636979][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.658071][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.668878][ T44] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.721429][ T6911] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.758613][ T44] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.772566][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.063514][ T44] usb 7-1: GET_CAPABILITIES returned 0 [ 331.069303][ T44] usbtmc 7-1:16.0: can't read capabilities [ 331.465962][ T5829] usb 7-1: USB disconnect, device number 4 [ 332.685151][ T7782] loop6: detected capacity change from 0 to 4096 [ 332.708102][ T7782] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 332.917927][ T7771] loop7: detected capacity change from 0 to 32768 [ 333.066469][ T7771] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 333.434774][ T7798] delete_channel: no stack [ 333.507964][ T7771] XFS (loop7): Ending clean mount [ 333.546325][ T7781] delete_channel: no stack [ 333.633024][ T7771] XFS (loop7): Quotacheck needed: Please wait. [ 333.858514][ T7771] XFS (loop7): Quotacheck: Done. [ 335.564976][ T6911] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.401428][ T7818] loop2: detected capacity change from 0 to 40427 [ 336.458363][ T7818] F2FS-fs (loop2): invalid crc value [ 336.541575][ T7818] F2FS-fs (loop2): Start checkpoint disabled! [ 336.582069][ T7818] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 336.886512][ T30] audit: type=1804 audit(1753648850.607:21): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.365" name="/newroot/111/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 337.162158][ T1120] kworker/u8:7: attempt to access beyond end of device [ 337.162158][ T1120] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 337.284806][ T1120] CPU: 1 UID: 0 PID: 1120 Comm: kworker/u8:7 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 337.284852][ T1120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.284869][ T1120] Workqueue: writeback wb_workfn (flush-7:2) [ 337.284917][ T1120] Call Trace: [ 337.284931][ T1120] [ 337.284941][ T1120] dump_stack_lvl+0x189/0x250 [ 337.284984][ T1120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.285012][ T1120] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 337.285043][ T1120] ? __pfx_queue_work_on+0x10/0x10 [ 337.285104][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.285135][ T1120] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 337.285161][ T1120] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 337.285187][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.285214][ T1120] ? f2fs_hw_is_readonly+0x39b/0x470 [ 337.285249][ T1120] f2fs_handle_critical_error+0x37c/0x540 [ 337.285283][ T1120] f2fs_write_end_io+0x495/0x810 [ 337.285313][ T1120] ? blkg_put+0x22/0x240 [ 337.285368][ T1120] __submit_merged_bio+0x27a/0x6a0 [ 337.285403][ T1120] __submit_merged_write_cond+0x255/0x530 [ 337.285454][ T1120] f2fs_write_data_pages+0x261d/0x3000 [ 337.285528][ T1120] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 337.285576][ T1120] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 337.285659][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.285702][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.285730][ T1120] ? __lock_acquire+0xab9/0xd20 [ 337.285764][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.285792][ T1120] ? __lock_acquire+0xab9/0xd20 [ 337.285838][ T1120] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 337.285869][ T1120] do_writepages+0x32e/0x550 [ 337.285911][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.285940][ T1120] ? reacquire_held_locks+0x127/0x1d0 [ 337.285970][ T1120] ? writeback_sb_inodes+0x372/0x1000 [ 337.286014][ T1120] __writeback_single_inode+0x145/0xff0 [ 337.286053][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.286081][ T1120] ? do_raw_spin_unlock+0x122/0x240 [ 337.286123][ T1120] writeback_sb_inodes+0x6b5/0x1000 [ 337.286174][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.286217][ T1120] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 337.286301][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.286330][ T1120] ? rcu_is_watching+0x15/0xb0 [ 337.286361][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.286400][ T1120] wb_writeback+0x43b/0xaf0 [ 337.286445][ T1120] ? queue_io+0x3b1/0x590 [ 337.286482][ T1120] ? __pfx_wb_writeback+0x10/0x10 [ 337.286526][ T1120] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.286558][ T1120] wb_workfn+0x409/0xef0 [ 337.286606][ T1120] ? __pfx_wb_workfn+0x10/0x10 [ 337.286638][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.286666][ T1120] ? __lock_acquire+0xab9/0xd20 [ 337.286706][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.286737][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.286770][ T1120] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.286792][ T1120] ? process_scheduled_works+0x9ef/0x17b0 [ 337.286820][ T1120] ? process_scheduled_works+0x9ef/0x17b0 [ 337.286852][ T1120] process_scheduled_works+0xae1/0x17b0 [ 337.286920][ T1120] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.286959][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.286998][ T1120] worker_thread+0x8a0/0xda0 [ 337.287075][ T1120] kthread+0x711/0x8a0 [ 337.287118][ T1120] ? __pfx_worker_thread+0x10/0x10 [ 337.287147][ T1120] ? __pfx_kthread+0x10/0x10 [ 337.287179][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.287213][ T1120] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.287236][ T1120] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.287265][ T1120] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.287294][ T1120] ? __pfx_kthread+0x10/0x10 [ 337.287333][ T1120] ret_from_fork+0x3fc/0x770 [ 337.287367][ T1120] ? __pfx_ret_from_fork+0x10/0x10 [ 337.287404][ T1120] ? __switch_to_asm+0x39/0x70 [ 337.287438][ T1120] ? __switch_to_asm+0x33/0x70 [ 337.287468][ T1120] ? __pfx_kthread+0x10/0x10 [ 337.287506][ T1120] ret_from_fork_asm+0x1a/0x30 [ 337.287561][ T1120] [ 337.287575][ T1120] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 338.287711][ T7839] loop7: detected capacity change from 0 to 16 [ 338.452166][ T7839] erofs (device loop7): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 338.519009][ T7839] erofs (device loop7): mounted with root inode @ nid 36. [ 339.136830][ T7846] erofs (device loop7): invalid de[0].nameoff 0 @ nid 36 [ 339.712561][ T7848] loop6: detected capacity change from 0 to 64 [ 339.769417][ T7850] tipc: Started in network mode [ 339.825503][ T7850] tipc: Node identity 2, cluster identity 4711 [ 339.875494][ T7850] tipc: Node number set to 2 [ 340.386201][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 340.397155][ T7861] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 340.407286][ T7861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.289044][ T7886] loop7: detected capacity change from 0 to 64 [ 342.464479][ T7882] loop2: detected capacity change from 0 to 32768 [ 342.522923][ T7882] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 342.691254][ T7882] XFS (loop2): Ending clean mount [ 342.763764][ T7882] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 342.775506][ T7882] XFS (loop2): Unmount and run xfs_repair [ 342.781303][ T7882] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 342.788850][ T7882] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 342.798202][ T7882] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 342.807964][ T7882] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 342.817079][ T7882] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 342.826191][ T7882] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 342.835225][ T7882] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 342.844220][ T7882] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 342.853320][ T7882] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 342.865168][ T7882] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74 [ 342.879142][ T7882] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 342.894213][ T7882] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 343.216623][ T5843] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 343.255408][ T7906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 343.915258][ T7919] netlink: 'syz.7.391': attribute type 1 has an invalid length. [ 343.943030][ T7877] loop8: detected capacity change from 0 to 32768 [ 344.231547][ T7877] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 344.529105][ T7938] loop6: detected capacity change from 0 to 128 [ 344.678232][ T7938] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 344.759089][ T7938] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.863252][ T7877] XFS (loop8): Ending clean mount [ 345.776100][ T6881] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 346.156439][ C1] Unknown status report in ack skb [ 346.441994][ T6898] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.387394][ T7968] loop6: detected capacity change from 0 to 2048 [ 347.467908][ T7968] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 347.541591][ T7968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.739676][ T30] audit: type=1800 audit(1753648861.547:22): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.400" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 347.925013][ T30] audit: type=1800 audit(1753648861.577:23): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.400" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 348.738547][ T7968] UDF-fs: warning (device loop6): udf_truncate_tail_extent: Too long extent after EOF in inode 1346: i_size: 188416 lbcount: 192512 extent 129+142848 [ 349.192587][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.411'. [ 349.262732][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.6.411'. [ 349.366203][ T7973] loop8: detected capacity change from 0 to 32768 [ 349.531809][ T7973] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 349.805963][ T7973] XFS (loop8): Ending clean mount [ 349.940227][ T7985] loop2: detected capacity change from 0 to 32768 [ 349.997496][ T7985] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.241924][ T7985] XFS (loop2): Ending clean mount [ 350.262714][ T6881] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 350.294863][ T7985] XFS (loop2): Quotacheck needed: Please wait. [ 350.561913][ T7985] XFS (loop2): Quotacheck: Done. [ 351.631715][ T5843] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 351.839694][ T8067] netlink: 'syz.7.422': attribute type 1 has an invalid length. [ 351.911423][ T8067] netlink: 'syz.7.422': attribute type 4 has an invalid length. [ 351.917082][ T8073] netlink: 'syz.7.422': attribute type 1 has an invalid length. [ 352.124353][ T8067] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.422'. [ 352.154407][ T8073] netlink: 'syz.7.422': attribute type 4 has an invalid length. [ 354.591963][ T8073] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.422'. [ 356.757132][ T8110] program syz.9.431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.474712][ T5829] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 357.772377][ T5829] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.880874][ T8116] loop9: detected capacity change from 0 to 40427 [ 357.904566][ T8116] F2FS-fs (loop9): invalid crc value [ 357.949896][ T5829] usb 7-1: config 0 has no interface number 0 [ 358.000437][ T5829] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.061825][ T5829] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.099239][ T8116] F2FS-fs (loop9): Start checkpoint disabled! [ 358.142549][ T8116] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 358.180374][ T5829] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 358.574561][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.607641][ T30] audit: type=1804 audit(1753648872.177:24): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.436" name="/newroot/34/file0/file0" dev="loop9" ino=10 res=1 errno=0 [ 358.737341][ T5829] usb 7-1: config 0 descriptor?? [ 358.789968][ T6500] kworker/u8:18: attempt to access beyond end of device [ 358.789968][ T6500] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 358.904580][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: kworker/u8:18 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 358.904631][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.904648][ T6500] Workqueue: writeback wb_workfn (flush-7:9) [ 358.904695][ T6500] Call Trace: [ 358.904706][ T6500] [ 358.904719][ T6500] dump_stack_lvl+0x189/0x250 [ 358.904760][ T6500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.904786][ T6500] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 358.904814][ T6500] ? __pfx_queue_work_on+0x10/0x10 [ 358.904855][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.904884][ T6500] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 358.904909][ T6500] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 358.904933][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.904959][ T6500] ? f2fs_hw_is_readonly+0x39b/0x470 [ 358.904991][ T6500] f2fs_handle_critical_error+0x37c/0x540 [ 358.905027][ T6500] f2fs_write_end_io+0x495/0x810 [ 358.905057][ T6500] ? blkg_put+0x22/0x240 [ 358.905109][ T6500] __submit_merged_bio+0x27a/0x6a0 [ 358.905143][ T6500] __submit_merged_write_cond+0x255/0x530 [ 358.905191][ T6500] f2fs_write_data_pages+0x261d/0x3000 [ 358.905256][ T6500] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 358.905299][ T6500] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 358.905366][ T6500] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 358.905390][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.905417][ T6500] ? look_up_lock_class+0x74/0x170 [ 358.905461][ T6500] ? trace_f2fs_writepages+0x7f/0x200 [ 358.905488][ T6500] ? f2fs_write_node_pages+0x478/0x6e0 [ 358.905534][ T6500] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 358.905583][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.905619][ T6500] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 358.905648][ T6500] do_writepages+0x32e/0x550 [ 358.905688][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.905713][ T6500] ? reacquire_held_locks+0x127/0x1d0 [ 358.905738][ T6500] ? writeback_sb_inodes+0x372/0x1000 [ 358.905777][ T6500] __writeback_single_inode+0x145/0xff0 [ 358.905806][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.905837][ T6500] ? do_raw_spin_unlock+0x122/0x240 [ 358.905874][ T6500] writeback_sb_inodes+0x6b5/0x1000 [ 358.905916][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.905952][ T6500] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 358.906026][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.906051][ T6500] ? rcu_is_watching+0x15/0xb0 [ 358.906079][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.906115][ T6500] wb_writeback+0x43b/0xaf0 [ 358.906158][ T6500] ? queue_io+0x3b1/0x590 [ 358.906192][ T6500] ? __pfx_wb_writeback+0x10/0x10 [ 358.906232][ T6500] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.906265][ T6500] wb_workfn+0x409/0xef0 [ 358.906312][ T6500] ? __pfx_wb_workfn+0x10/0x10 [ 358.906341][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.906368][ T6500] ? __lock_acquire+0xab9/0xd20 [ 358.906407][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.906439][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.906473][ T6500] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.906497][ T6500] ? process_scheduled_works+0x9ef/0x17b0 [ 358.906524][ T6500] ? process_scheduled_works+0x9ef/0x17b0 [ 358.906554][ T6500] process_scheduled_works+0xae1/0x17b0 [ 358.906620][ T6500] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.906659][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.906699][ T6500] worker_thread+0x8a0/0xda0 [ 358.906765][ T6500] kthread+0x711/0x8a0 [ 358.906805][ T6500] ? __pfx_worker_thread+0x10/0x10 [ 358.906841][ T6500] ? __pfx_kthread+0x10/0x10 [ 358.906874][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.906905][ T6500] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.906928][ T6500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 358.906954][ T6500] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.906979][ T6500] ? __pfx_kthread+0x10/0x10 [ 358.907017][ T6500] ret_from_fork+0x3fc/0x770 [ 358.907048][ T6500] ? __pfx_ret_from_fork+0x10/0x10 [ 358.907083][ T6500] ? __switch_to_asm+0x39/0x70 [ 358.907115][ T6500] ? __switch_to_asm+0x33/0x70 [ 358.907146][ T6500] ? __pfx_kthread+0x10/0x10 [ 358.907183][ T6500] ret_from_fork_asm+0x1a/0x30 [ 358.907237][ T6500] [ 358.907247][ T6500] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 359.656119][ T5829] uclogic 0003:256C:006D.0003: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input1 [ 359.688859][ T5829] usb 7-1: USB disconnect, device number 5 [ 359.907706][ T8140] veth1_macvtap: left promiscuous mode [ 359.907806][ T8140] macsec0: entered promiscuous mode [ 359.947652][ T8136] fido_id[8136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 363.842536][ T8172] loop7: detected capacity change from 0 to 512 [ 363.982026][ T8172] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 364.070405][ T8172] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 365.154186][ T8172] EXT4-fs (loop7): 1 truncate cleaned up [ 365.161161][ T8187] loop9: detected capacity change from 0 to 64 [ 365.203566][ T8172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.381110][ T8172] syz.7.450 (pid 8172) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 365.628443][ T8195] binder: 8194:8195 ioctl c0306201 200000000c00 returned -14 [ 366.006617][ T6911] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.357370][ T8224] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 368.385938][ T8224] CIFS: Unable to determine destination address [ 371.927215][ T30] audit: type=1804 audit(1753648885.727:25): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.472" name="/newroot/32/file1" dev="fuse" ino=1 res=1 errno=0 [ 372.295615][ T30] audit: type=1800 audit(1753648886.107:26): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.472" name="/" dev="fuse" ino=1 res=0 errno=0 [ 372.611657][ T8258] binder: 8256:8258 ioctl c0306201 200000000080 returned -14 [ 373.535004][ T922] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 373.760318][ T8286] loop2: detected capacity change from 0 to 64 [ 373.843707][ T922] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.896408][ T922] usb 8-1: config 0 has no interface number 0 [ 373.929394][ T922] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 374.197567][ T922] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 374.215056][ T922] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 374.224452][ T922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.301423][ T922] usb 8-1: config 0 descriptor?? [ 374.446305][ T922] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 374.649678][ T8276] iowarrior 8-1:0.1: Error -90 while submitting URB [ 375.359728][ T8292] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 375.680591][ T8298] loop6: detected capacity change from 0 to 1024 [ 375.783321][ T8298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.642135][ T922] usb 8-1: USB disconnect, device number 2 [ 377.270284][ T6898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.306689][ T8322] loop8: detected capacity change from 0 to 512 [ 377.439088][ T8322] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.489: casefold flag without casefold feature [ 377.599993][ T8322] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.489: couldn't read orphan inode 15 (err -117) [ 377.910240][ T8322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.407074][ T6881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.596791][ T8353] netlink: 1304 bytes leftover after parsing attributes in process `syz.3.496'. [ 380.914018][ T8360] loop8: detected capacity change from 0 to 512 [ 380.996945][ T8360] EXT4-fs: Ignoring removed nobh option [ 381.032846][ T8362] loop2: detected capacity change from 0 to 64 [ 381.071978][ T8360] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 381.126429][ T8360] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 381.199370][ T8360] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #13: comm syz.8.497: casefold flag without casefold feature [ 381.272366][ T8360] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.497: couldn't read orphan inode 13 (err -117) [ 381.564441][ T8360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.805477][ T8360] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 381.962705][ T8360] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 382.048083][ T8373] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 382.147709][ T8360] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 382.226752][ T8360] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 382.357439][ T8360] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 382.418055][ T8360] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 382.646039][ T8364] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 382.844684][ T44] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 382.934626][ T6881] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.328764][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.944432][ T44] usb 10-1: Using ep0 maxpacket: 16 [ 384.045430][ T44] usb 10-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 384.294922][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.303165][ T44] usb 10-1: Product: syz [ 384.381615][ T44] usb 10-1: Manufacturer: syz [ 384.454532][ T44] usb 10-1: SerialNumber: syz [ 384.522351][ T44] usb 10-1: config 0 descriptor?? [ 384.616420][ T44] as10x_usb: device has been detected [ 384.623081][ T44] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 384.809787][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 385.277706][ T8398] loop7: detected capacity change from 0 to 32768 [ 385.423235][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 385.488253][ T8398] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 385.638204][ T44] usb 10-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 385.688854][ T44] as10x_usb: error during firmware upload part1 [ 385.716964][ T44] Registered device Sky IT Digital Key (green led) [ 385.718275][ T8398] XFS (loop7): Ending clean mount [ 385.741128][ T8398] XFS (loop7): Quotacheck needed: Please wait. [ 385.809895][ T8380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 385.848743][ T8380] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 385.913449][ T8380] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 385.977528][ T8380] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.983890][ T8380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 386.063951][ T8412] loop6: detected capacity change from 0 to 2048 [ 386.067488][ T8380] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 386.114917][ T8398] XFS (loop7): Quotacheck: Done. [ 386.156005][ T8396] random: crng reseeded on system resumption [ 386.223461][ T922] usb 10-1: USB disconnect, device number 3 [ 386.322448][ T8412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.429142][ T922] Unregistered device Sky IT Digital Key (green led) [ 386.777871][ T922] as10x_usb: device has been disconnected [ 387.858935][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 387.865721][ T5863] Bluetooth: hci5: command 0x0406 tx timeout [ 388.019788][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 388.031969][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout [ 388.038217][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout [ 388.114591][ T5859] Bluetooth: hci6: command 0x0c1a tx timeout [ 388.195105][ T6911] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 388.268986][ T30] audit: type=1326 audit(1753648902.077:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.3.510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa938d8e9a9 code=0x0 [ 388.373724][ T8424] 9pnet_fd: Insufficient options for proto=fd [ 389.665146][ T8431] overlayfs: overlapping lowerdir path [ 393.729673][ T8456] loop7: detected capacity change from 0 to 512 [ 393.851793][ T8456] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.897557][ T8456] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.933437][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.8.522'. [ 393.954179][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.8.522'. [ 394.214539][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 395.257265][ T8479] tty tty32: ldisc open failed (-12), clearing slot 31 [ 395.635387][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 395.649950][ T6911] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.754721][ T9] usb 9-1: config 0 has an invalid interface number: 217 but max is 0 [ 395.824570][ T9] usb 9-1: config 0 has no interface number 0 [ 396.054054][ T9] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 397.064443][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.168979][ T9] usb 9-1: Product: syz [ 397.177351][ T9] usb 9-1: Manufacturer: syz [ 397.624679][ T9] usb 9-1: SerialNumber: syz [ 397.781681][ T9] usb 9-1: config 0 descriptor?? [ 397.852869][ T9] usb 9-1: can't set config #0, error -71 [ 397.907145][ T8499] netlink: 40 bytes leftover after parsing attributes in process `syz.9.531'. [ 397.926651][ T9] usb 9-1: USB disconnect, device number 2 [ 397.964978][ T8499] netlink: 40 bytes leftover after parsing attributes in process `syz.9.531'. [ 398.018249][ T8499] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 398.177089][ T8504] loop7: detected capacity change from 0 to 512 [ 398.477376][ T8504] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 398.642419][ T8504] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #17: comm syz.7.527: iget: bad i_size value: -6917529027641081756 [ 398.735759][ T8504] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.527: couldn't read orphan inode 17 (err -117) [ 399.171797][ T8504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.696232][ T6911] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.609033][ T8533] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 402.779326][ T8543] loop9: detected capacity change from 0 to 1024 [ 403.043054][ T8543] hfsplus: bad catalog entry type [ 407.729918][ T8572] input: syz0 as /devices/virtual/input/input7 [ 408.096316][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 408.729990][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 408.761473][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 408.901139][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 408.970766][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 409.065920][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 409.143176][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 409.188913][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 409.240691][ T9] usb 7-1: Product: syz [ 409.764330][ T9] usb 7-1: Manufacturer: syz [ 409.907458][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 409.912780][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 410.855001][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 410.861414][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 411.253032][ T8605] loop9: detected capacity change from 0 to 512 [ 411.300864][ T44] usb 7-1: USB disconnect, device number 6 [ 411.309169][ T8605] EXT4-fs: Ignoring removed bh option [ 411.355390][ T8605] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 411.614498][ T8605] EXT4-fs (loop9): 1 truncate cleaned up [ 412.245446][ T8605] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.599519][ T30] audit: type=1800 audit(1753648926.387:28): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.555" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 412.924107][ T8621] loop6: detected capacity change from 0 to 1024 [ 412.971245][ T8621] EXT4-fs: inline encryption not supported [ 412.999064][ T8621] EXT4-fs: Ignoring removed bh option [ 413.032503][ T8633] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 413.147862][ T8621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.940390][ T8640] loop7: detected capacity change from 0 to 1024 [ 413.967302][ T8640] EXT4-fs: inline encryption not supported [ 413.973289][ T8640] ext2: Bad value for 'debug_want_extra_isize' [ 414.006314][ T6898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.429390][ T8646] tipc: Enabled bearer , priority 0 [ 414.721822][ T8653] xt_CT: No such helper "snmp" [ 415.001616][ T5829] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 415.079306][ T8651] syzkaller0: entered promiscuous mode [ 415.084817][ T6909] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.130506][ T8651] syzkaller0: entered allmulticast mode [ 415.226961][ T5829] usb 9-1: config 0 has no interfaces? [ 415.232539][ T5829] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 415.439423][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.459119][ T5829] usb 9-1: config 0 descriptor?? [ 415.548255][ T44] tipc: Node number set to 3087467459 [ 416.287177][ T8651] tipc: Resetting bearer [ 416.818527][ T8645] tipc: Resetting bearer [ 417.105547][ T5855] usb 9-1: USB disconnect, device number 3 [ 418.287272][ T8676] loop7: detected capacity change from 0 to 16 [ 418.370892][ T8676] erofs (device loop7): mounted with root inode @ nid 36. [ 418.395295][ T8645] tipc: Disabling bearer [ 419.240492][ T8685] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 419.704306][ T8689] syz.7.572: attempt to access beyond end of device [ 419.704306][ T8689] loop7: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 419.734046][ T8689] syz.7.572: attempt to access beyond end of device [ 419.734046][ T8689] loop7: rw=524288, sector=40, nr_sectors = 64 limit=16 [ 419.755915][ T8689] syz.7.572: attempt to access beyond end of device [ 419.755915][ T8689] loop7: rw=0, sector=8, nr_sectors = 32 limit=16 [ 420.286056][ T31] INFO: task kworker/u8:6:1099 blocked for more than 143 seconds. [ 420.293968][ T31] Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 [ 420.484733][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.493465][ T31] task:kworker/u8:6 state:D stack:17728 pid:1099 tgid:1099 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 420.623080][ T31] Workqueue: ib-unreg-wq ib_unregister_work [ 420.659861][ T31] Call Trace: [ 420.685295][ T31] [ 420.688329][ T31] __schedule+0x16fd/0x4cf0 [ 420.758680][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.815360][ T31] ? schedule+0x165/0x360 [ 420.844464][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.860109][ T31] ? __pfx___schedule+0x10/0x10 [ 420.893069][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 420.917042][ T31] ? schedule+0x91/0x360 [ 420.943261][ T31] schedule+0x165/0x360 [ 421.008281][ T31] schedule_timeout+0x9a/0x270 [ 421.077279][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 421.152351][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.222248][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.302560][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.399904][ T31] ? wait_for_completion+0x267/0x5d0 [ 421.464379][ T31] wait_for_completion+0x2bf/0x5d0 [ 421.479940][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 421.505471][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.534426][ T31] ? up_write+0x1c4/0x420 [ 421.544340][ T31] ? remove_client_context+0xc0/0x1e0 [ 421.549829][ T31] disable_device+0x1c6/0x320 [ 421.584309][ T31] ? __pfx_disable_device+0x10/0x10 [ 421.620868][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 421.664631][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.670522][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.684507][ T31] ib_unregister_work+0x19/0x30 [ 421.689466][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 421.704332][ T31] process_scheduled_works+0xae1/0x17b0 [ 421.754306][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 421.760423][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.774309][ T31] worker_thread+0x8a0/0xda0 [ 421.779071][ T31] kthread+0x711/0x8a0 [ 421.783212][ T31] ? __pfx_worker_thread+0x10/0x10 [ 421.804288][ T31] ? __pfx_kthread+0x10/0x10 [ 421.808993][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.824287][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.829677][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 421.844331][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.849706][ T31] ? __pfx_kthread+0x10/0x10 [ 421.854830][ T31] ret_from_fork+0x3fc/0x770 [ 421.859522][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 421.874281][ T31] ? __switch_to_asm+0x39/0x70 [ 421.879166][ T31] ? __switch_to_asm+0x33/0x70 [ 421.883994][ T31] ? __pfx_kthread+0x10/0x10 [ 421.894302][ T31] ret_from_fork_asm+0x1a/0x30 [ 421.899290][ T31] [ 421.915510][ T31] [ 421.915510][ T31] Showing all locks held in the system: [ 421.923402][ T31] 1 lock held by khungtaskd/31: [ 421.970059][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 422.004485][ T31] 2 locks held by kworker/u8:3/37: [ 422.009989][ T31] #0: ffff8881436e6948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 422.045764][ T31] #1: ffffc90000ad7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 422.078372][ T31] 4 locks held by kworker/u8:4/59: [ 422.083629][ T31] #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 422.104315][ T31] #1: ffffc9000210fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 422.124394][ T31] #2: ffffffff8f50f5d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 422.134046][ T31] #3: ffffffff8f51c1c8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x721/0xea0 [ 422.149713][ T31] 3 locks held by kworker/u8:6/1099: [ 422.180701][ T31] #0: ffff888021ea2948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 422.203227][ T31] #1: ffffc90003c07bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 422.223315][ T31] #2: ffff88807ca846d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 422.235304][ T31] 3 locks held by kworker/u8:7/1120: [ 422.240634][ T31] #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 422.252530][ T31] #1: ffffc90003d87bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 422.263799][ T31] #2: ffffffff8f51c1c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 422.273076][ T31] 1 lock held by dhcpcd/5507: [ 422.278716][ T31] #0: ffffffff8f51c1c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 422.292760][ T31] 2 locks held by getty/5600: [ 422.300509][ T31] #0: ffff88814c8b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 422.310745][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 422.334444][ T31] 3 locks held by kworker/u8:18/6500: [ 422.339996][ T31] 2 locks held by syz.2.566/8645: [ 422.353514][ T31] #0: ffffffff8f51c1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 422.362985][ T31] #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 422.382365][ T31] 2 locks held by syz.3.573/8690: [ 422.387827][ T31] 1 lock held by syz.6.575/8693: [ 422.392916][ T31] #0: ffffffff8f51c1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 422.406417][ T31] 1 lock held by syz.6.575/8695: [ 422.411535][ T31] #0: ffffffff8f51c1c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 422.421358][ T31] 1 lock held by syz.6.575/8698: [ 422.432006][ T31] #0: ffffffff8f51c1c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 422.442905][ T31] [ 422.451881][ T31] ============================================= [ 422.451881][ T31] [ 422.471433][ T31] NMI backtrace for cpu 1 [ 422.471468][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 422.471499][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.471515][ T31] Call Trace: [ 422.471526][ T31] [ 422.471540][ T31] dump_stack_lvl+0x189/0x250 [ 422.471579][ T31] ? __wake_up_klogd+0xd9/0x110 [ 422.471616][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.471650][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.471677][ T31] ? __pfx__printk+0x10/0x10 [ 422.471731][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 422.471778][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 422.471812][ T31] ? _printk+0xcf/0x120 [ 422.471851][ T31] ? __pfx__printk+0x10/0x10 [ 422.471887][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 422.471928][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 422.471970][ T31] watchdog+0xfee/0x1030 [ 422.471999][ T31] ? watchdog+0x1de/0x1030 [ 422.472031][ T31] kthread+0x711/0x8a0 [ 422.472074][ T31] ? __pfx_watchdog+0x10/0x10 [ 422.472096][ T31] ? __pfx_kthread+0x10/0x10 [ 422.472128][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.472160][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.472185][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.472213][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.472238][ T31] ? __pfx_kthread+0x10/0x10 [ 422.472274][ T31] ret_from_fork+0x3fc/0x770 [ 422.472304][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 422.472339][ T31] ? __switch_to_asm+0x39/0x70 [ 422.472371][ T31] ? __switch_to_asm+0x33/0x70 [ 422.472401][ T31] ? __pfx_kthread+0x10/0x10 [ 422.472438][ T31] ret_from_fork_asm+0x1a/0x30 [ 422.472490][ T31] [ 422.472499][ T31] Sending NMI from CPU 1 to CPUs 0: [ 422.658719][ C0] NMI backtrace for cpu 0 [ 422.658740][ C0] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 422.658769][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.658784][ C0] RIP: 0010:dequeue_entities+0x4d1/0x1520 [ 422.658824][ C0] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 32 4f 8d 00 48 8b 03 49 39 c7 4c 0f 43 f8 e9 f1 03 00 00 48 8d 7d 48 <48> 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 [ 422.658844][ C0] RSP: 0018:ffffc900038a7860 EFLAGS: 00000006 [ 422.658864][ C0] RAX: 1ffff110170c7408 RBX: 0000000000000009 RCX: dffffc0000000000 [ 422.658881][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b863a088 [ 422.658896][ C0] RBP: ffff8880b863a040 R08: ffffffff8fa1ddf7 R09: 1ffffffff1f43bbe [ 422.658913][ C0] R10: dffffc0000000000 R11: fffffbfff1f43bbf R12: ffff88807d390080 [ 422.658930][ C0] R13: 1ffff110170c740b R14: ffff8880b863a1e0 R15: dffffc0000000000 [ 422.658951][ C0] FS: 0000555562181500(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 422.658971][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.658987][ C0] CR2: 00007fa938f82ab8 CR3: 00000000226ac000 CR4: 0000000000350ef0 [ 422.659005][ C0] Call Trace: [ 422.659013][ C0] [ 422.659027][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.659055][ C0] ? do_raw_spin_lock+0x121/0x290 [ 422.659099][ C0] dequeue_task_fair+0x205/0x580 [ 422.659147][ C0] __schedule+0x5a7/0x4cf0 [ 422.659182][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 422.659220][ C0] ? schedule+0x165/0x360 [ 422.659243][ C0] ? __lock_acquire+0xab9/0xd20 [ 422.659267][ C0] ? __pfx___schedule+0x10/0x10 [ 422.659299][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.659328][ C0] ? schedule+0x91/0x360 [ 422.659353][ C0] schedule+0x165/0x360 [ 422.659376][ C0] do_nanosleep+0x1c7/0x600 [ 422.659416][ C0] ? do_nanosleep+0x7f/0x600 [ 422.659452][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 422.659485][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.659514][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.659539][ C0] ? __hrtimer_setup+0x187/0x210 [ 422.659564][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 422.659595][ C0] hrtimer_nanosleep+0x169/0x360 [ 422.659625][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 422.659654][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 422.659683][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 422.659704][ C0] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 422.659735][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.659769][ C0] __se_sys_clock_nanosleep+0x2f1/0x380 [ 422.659796][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 422.659824][ C0] ? do_syscall_64+0xbe/0x3b0 [ 422.659851][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.659881][ C0] do_syscall_64+0xfa/0x3b0 [ 422.659909][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.659930][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.659958][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.659981][ C0] RIP: 0033:0x7f0ed0bc1223 [ 422.659999][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 422.660019][ C0] RSP: 002b:00007ffe603eba38 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 422.660040][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0ed0bc1223 [ 422.660057][ C0] RDX: 00007ffe603eba50 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.660071][ C0] RBP: 0000000000000000 R08: 0000000013c3cced R09: 7fffffffffffffff [ 422.660086][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe603ebea0 [ 422.660101][ C0] R13: 0000000000000004 R14: 00007ffe603eba8c R15: 00007ffe603ebb20 [ 422.660134][ C0] [ 422.667778][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 422.667802][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 422.667833][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.667848][ T31] Call Trace: [ 422.667859][ T31] [ 422.667882][ T31] dump_stack_lvl+0x99/0x250 [ 422.667916][ T31] ? __asan_memcpy+0x40/0x70 [ 422.667948][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.667978][ T31] ? __pfx__printk+0x10/0x10 [ 422.668022][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.668057][ T31] panic+0x2db/0x790 [ 422.668086][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.668121][ T31] ? __pfx_panic+0x10/0x10 [ 422.668148][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.668176][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 422.668212][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.668241][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 422.668282][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 422.668325][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.668358][ T31] watchdog+0x102d/0x1030 [ 422.668386][ T31] ? watchdog+0x1de/0x1030 [ 422.668419][ T31] kthread+0x711/0x8a0 [ 422.668459][ T31] ? __pfx_watchdog+0x10/0x10 [ 422.668481][ T31] ? __pfx_kthread+0x10/0x10 [ 422.668514][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 422.668547][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.173125][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.178778][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.183986][ T31] ? __pfx_kthread+0x10/0x10 [ 423.188597][ T31] ret_from_fork+0x3fc/0x770 [ 423.193202][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 423.198326][ T31] ? __switch_to_asm+0x39/0x70 [ 423.203099][ T31] ? __switch_to_asm+0x33/0x70 [ 423.207872][ T31] ? __pfx_kthread+0x10/0x10 [ 423.212478][ T31] ret_from_fork_asm+0x1a/0x30 [ 423.217276][ T31] [ 423.220545][ T31] Kernel Offset: disabled [ 423.224875][ T31] Rebooting in 86400 seconds..