last executing test programs: 5m35.03236278s ago: executing program 3 (id=319): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x11, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x4, 0xa}, {0xfff1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5m34.949673238s ago: executing program 3 (id=321): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='7', 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ptrace(0x10, 0x1) 5m34.474747937s ago: executing program 3 (id=325): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") fstat(r3, &(0x7f0000000680)) 5m34.291284386s ago: executing program 3 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) 5m34.113995654s ago: executing program 3 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/firmware_config/ignore_sysfs_fallback\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') sendfile(r0, r0, 0x0, 0x7a01) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0x30000008, 0x0, 0x9, 0x5, 0x2, 0x0, 0x0, 0x20, 0x17ee}}, 0x50) 5m33.702749977s ago: executing program 3 (id=335): setresgid(0x0, 0xee01, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0xffffffd3) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3108049, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x20045a, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 5m33.535907294s ago: executing program 32 (id=335): setresgid(0x0, 0xee01, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0xffffffd3) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3108049, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x20045a, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 3m28.73292247s ago: executing program 1 (id=1452): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x20000000064e, 0xe, 0x200001, 0x3, 0x5, 0x400}) 3m28.174400687s ago: executing program 1 (id=1456): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0xc, r1, 0x1, 0xe2, 0x6, @random="fac3a30eaa70"}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3m27.75682581s ago: executing program 1 (id=1461): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f000071a000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000870000/0x4000)=nil) munlockall() 3m26.928975905s ago: executing program 1 (id=1467): syz_mount_image$f2fs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x1000800, &(0x7f0000000480)=ANY=[@ANYRES64=0x0], 0x2, 0x5524, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000005d40)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000005d80)='./file0\x00', &(0x7f0000005dc0), 0x800000, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$vfat(&(0x7f0000006180), &(0x7f00000061c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f00000062c0)) rename(&(0x7f0000006300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000006400)='./bus\x00') 3m25.665026746s ago: executing program 1 (id=1472): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m23.953397793s ago: executing program 1 (id=1486): socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x1a, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m23.695376539s ago: executing program 33 (id=1486): socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x1a, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m16.604463851s ago: executing program 5 (id=1530): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x400) close(r0) 3m16.302736673s ago: executing program 5 (id=1534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000900)={0x400000000000030d}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000980)={0x10000000000000cf, 0x0, [{}]}) 3m16.210571923s ago: executing program 5 (id=1535): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xfffffff9}, 0x8) sendto$inet6(r0, &(0x7f0000000340)="ea", 0x1, 0x10, &(0x7f0000000380)={0xa, 0x4e21, 0xe1, @ipv4={'\x00', '\xff\xff', @local}, 0x50be}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="3b50a4"], 0x1000f) 3m16.13584548s ago: executing program 5 (id=1536): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xe5093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 3m16.054715828s ago: executing program 5 (id=1537): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/net\x00') 3m13.291380334s ago: executing program 5 (id=1562): openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 3m13.003274543s ago: executing program 34 (id=1562): openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 16.571937139s ago: executing program 6 (id=3168): memfd_create(&(0x7f0000000000)='@,-&,$\x00', 0x20000007) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 16.36733524s ago: executing program 6 (id=3169): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8402, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000e80)="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", 0x2000, &(0x7f0000002e80)={&(0x7f0000002f40)={0x50, 0x0, 0x3, {0x7, 0x29, 0x9f53, 0x0, 0x691a, 0x48e, 0x1000, 0x7fff, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002fc0)="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", 0x2000, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005080)={0x20, 0x0, 0x1000000000007, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000050c0)="3f401314fd5620c8d0668dac2737d29ddfd4191f9c1aa4d7abf6b45d7de7324135c9903d38f89913b2cb78fbe6dbc9728cef99469af46e9bb9e4dd604961be65bdfb75acb637eaebf39377bedfeab96b5d43cdf5c040000daa7901857b57c5c6a6b5555f33a87c6e194e88237f9d9fb1292fb201f9bc701da5539673725ce5906888c6d17bf7b737146d35a4b18e733769f68cc217a0978cfecaccc598fcc53f98dea45e12c7c9423c831362ef2c3cbd962cfef080d15bb4816e24acbf4ab6315ab80fdeddbc627648d1c97b25a4ca444d0a032cf6447fbad8a1e107ea8690d323c36e753383bb804999e34978712b72afce5f69751f4b49385c0bfa78c20d91176130c592474ea1a6e1d55ef358d3b014486db67e640245526b1401198d73bf68b7e460f2b7b2fbc8354190916f2664f006afcd004d73eb042142750c888a6a98099efbd57c989ff6749ae6f3f5f63e2dc5f3b0325d79774209a4834b567b1ff3f6888ed0355bcd755866a413414fd10555ffb20d7ce7afe6f98633d4d41ea1a03d8a68dfc90a6ee54ca20248981d1552c9e5af5fa2b1e519691820060be39b8ea293352bc7345e1e911fa8700d6a91aac1aca2427607f10a0273f695ad615336426d5417ed3041b65f9704dac624550919b432f2803524d92e11c02221421fab9d8661dbcd51635910b624074c7c677879c9278ede3fafb24c5e7faadce53aa844c9683697530b5a94c1bb0456eceb1ba8489f264422cf7549f2c9525c171e29dd92704f95393884f11dd139c748024150940c98bb2e7b2252f046b80628af820f276060adb12ce97cc58574f5b3bca4027c178f510785429c992870d03d367e41d9f10753254addd0b5ccba1df45bf30d1625a8750d06c429b6e48c4682859b969238aaa6909a7b5ef56c0f9d46aa903a83255c4d65c453c3adeb6407feda11c8759ce7498ea4799127f70abf7641de5c9753762cd4dfd81f179bff35d31146ff20df4abee4213f9326f293345e8b83e8446610870ad6944cd20961c0578cddd0ea302aaab749910ed3c34f9659ab1637609d017259502d25d64e20cd8c14461cd7dcee58217b33c5af4dace6997c66a7344939914bd5797f418105bb8846a32b86265c88bb6ba13fc4176d1da065292d0a89b4cf5011da66f90857c99b6bc5b0c5c890543b7814059c69b8e379d87de1789c7fabf6e989f5773d478186ca1dd5c80e5edef2ad6617fb8c804381517eecf75856099878b6f1d1cf592edd5c13d76d08dc5b70d53c05ba4754b2ab738b4b6493861e9294bbbed301f49908dfb42e3558a1f5ed5c38eea9a0e15a462ca00579a8f960c0d0ae1d14734e85de6a3767ea6888d1f94a383ec42adc4f07d96746b22e5b326ecb1bc6c6fac6b1d5ffc80d5023301bf6f022364f1ba27ed5aa56c38049d2db90d1b2a92ed9ce3331e84da96d8b6436d078e24dce465c8b5e37d5f2bf1a53f6492b7da6bc44fa0d39d0bfd3fc4b376ad2023411841b472a109260585d79a692ac949ab300e739af3d4b03af8ee5560632aa22908a0054d33113e48fd754a6cf03edc4728546469e1d211c464aae34d2b7517e4ab07b94346da2736675ee5381ae68f758e04de89862ab2e115c47ee8f421d69d3c30a97a1311fada7e406c40bd693282c4c724e7c612d82b2abc440374b7c11814447f6a855ace13045c4aaa87a2ff8d21619711e90c56d7af680fb1eab9ea063e9cf9042e1d2774d8c93de96d8bd74ee2350715ed4a370f97e5cd5eccce9291032d5980d5c66394b32ad7195df49b3cf22b322a059e772cc5f679360800962daa1399845740f44e5fde4b73915a998f9e8cd7c2f9da536f6d209d8371789bea4994f795998bdb8033a0cd24240674f071ae5db9fb7ed634a8888245edc3ea36d764f7d925a5383634d9057b05760d0f8dfaacee0e77730bc6bc6adc84a36b374c0312de01a83c95190843f7fa831d0bfcbb6371c7b11cef98dd1770fec50a7bc704e6a88fd8bd8389b11163fa11c8362db1ad4320df7cf736f745aff83eb98c5960555c755df0ffa4f2b703621d47188bf8bc97d727382a93fa4a29c55e046f45e975df26f0fb165d24c8a93966190723343fe6e9ff4a9e55669ef4f6b14c32e3677031dd25feed48c047b678088a8fd12276fa0ec10946ea4d3a35ef118385d70030e68ccf9ecec7459c854302f27774defbe77afac772f4d86b6b1834ee85c24c41d840904ebe9242e3b4602324f859f60014f5861ca08276a27c832639d9e22bc64b14a0db1e3945b64b42f8ee7d1464482ae7ba8fdf1efb2c6282939ad9e3e3b362c17bd6aefd6bfbcf7f4c8dd70b9bb3e67b0da57c59cc7ee1282dc4255da13e047afdb692c73336424a38703a7a3aafea7d4013b671ef21748e9c3ad0d6330ed0545f286a7c816435ded485e1e0cdca373e9722559a883fe28889f1e220453bf3620e5d9f797922551054d392742472fbf9d9e210dacc1dcccb10034537ccae42f8d4c9c8eeb1a75c5e294410fa085f4654a54129a99cd3cc6e39209ec4509cfc44dcd41da334e7c1d8eeaea4e77e1219f2e3a74e36c6f7773f2d1921146de319f4927fa03c32b1c8f6ff73d0bad9523f12779fd6946f91a07302c43825b376d5db592acfcb698ff0712e633c052455dbd98bdd9104b28bbe4be9269880bdf8af7bebf8dfad5a7ebdcd1c133966cbb6bd3d24eb33cf9aff6d381b26c76c03214d72468dd91d26f092f79d1e35d3ab5b398351225f2b49792406247f47af7213c58fb586588f775a36fa9b9bb8cb83110d57d76aef26d75de8e94a1bd1e4f39bdbef7b2c3b6dee803a659585eead83b703b47eedf66c90fa112a1ac09a975add02d4b76d7bc1ec3007de93463106d51fcf2265dc00b02451af8b17b59d814f64d49445a4e61c609045d9a551ac8780e864137cf77807ed5ebd1fed5df49e6d5d491aedfa04630f7030ed48343c654444dd094f30c506db27b88a432267382b1b2f551164d8a6ec1619b8fd92955a9cad8596e490050d059f7f11f4b44a3c360ae2ab785a94e69147cec13e609b777c95639a435efdb818c586f2bba1e575a893f74d7bd37d86a34f6f906d1380bd6c1826d38ef7104fbfa383c931770051a9e67fda5e6f6ba4d184cc1cf49193abf79cfb801f949543abe9ecca95658fac8ee5e2893e86685b1296dd356711176d98ea16d984e78607dcdfa85829cad39fdb9821f16b01a529a2d334599a454ac537454a42f86ddf5af360bea409641c6405b5742e4ac04882246a307410f9965b4b86936bc6ab4f7e5c4328cfdb9771e1c3844a72711c70e13a427f01f38fc219016947130d0ec4d080cc3b40e09d6c0903974da1d3081f86be2785d1de542c7f97716fd4a63b1e658aa88452d99c56e5e788e2627b024339f4c7785dc099abb85e5ffdc652b6915bde1876fbda6f74f95a969a0619e39b2079d1bc76668c5cced7e7a67eed5277dd2853c272649539343431f37ffe5eb289dfb014b23c7d7c24b775c00ba7ff742e209fd0b5438d2241a49718e778ff41ffc259b708edcecc4b533c1307747245f35a8fdee85c3e8d1a9ee66c6d676e04ad087fc735765f9e8efb151b8323ca3ceea2d6d958c8d1f4bcd90cc50fd940ed56b52a5b4a3fb23f9f85131d4b8939f71fe01d538a8fe2de89f717760e9802092e0e86a8ce55ba350598d738c950778901eb4b6c89d28e272ce6044e0e7088d0b100889ade9711a44118c2b9a37dd3c843e85db29d876bd57bd46c15a5899c577f05c08229a47623e7de5bac6f69e30a2098b1e765abb5380905977aebb0572990dc1ef5cf2006c4c94e27afd946defa7658226bffa8ddc487d9f74cc7e3b60963f3320cc004f9ffc5e1c9d8e810036bc8195ed2096676b9b23f9a2148563cd61565ef611f15def4aee718315c3666b75ab5494c62aac33474df5a899eeae1f8f932ba203bfbecebe922b5c9fb5477bdc4409c4908bc86b138756aef79f28f6f1e736ef3cdfa5c8dec49d48ce4947e84993091e4e0bfbf5ebe8577ac4bc1f18519a6bd42baaba75077740df10af61e09e5fda6eec289394a109dcad893cb05913bd51fa4f6cf1d436e623057366c5fd3c411cf2c9442a385aa068ce10473c665ecbe18d1d3871dc720f277c7dc50c91aa3b22e905dc11667f76c18de1d8bdad4346307b3dae57dce39625cba77fa8527aa5d176fe66c9c0fd8508bd972e15665b8adddf43a53c54d5bf939dbe2f2f22b841c7794d65c6befe75ec42c53ea533d508f81ac92a3022f08123d5073fef798b42decdb4b7e9ad85f35711e4b3fd197213c71cfb2eef7820c6c85d966e152cf215d052c84d13521202b2635c84a17018d74554e757628bb68be3566976966bd9fae4414375b2c9e227362bc05d3e67e46e2f7aac2af8bfab1eaa88f10be17e4df997595aee928b1ff6dd07b5868facb1255c4ec652217b83525b95dfc5e07f43402be786dd8c3da2c6b3730307759a698ee6d196c4672431acd13c87a3e7ad6460a01a361c665a7be4878866fde59e7193a5afce617f61bf0ce94d22e8514dcbf8fdf8196590caaa44db05b3af0cb363832e7e5f6f800ed289b1a3f5756a99a4e06606b8ba6293121b81eef558f5a7121549ea1395c8053be42fb338636f483d60266f75847eb0b34af8d1910db288864c323ac0b5243542686d55a552a3a47ef5398616880a26359c5318ec0fb02ea040e45cba5df1aec566ea4ec2feaeb02df7dccc43f7c138f1f533a165fcb853aa4bef27c8b3133903f5a4595e400da1c74376a02b7112799b9b1918bd511e4b537cbcfd026bf0baeaecd98ebd3503da01523408bbd1667a2f68c72ca56a02400f82bd4af0be2e73ad35dc92ba520d882795f9a6bb3848d034cbc4f0916ed1bcc48841c8de84fe4c0292d761f6216b9cb9738ad242650b1df24c650b3ac6b1ce4a4e6c78ad48f47f76f7c289a8dbae3a58c1eb31dcc864856e833f2a96d5a33a98feb302e99fe335fe4fc625fb477bfd71118cf611b28f6edc641dcd606147d915a05039602d2d57c230a0897621bb4b260583bbb8fe2e5bd57d2b52dddff8895df9c40bf488ec339f83011ad7eb859c71657f89909065eac88e911b71b37fd1853537cb46cf3aa006a5ad1c4eebf00f658fffed413bc7da55ff2494d27e06d5fe5db28ccd1d87e2cb64e82c6ad054d1aeaf015d6d1b43360ed1443c1a74c0e6306ac8ca7395cc4bbc73dd79f68892386cd0dffbb1d42d5ded5a60d5526671b71019a1db250931df2a8fba577cb065afc3791ec77490aa5b9ac9e4f9dd7973c63199386b5186a636047929f148dd8d64414d55e21317d7db500dbc29aed9878077df64d2df412904a0a49fa68412ba2ac2fffc99a15b3388e4cdb04687bb53654b94f9de44ddab8c67f6c9ae970ba623dfc9505decc3b15cd621a0219748ab6cef1b7bed555cdf94628d378ee5effb79785352b9b3079d361db219ca1f12d0b450aac9eed1cef18c593e120fcc25fd78a31742e953cd1b6cdac65ad25191535e650be1a291bf3001606b872fccc83f4169da3081383943bd7e1f7cd53c1afef511920cbcbb5fc9089df920063ac825eede0d370cc235cdbd41ef144276aedc3d835bf7a8afc40e305391b4be155f0738fa87b9cd4d3782cd7b43a777a99bfbb82c80772033654a94487458a22ee054751966a2f43cb800d59fcca5cf5c4a1d9de6ff9846a0418a85112da0777cbb61af167186200a27115dd06494301456ce7ec2fac7db1e9fa7361bbc2fa667f2580dd8d6663c434ffa9ed8cc01047448d9f0714b42fea5e043275498ab48fc4682032eda4d57b6bae24d18a2b7ce63892a93782c563b59963d9c85e3d715119b1041c5dda0dba1603ccef0770c737114fe1318f450a2178124de9c7b50d0f30cdc7963e9c699a0c01b067e8cbe650fc5529d3b2de62409256ce240803953c0c1b7705a901b9c4c214992972f1491baba9aab2316d97ddbfcd5d363ee0b622e66be41cc824838e4769f632f7726863d1c340696ad1386ead41a4e3263701248fe6ca9682ddee53b779b59658cb07217efc784dfe23015890903bd497c459c57ee82896dc6fb491ace9f78df7102f2dded7372c8b74dab293c073bec8abc11e17a0692f7e0c23c6bc8fb4100ffb50c20dbb98aa61141b8c2e986ff1702be49e102ad1b3ec72e55157dbc933510c25a2183c6fae393ac2d98dfbf82f1b7493ce01eb3ec9275c5f7968d1f226936295fd064005bd5bfbbe4b84ceca3c4ba25a47f1837dddc69523c66c8ddfb003c9ce8189f79cb95dfd71bf680557e93b61aa4550a3ecaf08de7992ca75b8a955a4b59669176081a247fed6b3eada3d0aa3ee1b7b7323ec265002d4af768b099bdc15cf481c4244dae25daf8147700cfb7a6f24e7c5d9ee1c62e4bc02e91996dae38ad2d47f37d3c74e99944058039528593eb3b3cdda69216eef34b57c744ac5dbfbb4a342b06e5656faa0e29fff20a93301851e5256ef981859ae3ac09827e940265acdd3232126f01f6a2b65c43b658a1e4ed7450d3f048067e70c3bf25cbbdd11b94ff9f941bd60dcf97a002cdc1d5883e168232dd6b6ab3b754a93d8fe786e85d93ae9c75e75a50e4973dc33ade99dd91522971d9313cfcff34b3eac570c6bf9aec5909a8291f68f71da9f03194ac84982e9ba2a7a5e3368ed5d8cd6d214b847e2d7f9db6f646c940306943e16d6d6f5cf476d23ce6baff204da70d9e1add1eb0f5b6cb4b33120817ae6fd6052ce98eb569d0fb280d1348c69a141bf68c8e1db5b8a11999ccc7eb38702c11d21aa702f96fe5b74e0e581136ba8e97176867174da6d6e701bc6b93caef202a2a33b7c0ed220876f8892e9e5321ad8d2f6a301a6d3486ecbc1b0c08706ffdfa3be6efa74b6318879a60f0543d6d3e0fc2cf66cbb9d4b4f92fb5215e9087748009a21159290917880d5b1620289d3619e23fc3c7662c89f5fb94b815ddf35ce52a1aa398c9d899409456aa96bcac927fc33994a5fe6c0cb318ea72f5bfe9bbb201c72f10a09c9a74476f57747d75da3d25425607a61cf596863a5210cf6d955abf246a88649ce06c302bbc3e60cd4f8cad1897cc40c0f5d2a8fca29fb86c3a4bd2593f819dc92c93a8b5854f6fe08c6ad742c9d1a754e29c9007e42f3e46f092aeaca73272c0f66b0a27b36117e0ccb6a72c6500698ae5edd1728d457c75683168c1a748cf05d815a966bc98dec258d1c4e8f414b46fe72dc3a6ae09976899ad5ce7102368ea9224cd824a58c89e009667ea1f9cd4925796c30e49899842ed776148635206f5b25b8c46a414a9e74eb82d6662cda45d351d6e73cac02e519c2923766fdb194b52f7ee7c1a53f889fdde63be1d0944a70acc530357a0387208d5351cdb799373bcdfa460f0f16682a9e17ebf994aa4a03c2f901e7d270c1e78a7fefbca951d294fd201f0ee096479ab2441460cc87f003956548a7ca0d59e90896a47f6281e6932ce04e5f8a2d36b57ffbb9818d96ef7d2d4bdc71d7d6d18d0befe84c6620043f78a42743d720516145db3fa30265ff15dad6251f1f3918123ad24149cc1f5e05d22d48c72ad922482064b45df573d85d02448bc6fd4474d995dfdae76a97d846a0f3ad7ee74a4ab838f3aea04c6db0a042bf0956d83c9f5b0d3b00fed180cb949a5a41b20804426d904dfc960b0f8dddcb317f7d96f03ca1179ece42650efadd32da69d111ee2dcdecb935390dd109f380e13fb858ac2f68439c55365686d5d2ea52c4358940e7781cba59ce7944d486dec94c5bf8078da03b2838f18c253bb29498aa63ea5c443375ae6c1c331c2a71e4a67ba06ccfcc15ed53fe5ded6a0b554cdacfe21384c671e54c2ffedf4952b1d4bb976dbb78b8e1e59c7eaa8b976086c1944153c9bf34756f600558b6d7ff6d97dc494840de09a71d4821d8395c3405e8ed91f8f51c0e10dd1c6bce1dc82eab2061e762b2a1acd6f54608bc67d21691978dace0bdeb4d3b8709fc77f1efe6021fb161f062dba943d323ce21c7786d2750f53a3f7856395ac5700151057a3f1a71b1832609cf5ac5841c687122fb6d1f2861ad490b8325c9cd561e0f9dabfd6da97d354a6a8867b8a3bb2a477f9c8a2c406905e544e29c38cec24e4f03afac4f3f1b476cdf0d6fbeee31308efed8affa3f93238d96968c7933019e55dbc2088d997bd54676cf7616c5ad0569ddc7d149f0dc7810dff56f9a0c2945cee237daa81a7d1049f5aaa553c54709e788067510ac1aba968413a356f9c1861344d59b237fc38c23c48b96bef54f1cbeba996cec9db6eb39de9868bbfb31a8fe69ea8fc96b21855bf64ef516a7818bce50046b5b8b6eb1618ff9571cc2aed78653474f33ed63ff74c78f78491b7f466298061f5ea636f54910c44cff1f12d6c087c68e47fd860449789068743d16c9cd6053701147ba78be0f3c178b3a486a6df50b486f63b428aa8d706cbb99a83d88a775f2ae6146ec2c94a54090ac426b76a5303ccceb59bfee11d44d9963cfb11fdfcf3446a980dd4f61117b000ceac73b9e8cb66b3baf00ca7dd3479407f1540364d69f4b57f34ce724949d52cffae6033ad7cb523b3084d0cd0f5da336515f9c55b80ac4faeeb2999add12c20e2f15833c6c8d43d9e866b2ae01c3de8f32c3124880882fcc1a27667008bf1c5d616b4fcae50b4193095757f9aaae561fe98f9668654fdca43b03a8e0ccc0ea62d7705b07a2b6300712dc6cea48eb3cb94159531db3de00d83ec7b933fc04d7b920c80d3a8773a73aff8f46172a6b5a3740fb002ccbcc67259f7f095576a1459098e4d7959f0ea0732f2d3b6fbc030cc132f4d2300bacdfed0094d685daabe3c596103f688d78125fc3375ef84de913c46a6432ef12578db2158938344b2f13197520c68a0ee9b5f83cb6e71ebbe70f1c655bfa26fb9bdedcd8f81c4d93ad04fa2600e1bf524438b89d4da77f9c4d311dfa32659fb5040bbb3115d9c359382c657490633c01f739e0424b81a70a9bf0f33ebe045bdc66cce6fd760d492a8af6d01d989ed4411e119b91609e35f61f84c962cb49079c2f0c1e1b2a374d6944aa7f55b861de330d5a49b4750943962096217cbf08618cc3524ac1b950808dafe50e3f549e28b8e75dd454528c44daaafa26c5df82969774015e16295dde8fe6669bd03f54fabc953788bafb75585a9d48c71c5744dbf0ea8a0f3480ad24c6d8d5ab98c958298f3f8a43ec855c660e23c7531c08b84587ec2e49551c5813353d08369b3afbf97d6a5513c65f01c8acbf6c29d332811a0a20217060eab6132637114786d340f57f6b0f82f573858caa5f36ad37aea857b1f0a58fa4b9d24cb03cf9737960e795cc81ef657b2f27ae00e2abfc268460227048a0cabd81aca3220aa8dbca7a5c811247927bf7b7f3e080ce82f83410fd65739c7614e8889532c348ef7fbf760610d2fe6a3ca2ebe736ab0c7b0bdef20e19d8f80838fc4e1fd656583eb536fffb64fed09d4ab1746762445c2f17c1419d2eb0d8a377fbbad294f3e6f85b8205aa67a1e9171ab56e23088cd5f6401b7697ba3a8939629c53dc321935002047775ee78220e1aceba16af60ff38226f4fbe71bf79007c90b95b9486ae5dce82b19434fb92f171dc8ab23828e8f6449319b67b7b5d48fe482dfb48879e24ff51eaac81018aaa3409d9c5a62262d48544c59034c924f480027cc0950288e14dccd771735dfc45078b6f3a21035d3f163e7ac4009fd5a43f4fea36372dd140c111ced1e7f0c2630dd71a490688a21171e37b491582ce1146b640405978d95c8b8f915c04fa9ac4503529ff8318ff466d9b21515bb24eea9ab527caf407ec771ff9c322e001112e84a848de51a72575b7d633b5bc7cbbbb79ab0cecd91ed4b3c4cb06025ee3cd27444e899f0c8b488b06b26cb1d4696be072234ecbb9c5d37455c088d44dac794d2ede795a77262af667cef4fe8ebbad47ba3564c21f895f501b17b93249ff345646c1b87da83e3650c92c7bdafdab3ba8d2d472689b368e52b44788686144cfd6d4aeff8281f15c2b96c4c5386c8faa2a9d7d13ab1113b0bdea12da472827c2c93248584321773efe130d575bc9f120e1da5851f16d74d3e1a8caed3a5bd64427e1a53f07c0022394ddf539e07189f2d9691c827c7c6afab78ade178ba00b32c7409dee980afe6c442f067a17d72404f3be9cd34ecb86e8977d04aa9bae24d044414ca7a2ab0231ab3a873fc54ae58b1dd95dc212117151b3325e7bfcc6e1f6e27af52a4af4e507033606dbdc5997aa2e76ccd7dccb41194086fd12cebe034f0eaaa0e2c235698d833244e16a72dd2dfddcf3bf77bfdda91649d6cdab4d7bc581f2d17cdae7644b50cd30318b1d57896cd5016ee2cde6aebc09ea8622551c3cac5429b7a3f06896f3536cb1040b0ad8650099ebc3a414425e2f0e3ab4b08e9ec4f95894c20c104bd22d3ad04b07a2283e59eca4eccacfd50d80c4a18b575ce291bd650a8919566b1874c18069b6b91f436f0ea0878e5f2722e6c8a2bbe2fc3326e343e1299ede9b7ffc4f6e4c55c500b2c9bd5d849b93e0b9100677ee75d4690b7e2ed6f55129c5fed5f8c9aa3a83c80f932c82decf7d43f3bc095926b50d4899f5f3a7c99ab383c296aea7907e94f23c99ba3584c3ce429293c863e0d7f45cfa649fcc5af5cb8787dba84e6d800deee9c4d26bd6c922e1ac7cf567c26b840bb2a525d2101ee55260ec7c8b8a2808363f2dfebd55f8bb17101cd3338f6eea7fceba5fa17a6d1572b56e759b5b8cc0fcafd0a3f47068c4ddebb4dc41feb0855706447af363eacf0aa92c240dc86f5ed558fa5d1ab34b6b6167eae66c1a4a3cf86e00126a4c2b00209e39fc9f9f379205b56630cda6c0a8a81f60fd2ae2ae8590f3f16f912179ea8abee7ab010e4b8c27d0a3f7eff23d4e9c8591d6979774178f32fb22017efcd991f3c7686141df95b54463d01f446a250a6dc8c33224817faba9b5d23343e1f31221e9f6e9cbb0a8e7b1b5776f2333946b0da0ae39489cb05c33da875240822f1271980ddf3b04dce71b9638ee98e1dd63048c8644fc92505130366b7417d9fbce1b34bcbab1a7f7a2e50f6837e382709984be6878516b1eebb0345849b23bffbf4e16f7b08c261919f59a923c6cbc8755f8b280435a5fdccfa650b3652adaf5480f2f9546b3dcde8233fa03f1b34093e5547ffad05a4335e0c82a7637021797bc2e981b728a72d4a8ce706ff43733dabd2989c01ef5bc743f59de1ed3be0e569cfc8b110136ec86ea908cdd333536bb49bacd2260b19de951202838bafb038821c9c062219e399c56e81f9f0fcb4ed1e612b869f4b89ec22773a96e5a399bd53d7f2f492de8dea0c21bb8555ac2a30916f8e98bb2ccc7e3cecaf497a10e02ce14675d0ffa9cea9c6226f1380cedd463e9237710fb550f6ee866496d2d40c1a6db38fd55307f805b60e45cb94a43941cef8b248de370bfef9097d9b631d2970532303266f9f6e65e5b846b6adc0d817d92521679d7878182137e9467ec3138430f3100", 0x2000, &(0x7f00000070c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007180)={0x78, 0x0, 0x40, {0x100000000008000, 0x40000, 0x0, {0x1, 0xfffefeffffffffff, 0x5fffffff, 0xffffffffffffffff, 0x1, 0xfffffffffffffff8, 0x3, 0x8, 0x800, 0x1000, 0x9, 0x0, 0x0, 0x80, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, 0x0) fsync(r1) 16.122480085s ago: executing program 6 (id=3173): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 13.699837826s ago: executing program 6 (id=3182): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$FUSE_DIRENTPLUS(r0, &(0x7f00000027c0)=ANY=[@ANYBLOB="c452c876"], 0x650) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 13.586427777s ago: executing program 6 (id=3184): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x12148c5, &(0x7f0000000100)={[{@utf8no}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@fat=@debug}, {@uni_xlateno}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8no}]}, 0x0, 0x2d9, &(0x7f0000000200)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000500)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000680)='.\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 13.37248096s ago: executing program 6 (id=3187): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x6, 0x7fc00002}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) 4.865037898s ago: executing program 0 (id=3232): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0xe0881) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000440)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xa0c01) write$sndseq(r1, &(0x7f00000004c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 4.534493032s ago: executing program 0 (id=3233): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000019440)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000019480)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000019540)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000019600)={&(0x7f0000019640)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, &(0x7f0000019680)=[{&(0x7f00000196c0)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000019700)={0x0, @in={{0x2, 0x4e24, @local}}, 0xabbc, 0x67, 0xa4f, 0xc4, 0x28, 0xffffff89, 0xa9}, 0x9c) 4.344395811s ago: executing program 0 (id=3234): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = fanotify_init(0x4, 0x400) readv(r0, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/220, 0xdc}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000e80)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000ec0)=""/50, 0x32) 4.058736281s ago: executing program 0 (id=3236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x80) 3.448933384s ago: executing program 0 (id=3238): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x40891, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x4001, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x8100, 0x4001}, 0x10) 2.464231835s ago: executing program 0 (id=3240): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.463996366s ago: executing program 4 (id=3241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.273953075s ago: executing program 4 (id=3242): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 2.031150631s ago: executing program 2 (id=3244): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000440), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000800)="$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") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000980)='./file1\x00', 0x4000082a) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000a00)=""/129, 0x81) getdents64(r1, 0x0, 0x0) 1.882617796s ago: executing program 2 (id=3245): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000c80)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@nojournal_checksum}]}, 0x2, 0x797, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000a80)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r1, &(0x7f0000001400)={0x2020}, 0xfffffeb1) pipe2(&(0x7f0000000040), 0x0) 1.544428731s ago: executing program 4 (id=3246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001100)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) 1.393697826s ago: executing program 4 (id=3247): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000400), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000480)={0x28, 0x0, 0x0, @local}, 0x10) 1.135899433s ago: executing program 4 (id=3248): r0 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) mkdir(&(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='0.0.0.0:0:/\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 806.861877ms ago: executing program 2 (id=3249): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 581.84999ms ago: executing program 2 (id=3250): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000000c0)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000680)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) 501.531598ms ago: executing program 2 (id=3251): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@orlov}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000006112200000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdc"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 50.863605ms ago: executing program 2 (id=3252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000600)="360f013266b8010000000f01d966b8000001000f23d80f21f86635c00000d00f23f8660f388210ba2100b00fee66b9800000c00f326635001000000f30b822010f00d0670f353e0f23b0b8da008ec8", 0x4f}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000058c0)=@vmx={0x100, 0x0, 0x2080, {}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=3253): r0 = syz_create_resource$futex(&(0x7f00000008c0)=0x1) r1 = syz_create_resource$futex(&(0x7f0000000900)=0x1) futex(r0, 0x9, 0x1, 0x0, r1, 0x2) r2 = syz_create_resource$futex(&(0x7f0000000940)=0x2) futex(r1, 0x0, 0x1, 0x0, 0x0, 0xfffffffc) futex(r1, 0x3, 0x0, &(0x7f0000000980), r2, 0x3) futex(r0, 0x5, 0x2, 0x0, r2, 0x2) kernel console output (not intermixed with test programs): 3.611024][T11910] fido_id[11910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 313.739305][ T5848] tipc: Node number set to 2886997162 [ 313.817667][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.864193][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.878952][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.916188][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.944618][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 313.960963][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.235337][T11930] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1990'. [ 314.334106][T11930] team0: Port device team_slave_0 removed [ 314.344783][T11930] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 314.610440][T11922] rxe_eth0 speed is unknown, defaulting to 1000 [ 315.154315][ T9700] bond1: (slave gretap1): Releasing active interface [ 315.356605][T11957] loop6: detected capacity change from 0 to 512 [ 315.556873][T11957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.630755][T11957] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.975225][T10483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.014315][T11922] chnl_net:caif_netlink_parms(): no params data found [ 316.021638][ T5097] Bluetooth: hci1: command tx timeout [ 316.553055][T11990] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2002'. [ 316.581466][T11990] vlan0: entered promiscuous mode [ 316.738772][ T9700] hsr_slave_0: left promiscuous mode [ 316.745379][ T9700] hsr_slave_1: left promiscuous mode [ 316.756928][ T9700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.767284][ T9700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.796405][ T9700] bridge_slave_1: left allmulticast mode [ 316.802118][ T9700] bridge_slave_1: left promiscuous mode [ 316.808937][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.819979][ T9700] bridge_slave_0: left allmulticast mode [ 316.825803][ T9700] bridge_slave_0: left promiscuous mode [ 316.831593][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.303050][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.310273][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.458207][ T9700] bond1 (unregistering): Released all slaves [ 318.100721][ T5097] Bluetooth: hci1: command tx timeout [ 318.236901][ T9700] team0 (unregistering): Port device team_slave_1 removed [ 318.317412][ T9700] team0 (unregistering): Port device team_slave_0 removed [ 318.426768][ T9700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.567965][ T9700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.269124][ T9700] bond0 (unregistering): Released all slaves [ 319.437491][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.457124][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.472442][T11922] bridge_slave_0: entered allmulticast mode [ 319.491189][T11922] bridge_slave_0: entered promiscuous mode [ 319.549100][T11922] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.562371][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.569743][T11922] bridge_slave_1: entered allmulticast mode [ 319.579222][T11922] bridge_slave_1: entered promiscuous mode [ 319.690395][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.740219][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.817238][T11922] team0: Port device team_slave_0 added [ 319.863608][T11922] team0: Port device team_slave_1 added [ 319.935200][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2020'. [ 320.063963][T12046] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 320.094197][T11922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.131602][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.175978][ T5097] Bluetooth: hci1: command tx timeout [ 320.195684][T11922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.231467][T11922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.265754][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.304442][T11922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.368164][ T9700] IPVS: stop unused estimator thread 0... [ 320.455770][T12060] "syz.6.2027" (12060) uses obsolete ecb(arc4) skcipher [ 320.460774][T11922] hsr_slave_0: entered promiscuous mode [ 320.495247][T11922] hsr_slave_1: entered promiscuous mode [ 320.545737][T11922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.553347][T11922] Cannot create hsr debugfs directory [ 321.065769][ T27] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 321.095339][T11922] netdevsim netdevsim0 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.190052][T11922] netdevsim netdevsim0 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.264856][T11922] netdevsim netdevsim0 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.267462][ T27] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 321.313882][ T27] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.341145][ T27] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.359445][T11922] netdevsim netdevsim0 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.371544][ T27] usb 7-1: config 0 interface 0 has no altsetting 0 [ 321.390298][ T27] usb 7-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 321.418308][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.434215][ T27] usb 7-1: config 0 descriptor?? [ 321.474186][T12085] veth1_to_bond: entered promiscuous mode [ 321.498257][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 321.615384][T12085] veth1_to_bond (unregistering): left promiscuous mode [ 321.693659][T12085] bond0: (slave bond_slave_1): Releasing backup interface [ 321.823294][T11922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.856486][T11922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.881694][ T27] wacom 0003:056A:0000.001D: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 321.908908][T11922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.915075][ T27] wacom 0003:056A:0000.001D: hidraw0: USB HID v0.00 Joystick [HID 056a:0000] on usb-dummy_hcd.6-1/input0 [ 321.952293][T11922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.972215][ T27] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0000.001D/input/input22 [ 322.150579][ T27] usb 7-1: USB disconnect, device number 3 [ 322.255783][ T5097] Bluetooth: hci1: command tx timeout [ 322.348646][T11922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.367508][T12107] tipc: Cannot configure node identity twice [ 322.400978][T11922] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.420486][ T9694] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.427702][ T9694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.459573][ T9694] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.466774][ T9694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.892873][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.036893][T11922] veth0_vlan: entered promiscuous mode [ 323.083527][T11922] veth1_vlan: entered promiscuous mode [ 323.160024][T11922] veth0_macvtap: entered promiscuous mode [ 323.185189][T11922] veth1_macvtap: entered promiscuous mode [ 323.249368][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.278921][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.297483][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.324683][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.335370][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.347205][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.359464][T11922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.402059][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.414830][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.431107][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.445615][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.474580][T11922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.501851][T11922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.521271][T11922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.560313][T11922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.596179][T11922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.604941][T11922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.629174][T11922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.655028][T12132] tipc: Enabled bearer , priority 0 [ 323.911146][ T9701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.946032][ T9701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.018060][ T9701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.036724][ T9701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.147285][T12146] FAULT_INJECTION: forcing a failure. [ 324.147285][T12146] name failslab, interval 1, probability 0, space 0, times 0 [ 324.182930][T12146] CPU: 0 PID: 12146 Comm: syz.6.2044 Not tainted syzkaller #0 [ 324.190463][T12146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 324.200550][T12146] Call Trace: [ 324.203842][T12146] [ 324.206834][T12146] dump_stack_lvl+0x18c/0x250 [ 324.211557][T12146] ? show_regs_print_info+0x20/0x20 [ 324.216792][T12146] ? load_image+0x420/0x420 [ 324.221343][T12146] ? __might_sleep+0xe0/0xe0 [ 324.226012][T12146] ? __lock_acquire+0x7eb0/0x7eb0 [ 324.231068][T12146] should_fail_ex+0x394/0x4c0 [ 324.235777][T12146] should_failslab+0x9/0x20 [ 324.240302][T12146] slab_pre_alloc_hook+0x59/0x300 [ 324.245350][T12146] ? do_new_mount+0x34e/0xa60 [ 324.250090][T12146] kmem_cache_alloc+0x5a/0x2d0 [ 324.254971][T12146] ? alloc_vfsmnt+0x24/0x450 [ 324.259599][T12146] alloc_vfsmnt+0x24/0x450 [ 324.264044][T12146] vfs_create_mount+0x7e/0x3d0 [ 324.268842][T12146] do_new_mount+0x356/0xa60 [ 324.273384][T12146] __se_sys_mount+0x2e7/0x3d0 [ 324.278098][T12146] ? __x64_sys_mount+0xc0/0xc0 [ 324.282899][T12146] ? lockdep_hardirqs_on+0x98/0x150 [ 324.288128][T12146] ? __x64_sys_mount+0x20/0xc0 [ 324.292925][T12146] do_syscall_64+0x55/0xb0 [ 324.297374][T12146] ? clear_bhb_loop+0x40/0x90 [ 324.302086][T12146] ? clear_bhb_loop+0x40/0x90 [ 324.306801][T12146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.312739][T12146] RIP: 0033:0x7ff2b239fb19 [ 324.317185][T12146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.336822][T12146] RSP: 002b:00007ff2b334e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.345273][T12146] RAX: ffffffffffffffda RBX: 00007ff2b2625fa0 RCX: 00007ff2b239fb19 [ 324.353271][T12146] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000000000000000 [ 324.361275][T12146] RBP: 00007ff2b2437b70 R08: 0000000000000000 R09: 0000000000000000 [ 324.369272][T12146] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 324.377274][T12146] R13: 00007ff2b2626038 R14: 00007ff2b2625fa0 R15: 00007ffd08484258 [ 324.385290][T12146] [ 324.397490][T12152] loop0: detected capacity change from 0 to 512 [ 324.496334][T12152] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.2046: iget: bad i_size value: 38620345925642 [ 324.559620][T12152] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2046: couldn't read orphan inode 15 (err -117) [ 324.621583][T12152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.875263][T12152] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.2046: bg 0: block 5: invalid block bitmap [ 324.930699][T12152] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 312 with error 28 [ 324.954909][T12152] EXT4-fs (loop0): This should not happen!! Data will be lost [ 324.954909][T12152] [ 324.974288][T12152] EXT4-fs (loop0): Total free blocks count 0 [ 324.994014][T12152] EXT4-fs (loop0): Free/Dirty block details [ 325.008012][T12152] EXT4-fs (loop0): free_blocks=0 [ 325.020954][T12152] EXT4-fs (loop0): dirty_blocks=316 [ 325.033721][T12152] EXT4-fs (loop0): Block reservation details [ 325.041122][T12152] EXT4-fs (loop0): i_reserved_data_blocks=316 [ 325.116987][T11922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.426439][T12176] sctp: [Deprecated]: syz.6.2052 (pid 12176) Use of int in maxseg socket option. [ 325.426439][T12176] Use struct sctp_assoc_value instead [ 325.483967][T12180] loop0: detected capacity change from 0 to 512 [ 325.501445][T12180] EXT4-fs: Ignoring removed bh option [ 325.538539][T12180] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 325.603289][T12180] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.2054: corrupted in-inode xattr: e_value size too large [ 325.627335][T12180] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2054: couldn't read orphan inode 15 (err -117) [ 325.661316][T12180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.734421][T12183] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2055'. [ 325.891247][T12180] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.2054: Unrecognised inode hash code 4 [ 325.930899][T12180] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2054: Corrupt directory, running e2fsck is recommended [ 325.954801][T12180] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.2054: Unrecognised inode hash code 4 [ 325.972770][T12180] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2054: Corrupt directory, running e2fsck is recommended [ 326.158198][T11922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.833656][T12214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2067'. [ 326.869439][T12214] erspan1: entered allmulticast mode [ 326.930770][T12214] team0: Port device erspan1 added [ 330.235468][T12222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.620498][ T28] audit: type=1326 audit(1793817980.018:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.2.2091" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95ad59fb19 code=0x0 [ 331.980681][ T28] audit: type=1326 audit(1793817980.378:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.6.2090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 332.056175][ T28] audit: type=1326 audit(1793817980.378:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.6.2090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 332.115657][ T28] audit: type=1326 audit(1793817980.458:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.6.2090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 332.159415][ T28] audit: type=1326 audit(1793817980.458:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.6.2090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 332.205663][ T28] audit: type=1326 audit(1793817980.458:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.6.2090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 332.265831][ T28] audit: type=1326 audit(1793817980.458:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.6.2090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 332.315358][ T28] audit: type=1326 audit(1793817980.458:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.6.2090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 332.366714][ T28] audit: type=1326 audit(1793817980.488:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.6.2090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 332.417056][ T28] audit: type=1326 audit(1793817980.488:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.6.2090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 332.764995][T12336] loop6: detected capacity change from 0 to 512 [ 332.885345][T12336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.899062][T12336] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.713011][T10483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.347773][T12460] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2115'. [ 337.836755][T12460] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.886158][T12469] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2115'. [ 338.325665][ T971] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 338.531211][ T971] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 338.557610][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.587550][ T971] usb 3-1: Product: syz [ 338.591774][ T971] usb 3-1: Manufacturer: syz [ 338.611087][ T971] usb 3-1: SerialNumber: syz [ 338.632480][ T971] usb 3-1: config 0 descriptor?? [ 338.654930][ T971] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 338.891575][T12503] loop6: detected capacity change from 0 to 512 [ 338.945693][T12503] EXT4-fs (loop6): Test dummy encryption mode enabled [ 338.967688][T12503] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 339.038954][T12503] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.2120: bad orphan inode 131083 [ 339.064641][T12503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.163150][T12503] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 339.223389][T12503] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 339.282365][T10483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.139448][ T971] gspca_stk1135: reg_w 0xf err -71 [ 340.147690][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 340.154095][ T971] gspca_stk1135: Sensor write failed [ 340.166413][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 340.172780][ T971] gspca_stk1135: Sensor write failed [ 340.185784][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 340.192165][ T971] gspca_stk1135: Sensor read failed [ 340.205581][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 340.211953][ T971] gspca_stk1135: Sensor read failed [ 340.225794][ T971] gspca_stk1135: Detected sensor type unknown (0x0) [ 340.232464][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 340.245717][ T971] gspca_stk1135: Sensor read failed [ 340.250980][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 340.265573][ T971] gspca_stk1135: Sensor read failed [ 340.270840][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 340.277393][ T971] gspca_stk1135: Sensor write failed [ 340.282709][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 340.295637][ T971] gspca_stk1135: Sensor write failed [ 340.302266][ T971] stk1135: probe of 3-1:0.0 failed with error -71 [ 340.322480][ T971] usb 3-1: USB disconnect, device number 21 [ 340.760266][T12534] FAULT_INJECTION: forcing a failure. [ 340.760266][T12534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.785895][T12534] CPU: 1 PID: 12534 Comm: syz.6.2130 Not tainted syzkaller #0 [ 340.793430][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 340.803644][T12534] Call Trace: [ 340.806944][T12534] [ 340.809891][T12534] dump_stack_lvl+0x18c/0x250 [ 340.814591][T12534] ? show_regs_print_info+0x20/0x20 [ 340.819793][T12534] ? load_image+0x420/0x420 [ 340.824312][T12534] ? __might_fault+0xaa/0x120 [ 340.829020][T12534] ? __lock_acquire+0x7eb0/0x7eb0 [ 340.834076][T12534] ? __virt_addr_valid+0x10c/0x380 [ 340.839238][T12534] should_fail_ex+0x394/0x4c0 [ 340.843953][T12534] _copy_to_user+0x2f/0xa0 [ 340.848398][T12534] bpf_verifier_vlog+0x2f1/0x840 [ 340.853356][T12534] __btf_verifier_log+0xe3/0x140 [ 340.858294][T12534] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.864453][T12534] ? btf_check_sec_info+0x350/0x350 [ 340.869656][T12534] ? mark_lock+0x94/0x320 [ 340.874010][T12534] __btf_verifier_log_type+0x4f7/0x690 [ 340.879481][T12534] ? sort_r+0x17f5/0x1810 [ 340.883817][T12534] ? btf_int_show+0x2810/0x2810 [ 340.888681][T12534] btf_datasec_check_meta+0x46d/0xb50 [ 340.894059][T12534] btf_check_all_metas+0x371/0xaf0 [ 340.899183][T12534] btf_parse_type_sec+0xfc/0x1960 [ 340.904235][T12534] ? btf_check_sec_info+0x350/0x350 [ 340.909441][T12534] ? __virt_addr_valid+0x10c/0x380 [ 340.914728][T12534] ? btf_verifier_log+0x1a0/0x1a0 [ 340.919766][T12534] ? btf_parse_hdr+0x545/0x700 [ 340.924523][T12534] ? btf_parse_str_sec+0x20d/0x2a0 [ 340.929647][T12534] btf_new_fd+0x440/0x9e0 [ 340.933985][T12534] ? bpf_btf_show_fdinfo+0x80/0x80 [ 340.939096][T12534] ? capable+0x88/0xe0 [ 340.943165][T12534] __sys_bpf+0x670/0x890 [ 340.947432][T12534] ? bpf_link_show_fdinfo+0x560/0x560 [ 340.952849][T12534] ? lock_chain_count+0x20/0x20 [ 340.957718][T12534] __x64_sys_bpf+0x7c/0x90 [ 340.962138][T12534] do_syscall_64+0x55/0xb0 [ 340.966571][T12534] ? clear_bhb_loop+0x40/0x90 [ 340.971250][T12534] ? clear_bhb_loop+0x40/0x90 [ 340.975933][T12534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.981843][T12534] RIP: 0033:0x7ff2b239fb19 [ 340.986278][T12534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.005899][T12534] RSP: 002b:00007ff2b334e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.014322][T12534] RAX: ffffffffffffffda RBX: 00007ff2b2625fa0 RCX: 00007ff2b239fb19 [ 341.022303][T12534] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 341.030279][T12534] RBP: 00007ff2b2437b70 R08: 0000000000000000 R09: 0000000000000000 [ 341.038253][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.046226][T12534] R13: 00007ff2b2626038 R14: 00007ff2b2625fa0 R15: 00007ffd08484258 [ 341.054240][T12534] [ 341.101427][T12538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2133'. [ 341.113689][T12538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.121007][T12538] IPv6: NLM_F_CREATE should be set when creating new route [ 341.135997][T12538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2133'. [ 341.294138][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 341.361368][T12548] loop0: detected capacity change from 0 to 2048 [ 341.390799][T12548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.426874][T12548] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.507768][T12556] syzkaller0: entered promiscuous mode [ 341.507896][T12548] fs-verity: sha512 using implementation "sha512-avx2" [ 341.513312][T12556] syzkaller0: entered allmulticast mode [ 341.544729][T12556] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 341.635063][T11922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.790717][T12559] IPv6: NLM_F_CREATE should be specified when creating new route [ 341.802187][T12559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.809532][T12559] IPv6: NLM_F_CREATE should be set when creating new route [ 341.816844][T12559] IPv6: NLM_F_CREATE should be set when creating new route [ 341.824087][T12559] IPv6: NLM_F_CREATE should be set when creating new route [ 341.843067][T12559] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2141'. [ 342.174642][T12570] loop0: detected capacity change from 0 to 16 [ 342.191865][T12570] erofs: (device loop0): mounted with root inode @ nid 36. [ 342.611036][T12578] lo speed is unknown, defaulting to 1000 [ 342.623937][T12578] lo speed is unknown, defaulting to 1000 [ 342.633411][T12578] lo speed is unknown, defaulting to 1000 [ 342.688218][T12578] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 342.754729][T12578] lo speed is unknown, defaulting to 1000 [ 342.791534][T12578] lo speed is unknown, defaulting to 1000 [ 342.817256][T12578] lo speed is unknown, defaulting to 1000 [ 342.824507][T12578] lo speed is unknown, defaulting to 1000 [ 343.184514][T12582] loop0: detected capacity change from 0 to 32768 [ 343.197548][T12582] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2151 (12582) [ 343.220968][T12582] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 343.254362][T12582] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 343.267870][T12582] BTRFS info (device loop0): turning on async discard [ 343.284333][T12582] BTRFS info (device loop0): using free space tree [ 343.404877][T12582] BTRFS info (device loop0): enabling ssd optimizations [ 343.537454][ T9697] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.126385][T11922] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 344.638416][T12629] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 345.615787][ T971] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 345.801339][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.825613][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.840049][ T971] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 345.856167][T12668] loop6: detected capacity change from 0 to 2048 [ 345.862683][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.885002][ T971] usb 3-1: config 0 descriptor?? [ 346.028348][T12672] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.321692][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028a5bc00: rx timeout, send abort [ 346.343926][ T971] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 346.352621][ T971] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 346.359724][ T971] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 346.366914][ T971] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 346.374066][ T971] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 346.381415][ T971] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 346.388612][ T971] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 346.399860][ T971] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 346.540194][ T971] cp2112 0003:10C4:EA90.001E: Part Number: 0x00 Device Version: 0x00 [ 346.663984][T12672] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 346.705420][T12672] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 346.730946][T12672] Remounting filesystem read-only [ 346.742369][ T42] NILFS (loop6): discard dirty page: offset=4096, ino=6 [ 346.762648][ T42] NILFS (loop6): discard dirty page: offset=0, ino=2 [ 346.786819][ T42] NILFS (loop6): discard dirty block: blocknr=18, size=1024 [ 346.804670][ T42] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 346.824955][ T42] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 346.834070][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028a5bc00: abort rx timeout. Force session deactivation [ 346.837724][T12679] capability: warning: `syz.4.2183' uses 32-bit capabilities (legacy support in use) [ 346.860125][ T42] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 346.881411][T10483] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 346.901870][T10483] NILFS (loop6): discard dirty page: offset=0, ino=6 [ 346.915064][T10483] NILFS (loop6): discard dirty page: offset=0, ino=5 [ 346.922081][T10483] NILFS (loop6): discard dirty block: blocknr=41, size=1024 [ 346.929904][T10483] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 346.940381][T10483] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 346.956090][T10483] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 346.977144][T10483] NILFS (loop6): discard dirty page: offset=0, ino=4 [ 346.983887][T10483] NILFS (loop6): discard dirty block: blocknr=40, size=1024 [ 347.006233][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2184'. [ 347.018422][T10483] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.029155][T10483] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.038338][T10483] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.049304][T10483] NILFS (loop6): discard dirty page: offset=0, ino=3 [ 347.056498][T10483] NILFS (loop6): discard dirty page: offset=196608, ino=3 [ 347.065198][T10483] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.075220][T10483] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.113511][T10483] NILFS (loop6): discard dirty block: blocknr=49, size=1024 [ 347.126239][T10483] NILFS (loop6): discard dirty block: blocknr=18446744073709551615, size=1024 [ 347.318961][T12678] loop0: detected capacity change from 0 to 32768 [ 347.332455][T12678] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2182 (12678) [ 347.378328][T12678] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.401410][T12678] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 347.426985][T12678] BTRFS info (device loop0): using free space tree [ 347.549904][T12678] BTRFS info (device loop0): enabling ssd optimizations [ 347.576205][T12678] BTRFS info (device loop0): auto enabling async discard [ 347.914333][T12712] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2188'. [ 347.931370][T12678] BTRFS info (device loop0): balance: start -dconvert=raid0 -mconvert=raid0 [ 348.043856][T12678] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 348.083215][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2189'. [ 348.127438][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2189'. [ 348.342653][ T971] usb 3-1: USB disconnect, device number 22 [ 348.358419][T12678] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 348.482574][T12678] BTRFS info (device loop0): balance: canceled [ 348.577735][T11922] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 348.905709][ T5848] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 349.138286][ T5848] usb 7-1: unable to get BOS descriptor or descriptor too short [ 349.150429][ T5848] usb 7-1: not running at top speed; connect to a high speed hub [ 349.204956][ T5848] usb 7-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice= 0.40 [ 349.219150][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.235700][ T5848] usb 7-1: Product: syz [ 349.246088][ T5848] usb 7-1: Manufacturer: syz [ 349.255676][ T5848] usb 7-1: SerialNumber: syz [ 349.497681][ T5848] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 349.566838][ T5848] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 349.627382][ T5848] usb 7-1: USB disconnect, device number 4 [ 349.669580][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.863940][T12751] fuse: Bad value for 'fd' [ 350.228335][T12761] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2206'. [ 350.248543][T12761] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2206'. [ 351.600277][T12811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.802521][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 351.839209][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 351.916809][T12828] FAULT_INJECTION: forcing a failure. [ 351.916809][T12828] name failslab, interval 1, probability 0, space 0, times 0 [ 351.947996][T12828] CPU: 1 PID: 12828 Comm: syz.2.2235 Not tainted syzkaller #0 [ 351.955531][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 351.965596][T12828] Call Trace: [ 351.968878][T12828] [ 351.971809][T12828] dump_stack_lvl+0x18c/0x250 [ 351.976582][T12828] ? show_regs_print_info+0x20/0x20 [ 351.981790][T12828] ? load_image+0x420/0x420 [ 351.986297][T12828] ? __might_sleep+0xe0/0xe0 [ 351.991320][T12828] ? __lock_acquire+0x7eb0/0x7eb0 [ 351.996343][T12828] should_fail_ex+0x394/0x4c0 [ 352.001021][T12828] should_failslab+0x9/0x20 [ 352.005517][T12828] slab_pre_alloc_hook+0x59/0x300 [ 352.010549][T12828] kmem_cache_alloc+0x5a/0x2d0 [ 352.015397][T12828] ? security_inode_alloc+0x34/0x110 [ 352.020693][T12828] security_inode_alloc+0x34/0x110 [ 352.025810][T12828] inode_init_always+0x914/0xc90 [ 352.030754][T12828] iget_locked+0x21c/0x8c0 [ 352.035207][T12828] kernfs_get_inode+0x4f/0x6e0 [ 352.039977][T12828] ? down_read+0x1ac/0x2e0 [ 352.044396][T12828] kernfs_get_tree+0x57f/0x910 [ 352.049165][T12828] ? kernfs_super_ns+0x60/0x60 [ 352.053936][T12828] sysfs_get_tree+0x46/0x110 [ 352.058526][T12828] vfs_get_tree+0x8c/0x280 [ 352.062943][T12828] do_new_mount+0x24a/0xa60 [ 352.067534][T12828] __se_sys_mount+0x2e7/0x3d0 [ 352.072227][T12828] ? __x64_sys_mount+0xc0/0xc0 [ 352.077016][T12828] ? lockdep_hardirqs_on+0x98/0x150 [ 352.082215][T12828] ? __x64_sys_mount+0x20/0xc0 [ 352.086980][T12828] do_syscall_64+0x55/0xb0 [ 352.091396][T12828] ? clear_bhb_loop+0x40/0x90 [ 352.096070][T12828] ? clear_bhb_loop+0x40/0x90 [ 352.100746][T12828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.106640][T12828] RIP: 0033:0x7f95ad59fb19 [ 352.111052][T12828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.130669][T12828] RSP: 002b:00007f95ae3a2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.139087][T12828] RAX: ffffffffffffffda RBX: 00007f95ad825fa0 RCX: 00007f95ad59fb19 [ 352.147057][T12828] RDX: 0000200000000b80 RSI: 0000200000000b40 RDI: 0000000000000000 [ 352.155026][T12828] RBP: 00007f95ad637b70 R08: 0000000000000000 R09: 0000000000000000 [ 352.162993][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.170963][T12828] R13: 00007f95ad826038 R14: 00007f95ad825fa0 R15: 00007ffc91f79c98 [ 352.178949][T12828] [ 356.634950][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 356.634965][ T28] audit: type=1326 audit(1793818005.028:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 356.718882][ T28] audit: type=1326 audit(1793818005.028:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 356.794194][ T28] audit: type=1326 audit(1793818005.078:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 356.890478][ T28] audit: type=1326 audit(1793818005.078:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 356.958371][ T28] audit: type=1326 audit(1793818005.078:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 357.043837][ T28] audit: type=1326 audit(1793818005.078:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 357.115285][ T28] audit: type=1326 audit(1793818005.078:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 357.216500][ T28] audit: type=1326 audit(1793818005.078:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 357.275357][T12964] lo: entered allmulticast mode [ 357.308288][ T28] audit: type=1326 audit(1793818005.088:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 357.388239][T12968] loop0: detected capacity change from 0 to 512 [ 357.403485][ T28] audit: type=1326 audit(1793818005.088:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 357.427873][T12968] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.2293: corrupted in-inode xattr: invalid ea_ino [ 357.428173][T12968] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2293: couldn't read orphan inode 15 (err -117) [ 357.480342][T12968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.518498][T12973] loop6: detected capacity change from 0 to 256 [ 357.725815][T12968] EXT4-fs (loop0): shut down requested (2) [ 357.734580][T12973] FAT-fs (loop6): Directory bread(block 64) failed [ 357.755765][T12973] FAT-fs (loop6): Directory bread(block 65) failed [ 357.762542][T12973] FAT-fs (loop6): Directory bread(block 66) failed [ 357.774189][T12973] FAT-fs (loop6): Directory bread(block 67) failed [ 357.788241][T12973] FAT-fs (loop6): Directory bread(block 68) failed [ 357.808012][T12973] FAT-fs (loop6): Directory bread(block 69) failed [ 357.812628][T11922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.818869][T12973] FAT-fs (loop6): Directory bread(block 70) failed [ 357.839475][T12973] FAT-fs (loop6): Directory bread(block 71) failed [ 357.846282][T12973] FAT-fs (loop6): Directory bread(block 72) failed [ 357.865151][T12973] FAT-fs (loop6): Directory bread(block 73) failed [ 357.991292][T12973] syz.6.2294: attempt to access beyond end of device [ 357.991292][T12973] loop6: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 358.023815][T12987] loop0: detected capacity change from 0 to 512 [ 358.042413][T12973] syz.6.2294: attempt to access beyond end of device [ 358.042413][T12973] loop6: rw=2049, sector=1772, nr_sectors = 4 limit=256 [ 358.053228][T12987] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 358.060344][T12973] buffer_io_error: 54 callbacks suppressed [ 358.060358][T12973] Buffer I/O error on dev loop6, logical block 443, lost async page write [ 358.085381][T12973] syz.6.2294: attempt to access beyond end of device [ 358.085381][T12973] loop6: rw=2049, sector=1776, nr_sectors = 128 limit=256 [ 358.088964][T12987] EXT4-fs (loop0): 1 truncate cleaned up [ 358.108630][T12991] syz.6.2294: attempt to access beyond end of device [ 358.108630][T12991] loop6: rw=2049, sector=1772, nr_sectors = 4 limit=256 [ 358.115851][T12987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.129377][T12991] Buffer I/O error on dev loop6, logical block 443, lost async page write [ 358.174288][T12991] syz.6.2294: attempt to access beyond end of device [ 358.174288][T12991] loop6: rw=2049, sector=1776, nr_sectors = 128 limit=256 [ 358.466735][T11922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.256090][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 360.455659][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 360.470481][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.483410][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.502685][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.513864][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.524259][ T9] usb 1-1: Product: syz [ 360.528857][ T9] usb 1-1: Manufacturer: syz [ 360.533664][ T9] usb 1-1: SerialNumber: syz [ 360.784290][ T9] usb 1-1: 0:2 : does not exist [ 360.816649][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 360.899015][ T9] usb 1-1: USB disconnect, device number 20 [ 361.000007][T12970] udevd[12970]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.042856][T13054] loop6: detected capacity change from 0 to 16 [ 361.056513][T13054] erofs: (device loop6): mounted with root inode @ nid 36. [ 361.080802][T13054] syz.6.2327: attempt to access beyond end of device [ 361.080802][T13054] loop6: rw=0, sector=8, nr_sectors = 32 limit=16 [ 361.106536][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 299 @ nid 36 [ 361.116619][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 298 @ nid 36 [ 361.125922][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 297 @ nid 36 [ 361.135169][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 296 @ nid 36 [ 361.144789][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 285 @ nid 36 [ 361.154215][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 284 @ nid 36 [ 361.163576][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 280 @ nid 36 [ 361.174926][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 186 @ nid 36 [ 361.184273][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 185 @ nid 36 [ 361.194003][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 184 @ nid 36 [ 361.203751][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 155 @ nid 36 [ 361.213038][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 154 @ nid 36 [ 361.222311][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 153 @ nid 36 [ 361.231618][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 152 @ nid 36 [ 361.240943][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 139 @ nid 36 [ 361.250265][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 138 @ nid 36 [ 361.259537][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 137 @ nid 36 [ 361.268785][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 136 @ nid 36 [ 361.278152][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 128 @ nid 36 [ 361.287526][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 120 @ nid 36 [ 361.297567][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 361.306758][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 81 @ nid 36 [ 361.315915][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 80 @ nid 36 [ 361.325069][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 361.334241][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 361.343611][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 48 @ nid 36 [ 361.352786][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 361.361947][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 361.371100][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 37 @ nid 36 [ 361.380522][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 361.389680][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 35 @ nid 36 [ 361.399310][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 34 @ nid 36 [ 361.408461][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 33 @ nid 36 [ 361.417612][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 361.426860][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 361.436009][T13054] erofs: (device loop6): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 361.445609][T13054] syz.6.2327: attempt to access beyond end of device [ 361.445609][T13054] loop6: rw=524288, sector=296, nr_sectors = 32 limit=16 [ 361.459370][T13054] syz.6.2327: attempt to access beyond end of device [ 361.459370][T13054] loop6: rw=524288, sector=304, nr_sectors = 32 limit=16 [ 361.473841][T13054] syz.6.2327: attempt to access beyond end of device [ 361.473841][T13054] loop6: rw=524288, sector=1049264, nr_sectors = 32 limit=16 [ 361.487884][T13054] syz.6.2327: attempt to access beyond end of device [ 361.487884][T13054] loop6: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 361.796326][T13064] FAULT_INJECTION: forcing a failure. [ 361.796326][T13064] name failslab, interval 1, probability 0, space 0, times 0 [ 361.810251][T13064] CPU: 1 PID: 13064 Comm: syz.6.2331 Not tainted syzkaller #0 [ 361.817755][T13064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 361.827853][T13064] Call Trace: [ 361.831132][T13064] [ 361.834062][T13064] dump_stack_lvl+0x18c/0x250 [ 361.838757][T13064] ? show_regs_print_info+0x20/0x20 [ 361.843958][T13064] ? load_image+0x420/0x420 [ 361.848457][T13064] ? __might_sleep+0xe0/0xe0 [ 361.853045][T13064] ? __lock_acquire+0x7eb0/0x7eb0 [ 361.858086][T13064] should_fail_ex+0x394/0x4c0 [ 361.862773][T13064] should_failslab+0x9/0x20 [ 361.867274][T13064] slab_pre_alloc_hook+0x59/0x300 [ 361.872293][T13064] ? __x64_sys_unshare+0x38/0x40 [ 361.877262][T13064] ? do_syscall_64+0x55/0xb0 [ 361.881849][T13064] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.887920][T13064] kmem_cache_alloc_lru+0x4d/0x2c0 [ 361.893026][T13064] ? sock_alloc_inode+0x28/0xc0 [ 361.897877][T13064] sock_alloc_inode+0x28/0xc0 [ 361.902549][T13064] ? sockfs_init_fs_context+0xb0/0xb0 [ 361.907922][T13064] new_inode_pseudo+0x63/0x1d0 [ 361.912696][T13064] sock_create_lite+0x8b/0x500 [ 361.917472][T13064] __netlink_kernel_create+0xfb/0x7b0 [ 361.922854][T13064] ? netlink_set_err+0x3b0/0x3b0 [ 361.927802][T13064] uevent_net_init+0xfc/0x2d0 [ 361.932499][T13064] ? audit_net_init+0xf1/0x200 [ 361.937264][T13064] ? alloc_uevent_skb+0x230/0x230 [ 361.942291][T13064] ? uevent_net_exit+0x1d0/0x1d0 [ 361.947235][T13064] ops_init+0x391/0x640 [ 361.951397][T13064] setup_net+0x3b6/0xa20 [ 361.955636][T13064] ? copy_net_ns+0x530/0x530 [ 361.960220][T13064] ? copy_net_ns+0x347/0x530 [ 361.964803][T13064] ? down_read_killable+0x1d0/0x340 [ 361.970011][T13064] copy_net_ns+0x361/0x530 [ 361.974868][T13064] create_new_namespaces+0x3ce/0x700 [ 361.980165][T13064] unshare_nsproxy_namespaces+0x11a/0x160 [ 361.985894][T13064] ksys_unshare+0x4fa/0x8f0 [ 361.990408][T13064] ? sighand_ctor+0x50/0x50 [ 361.994910][T13064] ? lock_chain_count+0x20/0x20 [ 361.999763][T13064] ? syscall_enter_from_user_mode+0x25/0x80 [ 362.005658][T13064] __x64_sys_unshare+0x38/0x40 [ 362.010434][T13064] do_syscall_64+0x55/0xb0 [ 362.014854][T13064] ? clear_bhb_loop+0x40/0x90 [ 362.019534][T13064] ? clear_bhb_loop+0x40/0x90 [ 362.024217][T13064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.030115][T13064] RIP: 0033:0x7ff2b239fb19 [ 362.034529][T13064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.054140][T13064] RSP: 002b:00007ff2b334e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 362.062559][T13064] RAX: ffffffffffffffda RBX: 00007ff2b2625fa0 RCX: 00007ff2b239fb19 [ 362.070539][T13064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 362.078512][T13064] RBP: 00007ff2b2437b70 R08: 0000000000000000 R09: 0000000000000000 [ 362.086484][T13064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.094454][T13064] R13: 00007ff2b2626038 R14: 00007ff2b2625fa0 R15: 00007ffd08484258 [ 362.102546][T13064] [ 362.126972][T13064] kobject_uevent: unable to create netlink socket! [ 362.544300][T13082] loop6: detected capacity change from 0 to 2048 [ 362.586138][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 362.586153][ T28] audit: type=1326 audit(1793818010.978:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.2.2338" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ad59fb19 code=0x7fc00000 [ 362.598425][T13082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.719938][ T28] audit: type=1326 audit(1793818011.028:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.2.2338" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f95ad59fb19 code=0x7fc00000 [ 362.767573][ T28] audit: type=1326 audit(1793818011.028:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.2.2338" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ad59fb19 code=0x7fc00000 [ 363.124209][T13103] 9pnet: p9_errstr2errno: server reported unknown error ��n$Ž[ [ 363.124209][T13103] Q&|xù6mem [ 365.401000][T13169] tipc: Resetting bearer [ 365.550680][T13173] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 366.427832][T13206] loop0: detected capacity change from 0 to 2048 [ 366.473600][T13208] gre1: entered promiscuous mode [ 366.522247][T13206] Alternate GPT is invalid, using primary GPT. [ 366.532077][T13206] loop0: p1 p2 p3 [ 366.550157][T13206] loop0: partition table partially beyond EOD, truncated [ 366.561428][T13190] overlayfs: failed to resolve './file0': -2 [ 366.824528][T13215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2393'. [ 367.025967][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 367.235662][ T9] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 367.243821][ T9] usb 3-1: config 0 has no interface number 0 [ 367.263485][ T9] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.295606][ T9] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.320335][ T9] usb 3-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.335446][T13221] loop0: detected capacity change from 0 to 32768 [ 367.343598][T13221] (syz.0.2395,13221,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear [ 367.343598][T13221] " or missing value [ 367.357907][T13221] (syz.0.2395,13221,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 367.375964][ T9] usb 3-1: config 0 interface 16 has no altsetting 0 [ 367.387694][ T9] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 367.400217][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.412005][ T9] usb 3-1: config 0 descriptor?? [ 367.864356][ T9] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/0003:06A3:0CD0.001F/input/input25 [ 367.967184][ T9] saitek 0003:06A3:0CD0.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input16 [ 368.243639][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 368.320450][ T9] usb 3-1: USB disconnect, device number 23 [ 368.399810][ T5848] kernel read not supported for file /input/event0 (pid: 5848 comm: kworker/0:3) [ 368.969704][T13258] loop6: detected capacity change from 0 to 32768 [ 369.062171][T13258] JBD2: Ignoring recovery information on journal [ 369.242896][T13258] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 369.496256][T13259] loop0: detected capacity change from 0 to 65536 [ 369.539300][T13259] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 369.702760][T13258] syz.6.2406 (13258) used greatest stack depth: 17752 bytes left [ 369.756160][T13259] XFS (loop0): Ending clean mount [ 369.782666][T13259] XFS (loop0): Quotacheck needed: Please wait. [ 369.926239][T10483] ocfs2: Unmounting device (7,6) on (node local) [ 369.938599][T13259] XFS (loop0): Quotacheck: Done. [ 370.342044][T13306] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2422'. [ 370.382742][T11922] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 370.833786][T13319] tipc: Failed to remove unknown binding: 66,1,1/0:1451945990/1451945992 [ 370.914507][T13320] block device autoloading is deprecated and will be removed. [ 371.177248][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2430'. [ 371.652472][T13352] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2440'. [ 371.690356][T13352] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2440'. [ 372.035748][T13360] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 372.053731][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.083798][T13360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 373.241692][T13394] overlayfs: failed to clone upperpath [ 373.623103][ T8] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0020/input/input26 [ 373.635495][T13402] overlayfs: failed to resolve './file0': -2 [ 373.673233][ T8] hid-generic 0005:FFFD057E:0305.0020: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 373.915678][ T5848] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 373.953207][ T28] audit: type=1326 audit(1793818022.348:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13411 comm="syz.4.2466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3bf79fb19 code=0x0 [ 374.131550][ T5848] usb 7-1: unable to get BOS descriptor or descriptor too short [ 374.173899][ T5848] usb 7-1: no configurations [ 374.179015][ T5848] usb 7-1: can't read configurations, error -22 [ 375.246193][T13453] loop0: detected capacity change from 0 to 8192 [ 375.265506][T13458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2480'. [ 375.309234][T13458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2480'. [ 375.536159][T13426] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 375.712515][T13469] loop6: detected capacity change from 0 to 1024 [ 376.354672][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2491'. [ 376.378419][T13485] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.388335][T13485] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.397163][T13485] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.406046][T13485] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.433937][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2491'. [ 376.483907][T13487] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 376.732570][T13502] loop0: detected capacity change from 0 to 1024 [ 376.946984][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2499'. [ 377.770837][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2499'. [ 377.892251][T13520] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 378.054013][T13528] FAULT_INJECTION: forcing a failure. [ 378.054013][T13528] name failslab, interval 1, probability 0, space 0, times 0 [ 378.122769][T13528] CPU: 1 PID: 13528 Comm: syz.6.2510 Not tainted syzkaller #0 [ 378.130312][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 378.140400][T13528] Call Trace: [ 378.143703][T13528] [ 378.146658][T13528] dump_stack_lvl+0x18c/0x250 [ 378.151370][T13528] ? show_regs_print_info+0x20/0x20 [ 378.156610][T13528] ? load_image+0x420/0x420 [ 378.161142][T13528] ? __might_sleep+0xe0/0xe0 [ 378.165769][T13528] ? __lock_acquire+0x7eb0/0x7eb0 [ 378.170833][T13528] should_fail_ex+0x394/0x4c0 [ 378.175546][T13528] should_failslab+0x9/0x20 [ 378.180081][T13528] slab_pre_alloc_hook+0x59/0x300 [ 378.185136][T13528] ? tty_set_termios_ldisc+0x4f/0xc0 [ 378.190444][T13528] ? ppp_asynctty_open+0x95/0x4c0 [ 378.195474][T13528] __kmem_cache_alloc_node+0x53/0x260 [ 378.200850][T13528] ? ppp_asynctty_open+0x95/0x4c0 [ 378.205875][T13528] kmalloc_trace+0x2a/0xe0 [ 378.210301][T13528] ppp_asynctty_open+0x95/0x4c0 [ 378.215156][T13528] tty_ldisc_open+0x9d/0x100 [ 378.219754][T13528] tty_set_ldisc+0x356/0x530 [ 378.224620][T13528] tty_ioctl+0xc22/0xdc0 [ 378.228865][T13528] ? tty_get_icount+0xb0/0xb0 [ 378.233546][T13528] __se_sys_ioctl+0xfd/0x170 [ 378.238145][T13528] do_syscall_64+0x55/0xb0 [ 378.242603][T13528] ? clear_bhb_loop+0x40/0x90 [ 378.247287][T13528] ? clear_bhb_loop+0x40/0x90 [ 378.251973][T13528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.257871][T13528] RIP: 0033:0x7ff2b239fb19 [ 378.262373][T13528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.282189][T13528] RSP: 002b:00007ff2b334e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.290607][T13528] RAX: ffffffffffffffda RBX: 00007ff2b2625fa0 RCX: 00007ff2b239fb19 [ 378.298584][T13528] RDX: 0000200000000a80 RSI: 0000000000005423 RDI: 0000000000000003 [ 378.306553][T13528] RBP: 00007ff2b2437b70 R08: 0000000000000000 R09: 0000000000000000 [ 378.314522][T13528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.322492][T13528] R13: 00007ff2b2626038 R14: 00007ff2b2625fa0 R15: 00007ffd08484258 [ 378.330478][T13528] [ 378.752134][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.758619][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.999885][T13550] loop6: detected capacity change from 0 to 8192 [ 379.234025][T13553] loop0: detected capacity change from 0 to 128 [ 379.270038][T13553] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 379.462385][ T11] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 379.651248][T13560] sctp: [Deprecated]: syz.4.2523 (pid 13560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.651248][T13560] Use struct sctp_sack_info instead [ 379.673426][ T5868] IPVS: starting estimator thread 0... [ 379.692400][T13560] sctp: [Deprecated]: syz.4.2523 (pid 13560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.692400][T13560] Use struct sctp_sack_info instead [ 379.785787][T13563] IPVS: using max 20 ests per chain, 48000 per kthread [ 379.867441][T13567] loop0: detected capacity change from 0 to 2048 [ 379.882198][T13567] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 379.909088][T13567] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 379.921295][T13567] UDF-fs: Scanning with blocksize 512 failed [ 379.952430][T13567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.420009][T13582] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.194197][T13621] batadv_slave_0: entered promiscuous mode [ 381.215506][T13620] batadv_slave_0: left promiscuous mode [ 383.129911][T13719] loop0: detected capacity change from 0 to 164 [ 383.180601][T12970] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 383.910983][T13756] loop6: detected capacity change from 0 to 512 [ 383.920568][T13756] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 384.130064][T13761] FAULT_INJECTION: forcing a failure. [ 384.130064][T13761] name failslab, interval 1, probability 0, space 0, times 0 [ 384.148070][T13761] CPU: 0 PID: 13761 Comm: syz.0.2592 Not tainted syzkaller #0 [ 384.155601][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 384.165687][T13761] Call Trace: [ 384.168997][T13761] [ 384.171936][T13761] dump_stack_lvl+0x18c/0x250 [ 384.176642][T13761] ? show_regs_print_info+0x20/0x20 [ 384.181932][T13761] ? load_image+0x420/0x420 [ 384.186486][T13761] ? __might_sleep+0xe0/0xe0 [ 384.191114][T13761] ? __lock_acquire+0x7eb0/0x7eb0 [ 384.196178][T13761] should_fail_ex+0x394/0x4c0 [ 384.200876][T13761] should_failslab+0x9/0x20 [ 384.205407][T13761] slab_pre_alloc_hook+0x59/0x300 [ 384.210431][T13761] ? __kernfs_new_node+0xaa/0x7f0 [ 384.215464][T13761] ? rcu_is_watching+0x15/0xb0 [ 384.220234][T13761] kmem_cache_alloc+0x5a/0x2d0 [ 384.224994][T13761] ? __kernfs_new_node+0xe5/0x7f0 [ 384.230024][T13761] __kernfs_new_node+0xe5/0x7f0 [ 384.234887][T13761] ? kernfs_new_node+0x260/0x260 [ 384.239835][T13761] ? sysfs_do_create_link_sd+0x75/0x110 [ 384.245388][T13761] kernfs_new_node+0x14c/0x260 [ 384.250177][T13761] kernfs_create_link+0xa7/0x200 [ 384.255139][T13761] sysfs_do_create_link_sd+0x83/0x110 [ 384.260527][T13761] device_add_class_symlinks+0x1cf/0x240 [ 384.266195][T13761] device_add+0x4f9/0xc40 [ 384.270560][T13761] netdev_register_kobject+0x188/0x320 [ 384.276063][T13761] register_netdevice+0x12aa/0x1ba0 [ 384.281296][T13761] ? netif_stacked_transfer_operstate+0x210/0x210 [ 384.287721][T13761] ? rcu_is_watching+0x15/0xb0 [ 384.292509][T13761] ? __asan_memset+0x22/0x40 [ 384.297124][T13761] ? tun_net_initialize+0x1ac/0x480 [ 384.302348][T13761] ? tun_not_capable+0x1f0/0x1f0 [ 384.307319][T13761] ? alloc_netdev_mqs+0xc6e/0x1090 [ 384.312477][T13761] tun_set_iff+0x82b/0xea0 [ 384.316916][T13761] __tun_chr_ioctl+0x7e0/0x2070 [ 384.321797][T13761] ? tun_flow_create+0x310/0x310 [ 384.326775][T13761] ? bpf_lsm_file_ioctl+0x9/0x10 [ 384.331740][T13761] ? security_file_ioctl+0x80/0xa0 [ 384.336890][T13761] ? tun_chr_poll+0x630/0x630 [ 384.341607][T13761] __se_sys_ioctl+0xfd/0x170 [ 384.346240][T13761] do_syscall_64+0x55/0xb0 [ 384.350695][T13761] ? clear_bhb_loop+0x40/0x90 [ 384.355413][T13761] ? clear_bhb_loop+0x40/0x90 [ 384.360130][T13761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.366061][T13761] RIP: 0033:0x7fcdfd39fb19 [ 384.370507][T13761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.390142][T13761] RSP: 002b:00007fcdfe202028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.398602][T13761] RAX: ffffffffffffffda RBX: 00007fcdfd625fa0 RCX: 00007fcdfd39fb19 [ 384.406630][T13761] RDX: 0000200000000440 RSI: 00000000400454ca RDI: 0000000000000004 [ 384.414630][T13761] RBP: 00007fcdfd437b70 R08: 0000000000000000 R09: 0000000000000000 [ 384.422715][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.430717][T13761] R13: 00007fcdfd626038 R14: 00007fcdfd625fa0 R15: 00007ffde5a4bbf8 [ 384.438735][T13761] [ 384.955665][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 385.158596][ T8] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 385.167951][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.935882][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 386.604293][ T8] usb 1-1: Cannot set autoneg [ 386.616051][ T8] MOSCHIP usb-ethernet driver: probe of 1-1:7.0 failed with error -71 [ 386.635283][ T8] usb 1-1: USB disconnect, device number 21 [ 386.708468][ T5097] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 387.384588][T13839] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 387.422683][T13839] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 387.666816][T13854] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.675699][T13854] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.684877][T13854] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.693726][T13854] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.307363][T13880] loop0: detected capacity change from 0 to 1024 [ 388.327771][T13880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.422770][T13880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.464981][ T28] audit: type=1326 audit(1793818036.858:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.6.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 388.504768][ T28] audit: type=1326 audit(1793818036.858:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.6.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 388.531770][ T28] audit: type=1326 audit(1793818036.858:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13884 comm="syz.6.2639" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2b239fb19 code=0x7ffc0000 [ 388.561507][T13892] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 388.666487][T13897] loop6: detected capacity change from 0 to 2048 [ 388.690931][T13897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.919698][T11922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.616456][ T5097] Bluetooth: hci1: command tx timeout [ 390.078858][T13921] loop0: detected capacity change from 0 to 32768 [ 390.110907][T13921] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2652 (13921) [ 390.141436][T13921] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.174624][T13921] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 390.184940][T13921] BTRFS info (device loop0): setting nodatasum [ 390.191807][T13921] BTRFS info (device loop0): force zlib compression, level 3 [ 390.200566][T13921] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 390.210741][T13921] BTRFS info (device loop0): use lzo compression, level 0 [ 390.220303][T13921] BTRFS info (device loop0): turning on flush-on-commit [ 390.229123][T13921] BTRFS info (device loop0): enabling auto defrag [ 390.239349][T13921] BTRFS info (device loop0): max_inline at 4096 [ 390.257401][T13921] BTRFS info (device loop0): using free space tree [ 390.345686][T13921] BTRFS info (device loop0): enabling ssd optimizations [ 390.742965][ T5097] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 390.756599][ T5097] Bluetooth: hci0: Injecting HCI hardware error event [ 390.772950][ T5097] Bluetooth: hci0: hardware error 0x00 [ 391.091409][T11922] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 392.649360][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2676'. [ 392.657641][T14006] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 392.821608][ T5097] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 393.060950][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2679'. [ 393.791683][T14032] loop0: detected capacity change from 0 to 32768 [ 393.829612][T14032] loop0: p1 p3 < > [ 394.139814][T13052] udevd[13052]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 394.159204][T12970] udevd[12970]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 394.695856][T14058] kvm: emulating exchange as write [ 395.031450][T14077] rxe_eth0 speed is unknown, defaulting to 1000 [ 395.049900][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2703'. [ 395.222108][T14077] lo speed is unknown, defaulting to 1000 [ 395.418955][T14095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2708'. [ 396.114248][T14124] overlayfs: failed to clone upperpath [ 397.693105][T14170] input: syz1 as /devices/virtual/input/input27 [ 397.886579][T14175] loop6: detected capacity change from 0 to 512 [ 397.943914][T14175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.013997][T14175] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.173066][T10483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.406210][T14196] loop6: detected capacity change from 0 to 2048 [ 398.460524][T14196] loop6: p3 < > p4 < > [ 398.475918][T14196] loop6: partition table partially beyond EOD, truncated [ 398.483212][T14196] loop6: p3 start 4284289 is beyond EOD, truncated [ 400.108266][T14244] futex_wake_op: syz.2.2767 tries to shift op by 144; fix this program [ 400.133961][T14244] futex_wake_op: syz.2.2767 tries to shift op by 144; fix this program [ 400.202191][T14250] FAULT_INJECTION: forcing a failure. [ 400.202191][T14250] name failslab, interval 1, probability 0, space 0, times 0 [ 400.236619][T14250] CPU: 1 PID: 14250 Comm: syz.6.2769 Not tainted syzkaller #0 [ 400.244161][T14250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 400.254247][T14250] Call Trace: [ 400.257579][T14250] [ 400.260536][T14250] dump_stack_lvl+0x18c/0x250 [ 400.265219][T14250] ? show_regs_print_info+0x20/0x20 [ 400.270447][T14250] ? load_image+0x420/0x420 [ 400.274951][T14250] ? __might_sleep+0xe0/0xe0 [ 400.279542][T14250] ? __lock_acquire+0x7eb0/0x7eb0 [ 400.284568][T14250] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 400.290573][T14250] should_fail_ex+0x394/0x4c0 [ 400.295293][T14250] should_failslab+0x9/0x20 [ 400.299845][T14250] slab_pre_alloc_hook+0x59/0x300 [ 400.304913][T14250] kmem_cache_alloc_lru+0x4d/0x2c0 [ 400.310054][T14250] ? __d_alloc+0x31/0x710 [ 400.314421][T14250] __d_alloc+0x31/0x710 [ 400.318613][T14250] ? alloc_fd+0x590/0x640 [ 400.322980][T14250] d_alloc_pseudo+0x1d/0x70 [ 400.327515][T14250] alloc_file_pseudo+0xe4/0x210 [ 400.332400][T14250] ? fput+0x1a0/0x1a0 [ 400.336422][T14250] ? alloc_fd+0x590/0x640 [ 400.340796][T14250] sock_alloc_file+0xb7/0x280 [ 400.345502][T14250] __sys_socket+0x140/0x1b0 [ 400.350024][T14250] __x64_sys_socket+0x7a/0x90 [ 400.354706][T14250] do_syscall_64+0x55/0xb0 [ 400.359122][T14250] ? clear_bhb_loop+0x40/0x90 [ 400.363800][T14250] ? clear_bhb_loop+0x40/0x90 [ 400.368481][T14250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.374376][T14250] RIP: 0033:0x7ff2b239fb19 [ 400.378790][T14250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.398406][T14250] RSP: 002b:00007ff2b334e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 400.406830][T14250] RAX: ffffffffffffffda RBX: 00007ff2b2625fa0 RCX: 00007ff2b239fb19 [ 400.414810][T14250] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 400.422788][T14250] RBP: 00007ff2b2437b70 R08: 0000000000000000 R09: 0000000000000000 [ 400.430766][T14250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.438744][T14250] R13: 00007ff2b2626038 R14: 00007ff2b2625fa0 R15: 00007ffd08484258 [ 400.446739][T14250] [ 401.652225][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 401.673189][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 401.775926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.796124][ T5848] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 402.001775][ T5848] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 402.017161][ T5848] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.035298][ T5848] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.052528][ T5848] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.078309][ T5848] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.092680][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 402.101502][ T5848] usb 7-1: Product: syz [ 402.110463][ T5848] usb 7-1: Manufacturer: syz [ 402.124512][ T5848] cdc_wdm 7-1:1.0: skipping garbage [ 402.136874][ T5848] cdc_wdm 7-1:1.0: skipping garbage [ 402.148448][ T5848] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 402.155384][ T5848] cdc_wdm 7-1:1.0: Unknown control protocol [ 402.358884][ T5848] usb 7-1: USB disconnect, device number 7 [ 402.877305][T14331] overlay: filesystem on ./cgroup not supported [ 403.045662][ T57] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 403.250833][ T57] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.269866][ T57] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.298278][ T57] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.325683][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.357598][ T57] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.373872][ T57] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.387852][ T57] usb 7-1: Product: syz [ 403.392072][ T57] usb 7-1: Manufacturer: syz [ 403.410223][ T57] cdc_wdm 7-1:1.0: skipping garbage [ 403.425008][ T57] cdc_wdm 7-1:1.0: skipping garbage [ 403.439812][ T57] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 403.451501][ T57] cdc_wdm 7-1:1.0: Unknown control protocol [ 403.603806][T14352] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 403.684417][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.690194][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 403.699968][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.705690][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 403.711577][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.717819][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.723703][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.729763][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.735681][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.741581][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.747612][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.753554][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.759438][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.765317][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.771218][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.777835][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.783730][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.789446][ C0] cdc_wdm 7-1:1.0: Cannot schedule work [ 403.797766][ C0] cdc_wdm 7-1:1.0: Stall on int endpoint [ 403.803520][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 403.822815][ T57] usb 7-1: USB disconnect, device number 8 [ 404.779702][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'. [ 405.525490][T14426] netlink: 'syz.2.2846': attribute type 1 has an invalid length. [ 405.609684][T14426] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 405.619428][T14426] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 405.629140][T14426] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 405.639154][T14426] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 405.653736][T14426] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 405.665386][T14426] bond1: (slave geneve2): making interface the new active one [ 405.673961][T14426] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 405.924663][T14440] loop6: detected capacity change from 0 to 4096 [ 405.946488][T14440] EXT4-fs: Ignoring removed nobh option [ 405.952269][T14440] EXT4-fs: Ignoring removed bh option [ 405.971225][T14440] EXT4-fs (loop6): Test dummy encryption mode enabled [ 406.001325][T14440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.249765][T10483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.534687][T14470] loop6: detected capacity change from 0 to 1024 [ 406.611851][T14470] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 406.664759][T14470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.713371][T10483] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.839972][ T5848] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 407.035641][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 407.046263][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.057919][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.069528][ T5848] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 407.084258][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.106803][ T5848] usb 3-1: config 0 descriptor?? [ 407.118064][T14484] ip_tables: iptables: counters copy to user failed while replacing table [ 407.440152][ T5775] libceph: connect (1)[c::]:6789 error -97 [ 407.458804][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 407.476777][ T5775] libceph: connect (1)[c::]:6789 error -97 [ 407.483288][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 407.535165][ T5848] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 407.542373][ T9694] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 407.553196][ T5848] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 407.568280][T14494] ceph: No mds server is up or the cluster is laggy [ 407.730781][ T5848] ft260 0003:0403:6030.0021: chip code: 0000 0000 [ 407.772436][ T5775] libceph: connect (1)[c::]:6789 error -97 [ 407.780504][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 407.938479][ T5848] ft260 0003:0403:6030.0021: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 408.142516][ T5848] ft260 0003:0403:6030.0021: failed to retrieve status: -32, no wakeup [ 408.152981][ T5848] ft260 0003:0403:6030.0021: i2c bus error: 0x8e [ 408.306072][ T5775] libceph: connect (1)[c::]:6789 error -97 [ 408.312109][ T5775] libceph: mon0 (1)[c::]:6789 connect error [ 408.353593][ T5848] ft260 0003:0403:6030.0021: failed to reset I2C controller: -71 [ 408.411353][ T5848] usb 3-1: USB disconnect, device number 24 [ 409.521314][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'. [ 409.863858][T14554] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14556] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14554] [ 410.171484][T14561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2895'. [ 410.205019][T14561] ip_tables: iptables: counters copy to user failed while replacing table [ 411.053716][T14579] blk-mq: reduced tag depth (128 -> 64) [ 413.000230][T14615] loop6: detected capacity change from 0 to 2048 [ 413.106225][T12970] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 413.442477][T14625] device-mapper: thin: Data device (ram5) discard unsupported: Disabling discard passdown. [ 414.045949][T14651] overlayfs: failed to clone upperpath [ 414.197007][T14658] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.204755][T14658] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.377908][T14664] loop0: detected capacity change from 0 to 1024 [ 414.394021][T14664] ext4: Unknown parameter 'obj_user' [ 414.459867][T14666] loop6: detected capacity change from 0 to 512 [ 414.510539][T14666] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 414.522790][T14666] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (c20000) [ 414.537340][T14666] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 414.669584][T14668] ip_tables: iptables: counters copy to user failed while replacing table [ 416.164781][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2954'. [ 416.508375][ T5848] smpboot: CPU 1 is now offline [ 416.540132][ T5097] Bluetooth: hci1: command tx timeout [ 416.625295][T14737] bond0: (slave ip6tnl1): refused to change device type [ 416.662850][T14734] ceph: No mds server is up or the cluster is laggy [ 416.672184][T10363] libceph: connect (1)[c::]:6789 error -97 [ 416.691963][T10363] libceph: mon0 (1)[c::]:6789 connect error [ 416.877146][T14732] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 417.365436][T14757] af_packet: packet size is too long (65554 > 2016) [ 417.455755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.833439][T14774] netlink: 'syz.6.2973': attribute type 1 has an invalid length. [ 417.960654][T14774] bond3: entered promiscuous mode [ 417.991694][T14774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 418.176668][T14780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 418.245019][T14780] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 418.288374][T14780] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 418.352179][T14780] bond3: (slave wireguard0): making interface the new active one [ 418.388690][T14780] wireguard0: entered promiscuous mode [ 418.411657][T14780] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 418.612135][T14792] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.862497][T10363] kernel write not supported for file /snd/seq (pid: 10363 comm: kworker/0:6) [ 418.931205][T14803] FAULT_INJECTION: forcing a failure. [ 418.931205][T14803] name failslab, interval 1, probability 0, space 0, times 0 [ 418.976445][T14803] CPU: 0 PID: 14803 Comm: syz.0.2981 Not tainted syzkaller #0 [ 418.983939][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 418.994012][T14803] Call Trace: [ 418.997291][T14803] [ 419.000215][T14803] dump_stack_lvl+0x18c/0x250 [ 419.004895][T14803] ? show_regs_print_info+0x20/0x20 [ 419.010087][T14803] ? load_image+0x420/0x420 [ 419.014579][T14803] ? __might_sleep+0xe0/0xe0 [ 419.019162][T14803] ? __lock_acquire+0x7eb0/0x7eb0 [ 419.024197][T14803] should_fail_ex+0x394/0x4c0 [ 419.028896][T14803] should_failslab+0x9/0x20 [ 419.033419][T14803] slab_pre_alloc_hook+0x59/0x300 [ 419.038447][T14803] ? sock_kmalloc+0x96/0xf0 [ 419.042954][T14803] ? sock_kmalloc+0x96/0xf0 [ 419.047456][T14803] __kmem_cache_alloc_node+0x53/0x260 [ 419.052830][T14803] ? ip_mc_leave_group+0x4c0/0x4c0 [ 419.057955][T14803] ? sock_kmalloc+0x96/0xf0 [ 419.062455][T14803] __kmalloc+0xa7/0x240 [ 419.066617][T14803] sock_kmalloc+0x96/0xf0 [ 419.070944][T14803] ip_mc_source+0x684/0xf60 [ 419.075448][T14803] do_mcast_group_source+0x4c1/0x550 [ 419.080733][T14803] ? ip_mcast_join_leave+0x260/0x260 [ 419.086025][T14803] ? verify_lock_unused+0x140/0x140 [ 419.091224][T14803] ? verify_lock_unused+0x140/0x140 [ 419.096425][T14803] ? __mutex_trylock_common+0x160/0x270 [ 419.101984][T14803] ? __local_bh_enable_ip+0x13a/0x1c0 [ 419.107350][T14803] ? lockdep_hardirqs_on+0x98/0x150 [ 419.112640][T14803] ? __local_bh_enable_ip+0x13a/0x1c0 [ 419.118098][T14803] ? _local_bh_enable+0xa0/0xa0 [ 419.122970][T14803] do_ip_setsockopt+0x162d/0x2d50 [ 419.128020][T14803] ? ip_sock_set_pktinfo+0x30/0x30 [ 419.133147][T14803] ? aa_sk_perm+0x7bb/0x8e0 [ 419.137654][T14803] ? aa_af_perm+0x330/0x330 [ 419.142253][T14803] ? __fget_files+0x28/0x460 [ 419.146952][T14803] ? aa_sock_opt_perm+0x74/0x100 [ 419.151895][T14803] ip_setsockopt+0x61/0x110 [ 419.156396][T14803] ? sock_common_recvmsg+0x190/0x190 [ 419.161679][T14803] do_sock_setsockopt+0x175/0x1a0 [ 419.166705][T14803] ? __fdget+0x180/0x210 [ 419.170950][T14803] __x64_sys_setsockopt+0x182/0x200 [ 419.176149][T14803] do_syscall_64+0x55/0xb0 [ 419.180562][T14803] ? clear_bhb_loop+0x40/0x90 [ 419.185241][T14803] ? clear_bhb_loop+0x40/0x90 [ 419.189918][T14803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.195817][T14803] RIP: 0033:0x7fcdfd39fb19 [ 419.200237][T14803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.219846][T14803] RSP: 002b:00007fcdfe202028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 419.228262][T14803] RAX: ffffffffffffffda RBX: 00007fcdfd625fa0 RCX: 00007fcdfd39fb19 [ 419.236235][T14803] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000003 [ 419.244200][T14803] RBP: 00007fcdfd437b70 R08: 0000000000000108 R09: 0000000000000000 [ 419.252353][T14803] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 419.260349][T14803] R13: 00007fcdfd626038 R14: 00007fcdfd625fa0 R15: 00007ffde5a4bbf8 [ 419.268348][T14803] [ 419.313202][T14792] lo speed is unknown, defaulting to 1000 [ 419.843963][ T28] audit: type=1326 audit(1793818068.238:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd39fb19 code=0x7ffc0000 [ 419.872305][ T28] audit: type=1326 audit(1793818068.238:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd39fb19 code=0x7ffc0000 [ 419.888653][T14824] ip_tables: iptables: counters copy to user failed while replacing table [ 419.910298][ T28] audit: type=1326 audit(1793818068.278:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcdfd39fb19 code=0x7ffc0000 [ 419.947521][ T28] audit: type=1326 audit(1793818068.278:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd39fb19 code=0x7ffc0000 [ 419.980223][ T28] audit: type=1326 audit(1793818068.278:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd39fb19 code=0x7ffc0000 [ 420.025056][T14827] kAFS: No cell specified [ 420.040335][ T28] audit: type=1326 audit(1793818068.278:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcdfd39fb19 code=0x7ffc0000 [ 420.122375][ T28] audit: type=1326 audit(1793818068.278:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd39fb19 code=0x7ffc0000 [ 420.154777][ T28] audit: type=1326 audit(1793818068.278:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fcdfd39fb19 code=0x7ffc0000 [ 420.204906][ T28] audit: type=1326 audit(1793818068.278:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd39fb19 code=0x7ffc0000 [ 420.236900][ T28] audit: type=1326 audit(1793818068.278:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.0.2988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfd39fb19 code=0x7ffc0000 [ 421.328152][T14881] gretap2: entered promiscuous mode [ 421.685926][T10363] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 421.889649][T10363] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.918086][T10363] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 421.947922][T10363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.992934][T10363] usb 3-1: config 0 descriptor?? [ 422.017923][T10363] pwc: Askey VC010 type 2 USB webcam detected. [ 422.421069][T10363] pwc: recv_control_msg error -32 req 02 val 2b00 [ 422.432140][T10363] pwc: recv_control_msg error -32 req 02 val 2700 [ 422.451763][T10363] pwc: recv_control_msg error -32 req 02 val 2c00 [ 422.472107][T10363] pwc: recv_control_msg error -32 req 04 val 1000 [ 422.690914][T10363] pwc: recv_control_msg error -71 req 04 val 1400 [ 422.702230][T10363] pwc: recv_control_msg error -71 req 02 val 2000 [ 422.723665][T10363] pwc: recv_control_msg error -71 req 02 val 2100 [ 422.745245][T10363] pwc: recv_control_msg error -71 req 04 val 1500 [ 422.767956][T10363] pwc: recv_control_msg error -71 req 02 val 2500 [ 422.787933][T10363] pwc: recv_control_msg error -71 req 02 val 2400 [ 422.813228][T10363] pwc: recv_control_msg error -71 req 02 val 2600 [ 422.832434][T10363] pwc: recv_control_msg error -71 req 02 val 2900 [ 422.857164][T10363] pwc: recv_control_msg error -71 req 02 val 2800 [ 422.879968][T10363] pwc: recv_control_msg error -71 req 04 val 1100 [ 422.901887][T10363] pwc: recv_control_msg error -71 req 04 val 1200 [ 422.943084][T10363] pwc: Registered as video103. [ 422.965431][T10363] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 423.026125][T10363] usb 3-1: USB disconnect, device number 25 [ 423.592809][T14933] EXT4-fs warning (device sda1): ext4_group_extend:1876: need to use ext2online to resize further [ 423.782264][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 423.801782][T14937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.978723][T14937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.101950][T14940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.114145][T14940] tipc: Enabled bearer , priority 1 [ 424.235686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.375617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.515601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.588415][T14950] binder: 14949:14950 ioctl c0306201 2000000003c0 returned -14 [ 424.655661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.795591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.935619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.075593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.093118][T14966] loop6: detected capacity change from 0 to 2048 [ 425.189579][T14966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 425.219180][T10363] tipc: Node number set to 2130706433 [ 425.355633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.540707][T14980] dvmrp6: entered allmulticast mode [ 425.604174][T14980] dvmrp6: left allmulticast mode [ 425.625613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.155640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.614000][T15013] overlayfs: failed to clone upperpath [ 426.763001][T15019] loop0: detected capacity change from 0 to 512 [ 426.790178][T15019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 426.824114][T15019] EXT4-fs (loop0): 1 truncate cleaned up [ 426.850493][T15019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.215677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.246173][T11922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.275327][T15029] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.169189][T15029] lo speed is unknown, defaulting to 1000 [ 428.249643][T15052] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 428.256670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.543674][T15029] netlink: 'syz.4.3074': attribute type 16 has an invalid length. [ 428.584811][T15029] netlink: 'syz.4.3074': attribute type 17 has an invalid length. [ 428.619360][T15029] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 429.024282][T15076] ip_tables: iptables: counters copy to user failed while replacing table [ 429.280667][T15088] loop0: detected capacity change from 0 to 16 [ 429.295902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.307083][T15088] erofs: (device loop0): mounted with root inode @ nid 36. [ 429.659036][T15097] syz.2.3102 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 429.916922][T15103] overlayfs: failed to clone upperpath [ 430.192400][T15119] FAULT_INJECTION: forcing a failure. [ 430.192400][T15119] name failslab, interval 1, probability 0, space 0, times 0 [ 430.221511][T15119] CPU: 0 PID: 15119 Comm: syz.2.3111 Not tainted syzkaller #0 [ 430.229041][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 430.239129][T15119] Call Trace: [ 430.242404][T15119] [ 430.245324][T15119] dump_stack_lvl+0x18c/0x250 [ 430.249999][T15119] ? show_regs_print_info+0x20/0x20 [ 430.255197][T15119] ? load_image+0x420/0x420 [ 430.259702][T15119] ? __might_sleep+0xe0/0xe0 [ 430.264286][T15119] ? __lock_acquire+0x7eb0/0x7eb0 [ 430.269304][T15119] should_fail_ex+0x394/0x4c0 [ 430.273977][T15119] should_failslab+0x9/0x20 [ 430.278477][T15119] slab_pre_alloc_hook+0x59/0x300 [ 430.283504][T15119] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 430.288796][T15119] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 430.294085][T15119] __kmem_cache_alloc_node+0x53/0x260 [ 430.299546][T15119] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 430.304845][T15119] __kmalloc+0xa7/0x240 [ 430.309011][T15119] vhost_dev_set_owner+0x2a5/0x9b0 [ 430.314168][T15119] vhost_dev_ioctl+0xa9/0xc10 [ 430.318938][T15119] ? vhost_vsock_dev_ioctl+0x230/0xdd0 [ 430.324405][T15119] ? mutex_lock_nested+0x20/0x20 [ 430.329343][T15119] ? vhost_init_device_iotlb+0x2a0/0x2a0 [ 430.334990][T15119] vhost_vsock_dev_ioctl+0x23e/0xdd0 [ 430.340288][T15119] ? vhost_vsock_chr_poll+0x50/0x50 [ 430.345493][T15119] ? bpf_lsm_file_ioctl+0x9/0x10 [ 430.350437][T15119] ? security_file_ioctl+0x80/0xa0 [ 430.355583][T15119] ? vhost_vsock_chr_poll+0x50/0x50 [ 430.360786][T15119] __se_sys_ioctl+0xfd/0x170 [ 430.365382][T15119] do_syscall_64+0x55/0xb0 [ 430.369800][T15119] ? clear_bhb_loop+0x40/0x90 [ 430.374479][T15119] ? clear_bhb_loop+0x40/0x90 [ 430.379158][T15119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.385056][T15119] RIP: 0033:0x7f95ad59fb19 [ 430.389471][T15119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.409082][T15119] RSP: 002b:00007f95ae3a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.417499][T15119] RAX: ffffffffffffffda RBX: 00007f95ad825fa0 RCX: 00007f95ad59fb19 [ 430.425470][T15119] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 430.433439][T15119] RBP: 00007f95ad637b70 R08: 0000000000000000 R09: 0000000000000000 [ 430.441409][T15119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.449381][T15119] R13: 00007f95ad826038 R14: 00007f95ad825fa0 R15: 00007ffc91f79c98 [ 430.457363][T15119] [ 430.461006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.658397][T15130] loop0: detected capacity change from 0 to 256 [ 430.666320][T15130] exfat: Deprecated parameter 'namecase' [ 430.672179][T15130] exfat: Deprecated parameter 'utf8' [ 430.702857][T15130] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 431.156160][T15139] netlink: 'syz.4.3116': attribute type 3 has an invalid length. [ 431.164145][T15139] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3116'. [ 431.535687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.575742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.964294][T15106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.443252][T15171] FAULT_INJECTION: forcing a failure. [ 433.443252][T15171] name failslab, interval 1, probability 0, space 0, times 0 [ 433.505845][T15171] CPU: 0 PID: 15171 Comm: syz.2.3129 Not tainted syzkaller #0 [ 433.513366][T15171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 433.523516][T15171] Call Trace: [ 433.526801][T15171] [ 433.529725][T15171] dump_stack_lvl+0x18c/0x250 [ 433.534402][T15171] ? show_regs_print_info+0x20/0x20 [ 433.539606][T15171] ? load_image+0x420/0x420 [ 433.544125][T15171] ? __might_sleep+0xe0/0xe0 [ 433.548714][T15171] ? __lock_acquire+0x7eb0/0x7eb0 [ 433.553742][T15171] should_fail_ex+0x394/0x4c0 [ 433.558433][T15171] should_failslab+0x9/0x20 [ 433.562952][T15171] slab_pre_alloc_hook+0x59/0x300 [ 433.568089][T15171] kmem_cache_alloc+0x5a/0x2d0 [ 433.572929][T15171] ? __mpol_dup+0x7a/0x320 [ 433.577357][T15171] __mpol_dup+0x7a/0x320 [ 433.581624][T15171] ? vma_dup_policy+0xa0/0xa0 [ 433.586425][T15171] ? rcu_is_watching+0x15/0xb0 [ 433.591181][T15171] ? kmem_cache_alloc+0x1a6/0x2d0 [ 433.596191][T15171] ? mpol_set_shared_policy+0xb9/0xe90 [ 433.601641][T15171] mpol_set_shared_policy+0xce/0xe90 [ 433.606927][T15171] vma_replace_policy+0x1de/0x4a0 [ 433.611956][T15171] __se_sys_mbind+0x5ca/0x7c0 [ 433.616624][T15171] ? __ia32_sys_get_robust_list+0x110/0x110 [ 433.622515][T15171] ? __x64_sys_mbind+0xf0/0xf0 [ 433.627401][T15171] ? lock_chain_count+0x20/0x20 [ 433.632302][T15171] ? __x64_sys_mbind+0x21/0xf0 [ 433.637081][T15171] do_syscall_64+0x55/0xb0 [ 433.641517][T15171] ? clear_bhb_loop+0x40/0x90 [ 433.646206][T15171] ? clear_bhb_loop+0x40/0x90 [ 433.650889][T15171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.656790][T15171] RIP: 0033:0x7f95ad59fb19 [ 433.661208][T15171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.680830][T15171] RSP: 002b:00007f95ae3a2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 433.689254][T15171] RAX: ffffffffffffffda RBX: 00007f95ad825fa0 RCX: 00007f95ad59fb19 [ 433.697227][T15171] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000 [ 433.705203][T15171] RBP: 00007f95ad637b70 R08: 0000000000000008 R09: 0000000000000000 [ 433.713172][T15171] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 433.721138][T15171] R13: 00007f95ad826038 R14: 00007f95ad825fa0 R15: 00007ffc91f79c98 [ 433.729129][T15171] [ 433.732889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.451079][T15201] ip_tables: iptables: counters copy to user failed while replacing table [ 434.735590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.840943][T15220] netlink: 'syz.4.3151': attribute type 16 has an invalid length. [ 434.877139][T15220] netlink: 'syz.4.3151': attribute type 17 has an invalid length. [ 434.918409][T15220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.956236][T15229] Cannot find add_set index 4 as target [ 435.007157][T15220] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 435.135756][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 435.617588][T15254] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3164'. [ 435.776707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.816937][T15261] rxe_eth0 speed is unknown, defaulting to 1000 [ 435.838028][T15257] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3164'. [ 435.882777][T15257] nbd: device at index 64 is going down [ 436.122136][T14762] udevd[14762]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 436.289666][T15263] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.314658][T15261] lo speed is unknown, defaulting to 1000 [ 436.794959][T15263] lo speed is unknown, defaulting to 1000 [ 436.815587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.530456][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 437.855627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.988637][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.020371][ T8] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 438.035716][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.087737][ T8] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 438.107849][ T8] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 438.131815][ T8] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 438.151289][ T8] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 438.191020][ T8] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 438.221959][ T8] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 438.247419][ T8] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 438.452559][ T8] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 438.506258][ T8] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 438.768116][T10363] usb 3-1: USB disconnect, device number 26 [ 438.782590][T10363] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 438.835879][T10363] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 438.891470][T10363] keyspan 3-1:1.0: device disconnected [ 438.897034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.108479][T15311] loop6: detected capacity change from 0 to 128 [ 439.144069][T15311] FAT-fs (loop6): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 439.539421][T13426] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.724260][ T9701] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.868611][ T9701] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.935589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.081508][ T9701] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.195192][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.202107][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.265692][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 440.290119][ T9701] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.388236][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 440.404101][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 440.413956][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 440.424141][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 440.441949][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 440.455272][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 440.482515][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 440.516843][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.569504][ T9701] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.570960][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 440.600515][ T9701] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.628695][ T9701] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.642863][T15337] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.665774][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.700803][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 440.710290][ T9701] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.720460][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 440.745726][ T8] usb 3-1: Product: syz [ 440.758737][ T8] usb 3-1: Manufacturer: syz [ 440.818212][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 440.823465][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 440.921820][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 440.954969][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 440.975577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.039051][ T9701] bond2: (slave ip6erspan0): Releasing active interface [ 441.082420][T15337] lo speed is unknown, defaulting to 1000 [ 441.138414][ T8] usb 3-1: USB disconnect, device number 27 [ 441.866157][ T5848] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 442.015632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.042504][ T9701] bond1: (slave gretap1): Releasing active interface [ 442.089672][ T5848] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.092732][T15337] chnl_net:caif_netlink_parms(): no params data found [ 442.105700][ T5848] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.131207][ T5848] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.174402][ T5848] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.222775][ T5848] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.251316][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.294112][ T5848] usb 3-1: Product: syz [ 442.309530][ T5848] usb 3-1: Manufacturer: syz [ 442.332752][ T5848] cdc_wdm 3-1:1.0: skipping garbage [ 442.363303][ T5848] cdc_wdm 3-1:1.0: skipping garbage [ 442.400216][ T5848] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 442.409510][ T5848] cdc_wdm 3-1:1.0: Unknown control protocol [ 442.585899][ T5097] Bluetooth: hci3: command tx timeout [ 442.607543][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.613294][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.619195][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.625065][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.631125][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.637055][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.642940][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.648815][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.654703][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.660898][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.666947][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.672809][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.678510][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.684364][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.690238][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.696145][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.703038][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.708965][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.714859][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.720561][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.726429][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.732169][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.738200][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.744080][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.750482][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.756388][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.762262][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.768129][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.773840][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.779662][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.785604][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.791333][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.797149][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.804081][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.809816][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.817453][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.823176][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.835689][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.841429][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.848464][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.854198][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.865725][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.871605][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.877456][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.883362][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.889512][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.895241][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.901086][ C0] cdc_wdm 3-1:1.0: Stall on int endpoint [ 442.906783][ C0] cdc_wdm 3-1:1.0: Cannot schedule work [ 442.925688][ T57] usb 3-1: USB disconnect, device number 28 [ 443.055635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.795621][ T57] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 443.985602][ T57] usb 3-1: Using ep0 maxpacket: 32 [ 443.998241][ T57] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 444.012270][ T57] usb 3-1: config 0 has no interface number 0 [ 444.029356][ T57] usb 3-1: config 0 interface 184 has no altsetting 0 [ 444.046068][T15337] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.051866][ T57] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 444.053207][T15337] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.081572][T15337] bridge_slave_0: entered allmulticast mode [ 444.084612][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.092742][T15337] bridge_slave_0: entered promiscuous mode [ 444.095645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.104635][T15337] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.130085][T15337] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.143681][T15337] bridge_slave_1: entered allmulticast mode [ 444.152819][T15337] bridge_slave_1: entered promiscuous mode [ 444.166733][ T57] usb 3-1: Product: syz [ 444.176476][ T57] usb 3-1: Manufacturer: syz [ 444.191335][ T57] usb 3-1: SerialNumber: syz [ 444.283609][ T57] usb 3-1: config 0 descriptor?? [ 444.294460][T15337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.313471][ T57] smsc75xx v1.0.0 [ 444.336840][T15337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.480083][T15411] loop0: detected capacity change from 0 to 128 [ 444.523800][T15337] team0: Port device team_slave_0 added [ 444.545171][T15337] team0: Port device team_slave_1 added [ 444.622679][ T9701] hsr_slave_0: left promiscuous mode [ 444.630941][ T9701] hsr_slave_1: left promiscuous mode [ 444.646690][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.654154][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.656020][ T5097] Bluetooth: hci3: command tx timeout [ 444.675139][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.702996][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.713260][ T9701] bridge_slave_1: left allmulticast mode [ 444.730832][ T9701] bridge_slave_1: left promiscuous mode [ 444.763362][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.803543][ T9701] bridge_slave_0: left allmulticast mode [ 444.815844][ T9701] bridge_slave_0: left promiscuous mode [ 444.821647][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.950151][ T9701] veth1_macvtap: left promiscuous mode [ 444.966589][ T9701] veth0_macvtap: left promiscuous mode [ 444.967733][ T57] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 444.972263][ T9701] veth1_vlan: left promiscuous mode [ 445.005741][ T9701] veth0_vlan: left promiscuous mode [ 445.031176][ T57] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 445.135591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.435233][ T9701] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 445.462928][ T9701] wireguard0 (unregistering): left promiscuous mode [ 445.662151][ T57] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 445.696347][ T57] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 445.716607][ T57] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 445.726502][ T57] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 445.742786][ T57] usb 3-1: USB disconnect, device number 29 [ 445.838042][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'. [ 445.948006][ T9701] bond3 (unregistering): Released all slaves [ 446.175620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.322576][ T9701] bond2 (unregistering): Released all slaves [ 446.580935][ T9701] bond1 (unregistering): Released all slaves [ 446.736982][ T5097] Bluetooth: hci3: command tx timeout [ 447.216703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.536959][T15470] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15471] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15470] [ 447.646574][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3230'. [ 447.670225][T15474] ip_tables: iptables: counters copy to user failed while replacing table [ 447.691572][ T9701] team0 (unregistering): Port device team_slave_1 removed [ 447.838822][ T9701] team0 (unregistering): Port device team_slave_0 removed [ 447.952055][ T9701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.078239][ T9701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.255581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.363290][T15486] loop0: detected capacity change from 0 to 512 [ 448.815675][ T5097] Bluetooth: hci3: command tx timeout [ 448.926775][ T9701] bond0 (unregistering): Released all slaves [ 449.018752][ T9701] lo (unregistering): left allmulticast mode [ 449.073100][ T27] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 449.135746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.165434][T15337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.175573][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.238223][T15337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.287285][T15337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.295606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.336241][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.421962][T15337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.522266][T15337] hsr_slave_0: entered promiscuous mode [ 449.560411][T15337] hsr_slave_1: entered promiscuous mode [ 449.576121][T15337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.583729][T15337] Cannot create hsr debugfs directory [ 449.894247][ T9701] IPVS: stop unused estimator thread 0... [ 450.016425][T15337] netdevsim netdevsim6 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.224663][T15337] netdevsim netdevsim6 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.335640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.479558][T15337] netdevsim netdevsim6 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.585846][ T57] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 450.688472][T15337] netdevsim netdevsim6 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.770754][ T57] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 450.788322][ T57] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.834110][ T57] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 450.865927][ T57] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.909736][ T57] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 450.956651][ T57] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 450.988058][ T57] usb 1-1: Product: syz [ 451.014712][ T57] usb 1-1: Manufacturer: syz [ 451.031236][ T57] cdc_wdm 1-1:1.0: skipping garbage [ 451.063850][ T57] cdc_wdm 1-1:1.0: skipping garbage [ 451.067376][T15337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 451.088628][ T57] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 451.094801][T15337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 451.107571][ T57] cdc_wdm 1-1:1.0: Unknown control protocol [ 451.110767][T15337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 451.133609][T15337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 451.327508][ T57] usb 1-1: USB disconnect, device number 22 [ 451.341961][T15337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.375609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.399457][T15337] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.438580][T13426] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.445791][T13426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.475498][T13426] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.482706][T13426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.648917][ T57] libceph: connect (1)0.0.0.0:6789 error -22 [ 451.662229][ T57] libceph: mon0 (1)0.0.0.0:6789 connect error [ 451.936334][ T5848] libceph: connect (1)0.0.0.0:6789 error -22 [ 451.948211][ T5848] libceph: mon0 (1)0.0.0.0:6789 connect error [ 452.016367][ T57] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 452.031690][T15337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.218069][ T57] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 452.230874][ T57] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.252294][ T57] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 452.271870][ T57] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.290054][ T57] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 452.320203][ T57] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 452.343258][ T57] usb 1-1: Product: syz [ 452.359677][ T57] usb 1-1: Manufacturer: syz [ 452.372765][T15574] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 452.415584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.430761][ T57] cdc_wdm 1-1:1.0: skipping garbage [ 452.442576][T15550] ceph: No mds server is up or the cluster is laggy [ 452.464511][ T57] cdc_wdm 1-1:1.0: skipping garbage [ 452.477970][ T8] libceph: connect (1)0.0.0.0:6789 error -22 [ 452.484152][ T8] libceph: mon0 (1)0.0.0.0:6789 connect error [ 452.508715][ T57] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 452.545478][ T57] cdc_wdm 1-1:1.0: Unknown control protocol [ 452.691257][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.697013][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.702859][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.708748][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.714470][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.720382][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.726295][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.732005][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.741051][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.746817][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.753578][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.761135][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.766854][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.773837][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.776324][ T3532] ------------[ cut here ]------------ [ 452.779545][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.779776][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.786220][ T3532] WARNING: CPU: 1 PID: 3532 at io_uring/io_uring.c:3292 io_ring_exit_work+0x3c1/0x860 [ 452.791619][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.797246][ T3532] Modules linked in: [ 452.807455][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.812293][ T3532] [ 452.816238][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.816764][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.822056][ T3532] CPU: 1 PID: 3532 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 452.824444][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.830304][ T3532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 452.837360][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.843352][ T3532] Workqueue: iou_exit io_ring_exit_work [ 452.848683][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.851207][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.858876][ T3532] [ 452.864529][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.870031][ T3532] RIP: 0010:io_ring_exit_work+0x3c1/0x860 [ 452.876280][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.881224][ T3532] Code: 89 e5 48 8b 7c 24 28 48 8b 34 24 e8 19 2a 11 00 48 85 c0 41 bc 00 20 00 00 75 1c e8 69 ab f8 f6 e9 b3 fd ff ff e8 5f ab f8 f6 <0f> 0b b8 70 17 00 00 48 89 04 24 eb c3 c7 84 24 90 00 00 00 00 00 [ 452.883596][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 452.889182][ T3532] RSP: 0018:ffffc9000ca67a40 EFLAGS: 00010293 [ 452.895014][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.900447][ T3532] [ 452.920488][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.926090][ T3532] RAX: ffffffff8a8f3341 RBX: ffff888031fec000 RCX: ffff888030035a00 [ 452.931958][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.937331][ T3532] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 452.940424][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.945458][ T3532] RBP: ffffc9000ca67bb0 R08: ffffc9000ca679c7 R09: 1ffff9200194cf38 [ 452.953846][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.959284][ T3532] R10: dffffc0000000000 R11: fffff5200194cf39 R12: ffff888031fec510 [ 452.967378][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.972824][ T3532] R13: 0000000100003aea R14: 0000000100003aeb R15: dffffc0000000000 [ 452.981267][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 452.986758][ T3532] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 452.994883][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.000325][ T3532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.008520][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.013900][ T3532] CR2: 00007fab8c8f6000 CR3: 0000000030e34000 CR4: 00000000003526e0 [ 453.023045][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.028629][ T3532] Call Trace: [ 453.035342][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.040814][ T3532] [ 453.049309][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.054551][ T3532] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 453.058889][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.063629][ T3532] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.066767][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.072228][ T3532] ? process_scheduled_works+0x975/0x1600 [ 453.078231][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.083706][ T3532] ? process_scheduled_works+0x975/0x1600 [ 453.089117][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.094643][ T3532] process_scheduled_works+0xa60/0x1600 [ 453.100570][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.106137][ T3532] ? worker_attach_to_pool+0x370/0x370 [ 453.112004][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.117448][ T3532] ? assign_work+0x3cc/0x5d0 [ 453.123174][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.128634][ T3532] worker_thread+0xa5e/0xfe0 [ 453.134222][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.139760][ T3532] ? _raw_spin_unlock+0x40/0x40 [ 453.144987][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.150227][ T3532] ? __kthread_parkme+0x71/0x1c0 [ 453.155056][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.160330][ T3532] kthread+0x2fa/0x390 [ 453.165404][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.170934][ T3532] ? pr_cont_work+0x550/0x550 [ 453.175976][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.181364][ T3532] ? kthread_blkcg+0xd0/0xd0 [ 453.185633][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.191157][ T3532] ret_from_fork+0x48/0x80 [ 453.195926][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.201368][ T3532] ? kthread_blkcg+0xd0/0xd0 [ 453.206170][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.211639][ T3532] ret_from_fork_asm+0x11/0x20 [ 453.216361][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.221753][ T3532] [ 453.226527][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 453.232086][ T3532] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 453.232098][ T3532] CPU: 1 PID: 3532 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 453.232114][ T3532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 453.232125][ T3532] Workqueue: iou_exit io_ring_exit_work [ 453.232150][ T3532] Call Trace: [ 453.232159][ T3532] [ 453.232167][ T3532] dump_stack_lvl+0x18c/0x250 [ 453.232195][ T3532] ? show_regs_print_info+0x20/0x20 [ 453.232216][ T3532] ? load_image+0x420/0x420 [ 453.232246][ T3532] panic+0x2ca/0x720 [ 453.232268][ T3532] ? bpf_jit_dump+0xd0/0xd0 [ 453.232295][ T3532] ? ret_from_fork_asm+0x11/0x20 [ 453.232321][ T3532] __warn+0x2e0/0x470 [ 453.232337][ T3532] ? io_ring_exit_work+0x3c1/0x860 [ 453.232365][ T3532] ? io_ring_exit_work+0x3c1/0x860 [ 453.232383][ T3532] report_bug+0x2be/0x4f0 [ 453.232405][ T3532] ? io_ring_exit_work+0x3c1/0x860 [ 453.232423][ T3532] ? io_ring_exit_work+0x3c1/0x860 [ 453.232440][ T3532] ? io_ring_exit_work+0x3c3/0x860 [ 453.232458][ T3532] handle_bug+0xcf/0x120 [ 453.232480][ T3532] exc_invalid_op+0x1a/0x50 [ 453.232502][ T3532] asm_exc_invalid_op+0x1a/0x20 [ 453.232524][ T3532] RIP: 0010:io_ring_exit_work+0x3c1/0x860 [ 453.232543][ T3532] Code: 89 e5 48 8b 7c 24 28 48 8b 34 24 e8 19 2a 11 00 48 85 c0 41 bc 00 20 00 00 75 1c e8 69 ab f8 f6 e9 b3 fd ff ff e8 5f ab f8 f6 <0f> 0b b8 70 17 00 00 48 89 04 24 eb c3 c7 84 24 90 00 00 00 00 00 [ 453.232557][ T3532] RSP: 0018:ffffc9000ca67a40 EFLAGS: 00010293 [ 453.232572][ T3532] RAX: ffffffff8a8f3341 RBX: ffff888031fec000 RCX: ffff888030035a00 [ 453.232586][ T3532] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 453.232597][ T3532] RBP: ffffc9000ca67bb0 R08: ffffc9000ca679c7 R09: 1ffff9200194cf38 [ 453.232611][ T3532] R10: dffffc0000000000 R11: fffff5200194cf39 R12: ffff888031fec510 [ 453.232624][ T3532] R13: 0000000100003aea R14: 0000000100003aeb R15: dffffc0000000000 [ 453.232643][ T3532] ? io_ring_exit_work+0x3c1/0x860 [ 453.232677][ T3532] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 453.232709][ T3532] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.232728][ T3532] ? process_scheduled_works+0x975/0x1600 [ 453.232750][ T3532] ? process_scheduled_works+0x975/0x1600 [ 453.232774][ T3532] process_scheduled_works+0xa60/0x1600 [ 453.232821][ T3532] ? worker_attach_to_pool+0x370/0x370 [ 453.232847][ T3532] ? assign_work+0x3cc/0x5d0 [ 453.232873][ T3532] worker_thread+0xa5e/0xfe0 [ 453.232907][ T3532] ? _raw_spin_unlock+0x40/0x40 [ 453.232923][ T3532] ? __kthread_parkme+0x71/0x1c0 [ 453.232949][ T3532] kthread+0x2fa/0x390 [ 453.232966][ T3532] ? pr_cont_work+0x550/0x550 [ 453.232988][ T3532] ? kthread_blkcg+0xd0/0xd0 [ 453.233006][ T3532] ret_from_fork+0x48/0x80 [ 453.233026][ T3532] ? kthread_blkcg+0xd0/0xd0 [ 453.233044][ T3532] ret_from_fork_asm+0x11/0x20 [ 453.233078][ T3532] [ 453.237142][ T3532] Kernel Offset: disabled [ 453.525970][ T3532] Rebooting in 86400 seconds..