last executing test programs: 2m46.214129066s ago: executing program 5 (id=282): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x2}, 0x8}], 0x1, 0x100, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) 2m44.787992617s ago: executing program 5 (id=289): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m44.372636245s ago: executing program 5 (id=292): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @local}, 0x6b) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) 2m43.962586795s ago: executing program 5 (id=294): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m43.541781118s ago: executing program 5 (id=296): syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1014800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) writev(r0, &(0x7f00000003c0), 0x0) 2m42.345811462s ago: executing program 5 (id=303): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000018, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5516, &(0x7f000000d000)="$eJzs3EtvG2UXAODjpOn96xchFuw6UoWUSLVV51LBLkArLiJVVGDBChzbsdzanih2nJAVC5aIBf8EgcSKJb+BBWt2iAUVOySQZybQAK0Qdew2eR5pfGbeeX3mvFYU6cxYDuDUmk9++bkUV+JCRMxGxOWIbL9UbJm1PLwQEVcjYuahrVSM/zFwNiIuRsSVUfI8Z6k49fn14bXVn9568M13585c+uLr76e3amDaXoyI7na+v9fNY9rK471ivDZsZ7G7MixifqJ7vzhO87jX3Mwy7NUO59WyuNzK56fbu/1R3OrU6qPYam9l49u9/IL9YeswT/aGe7Wd7LjR3Mxiu59msXWQ17V/kP9vO+gP8jyNIt9HWfoYDA5jPt7cb+br2b6fxXpvUIznedNGc38Uh0UsLhf1tNPI6th8kk/66fZ2u7e7nwybO/122ktWK9WXKtWb5epO2mgOmivlWrdxcyVZaHVG08qDZq271krTVqdZqafdxWShVa+Xq9Vk4VZzs13rJdVqZblyo7y6WOxdT16/817SaSQLo/hqu7c7aHf6yVa6k+TvWEyWKssvLybXqsk76xvJxt3bt9c33v3g1vt3Xll/87Vi0t/KShaWbiwtlas3ykvVxVO0/k+Kose4fngipWkXAPDs0f8Dx+LC408fX/+/czfi+Pv/0P+PxTPV/z6m//+vbchJWT9Mhf4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODU+mHuyzeynfn8+FIx/r9i6LniuBQRMxHx2z+YjbNHcs4WeeYeMX/uLzV8W4osw+ga54rtYkSsFduv/z/uTwEAAABOrq8+vvpZ3q3nL/PTLohJym/azFz+cEz5ShExN//jmLLNjF6eH1Oy7O/7TOyPKVt2A+v8mJLlt9zOjCvbvzJ7JJx/KJTyMDPRcgAAgIk42glMtgsBAABgkj6ddgFMRykOH2UePgvOvnn/5wPBC0eOAAAAgKfXg0edKE22DgAAAGAKsv7f7/8BAADAyZb//h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcz+3iQNRHICfDV7Yf1q02vu2sjcoY0vY4x4jCkgTFJADaSENUAO5pYQIIjwOgYhDJI9tJfo+yZmMZX68QXCYGWkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAunRfrRe3V7+v2+bs9u3kGQ0AAABwybZaL+p/Zqn/tbn/vbn1s+kXEVFGxKW5+yg+nWWOmpzq5fmb0+erVzXcRdQJh/eYNNeXiPjTXI8/uv4UAAAA4OPaLFfzNFtPf2ZDF0Sf0qJN+e1vprwiIqrZQ6a08pD3K1NY/f0ex/9MafUC1jRTWFpyG+dKe5P6535ctZueNEVqyosvOxaZbewAAECPRmdNv7MQAAAA+vRv6AIYRhHPW5nHrcBJaprtvc9nPQAAAOAdKoYuAAAAAOhcPf/v6fy/vfP/AAAAYBjp/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6tK3Wi81yNW+bs9u3k2c0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8sT/vKhTCAAxAcx++Nun3+vES0NXV5RwopAkdCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADz5XCffO/wa9iT/tg1T65FkTnL0snRqs3Zu2PpgvPwZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk/15SYEQCIIomDP+d9L3P6wk6BlEiICGRxW1aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCTfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi537eY2jigMA/p2Zna2tijFKDhFR8KAXm25ra2/iQQke/BOEkG5r7NYfbQ62FDEXb5JzL6JHEUGJt/4PPbfQS731sIcKniMzO5OdNgXXH53ZNp8PvHnfHYZ53zcLId95LwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDZ+dxpnxWFhEqfVuZv3rq4X/a0H+sL17dvLRSvipM2kHw8vNz8kS90lAgAAwMGR1fV9RNzJd1aLPl0o6/+8vqao+b9/dhLX9fyDdX/d17V/0X779e6LewMtTMYpbnp2YzQ8tj+V3qOb5Xx77m+v6JVPvnz3kpVfSPrB1gvjvHyeybc3brzXL8NDbWQLAPwbR+u+Curfh4p+0GViABwYvUbhXdf/2UK3OQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0YbwVT9dxEhHLvWlcuHXv6vrD+uvbt5frdurate34enrP4hZ5RJzdGA2PtTqb+Xbp8pXza6PR8GL7wSsR0dXo71TTP//RDBdHdPJ8BP9TkFZf9rzk83gEHf5QAgDgiZRXrajr7+Q7q8W5ZDFi94f76//XG3HMWP/f/fjUzeZYzfp/0NoM59/K5oXPVy5dvvLmxoW1c8Nzw0/fOj54e3Di9MmTp1fKdyUr3pgAAADwH/SnYbP+Txf3r/8facQxY/3/xXeDr5rDZer/iN3dfaemi36dZAQAAEDl+Vf//CN5yPmk348v1zY3Lw4mx73PxyfHDlL9xw5VrVn/Z4tdZwUAAAC0YbyV3Lf+f6YRx4zr/8/8+NLPzXtmEXG4Wv8/uv7Z6Ex705lrbfw5cddzBAAAoFuHq9Zc/8/L/f/p3paHNCLeeG0SV/8GcKb6P3v/m5+aYzX3/59ob4pzKV2aPI+yX4roLXWdEQAAAE+yp6pWFPu/5zurn/xy5MO+/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbfsrAAD//6AmQfA=") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mknod$loop(&(0x7f0000000000)='./bus\x00', 0x800, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2m27.243437058s ago: executing program 32 (id=303): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000018, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5516, &(0x7f000000d000)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mknod$loop(&(0x7f0000000000)='./bus\x00', 0x800, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 8.621332096s ago: executing program 0 (id=938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001740)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x10) splice(r3, 0x0, r2, 0x0, 0x4ff9c, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000017c0)={'gretap0\x00', &(0x7f0000001780)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x5, 0x6, {{0x8, 0x4, 0x0, 0x3b, 0x20, 0x65, 0x0, 0x8, 0x4, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x75, 0x1, 0x4, [{@loopback, 0x4}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001b00)={'syztnl2\x00', 0x0}) sendmmsg$inet(r0, 0x0, 0x0, 0x400c070) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000200)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x4000, 0x1}]}}}}}}}, 0x0) 8.561407502s ago: executing program 2 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xc010) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 8.091187486s ago: executing program 2 (id=941): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="e86dc7a1e61edc", 0x7}], 0x1) 7.238855083s ago: executing program 0 (id=943): socket$packet(0x11, 0x3, 0x300) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0xfffffffffffffd76, &(0x7f00000002c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0xa8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x93, 0x6, "8f4427bb845ce1ecb02d3e00df77363e7602f8c21fe8964a1247102fec3c4265fd49f37e4f03b14f94796d59d03cc699f9e5644231dba74f258c2fc5d174b009a3a07fa49a30abcfce3a3d23cff7050b4306e2970d79b9f029c5b319e1ed3b539547867c1f78afb7a1acf134ad7ce84367ab1669804335df4e29b1038ed5f3e4928bf7b3199707156b6000b6b00fd6"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0xfffffffffffffd93, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x732279c}, @NFTA_HOOK_DEV={0x0, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x338a5fce}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x24c3d12d}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x205f49ce}, @NFTA_HOOK_DEV={0x0, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x3d0e2563}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x150}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r7, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x80, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$kcm(0x10, 0x2, 0x0) 7.126336505s ago: executing program 2 (id=944): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 6.751121296s ago: executing program 2 (id=946): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce", 0x12}], 0x1}}], 0x1, 0x4000841) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x7c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x58, 0x1, 0x0, 0x1, [@nested={0x53, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x127, 0x0, 0x0, @u32=0x5}, @generic="0753e778c928f9d66fb555dd766a38c43349d9f22e916f559c14536d8a81c74d6084ab0b0416863c7e7f7541ca8f72e9fbd26b7afe12af0a92736235dc7695"]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xffff, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) 6.371331487s ago: executing program 1 (id=947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x4614, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000a80)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685e48943f2", 0x29, 0x4040814, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) 5.994792836s ago: executing program 6 (id=948): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x8611, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) move_mount(r0, 0x0, r1, 0x0, 0x46) 5.627141584s ago: executing program 1 (id=949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}}], {0x14}}, 0x5c}, 0x1, 0x1000000}, 0x0) 5.375224375s ago: executing program 3 (id=950): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYBLOB="080003"], 0x44}}, 0x40) 5.29523813s ago: executing program 1 (id=951): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) 5.079472269s ago: executing program 6 (id=953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.919880477s ago: executing program 3 (id=954): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2b, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x54, 0x4, 0xf, 0x0, 0x18) 4.875221557s ago: executing program 4 (id=955): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000840)={0x40, 0x1, 0x28, "701dbca1a5199b006d954e287b2d0ada3a2c58411ee3414013c97f91e7bd851187baea760edcaf25"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x2c020400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x8) r2 = fsopen(&(0x7f0000000580)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000005c0)='\x00', 0x0, r1) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000140)={0x0, 0xd8, 0x7d, 0x80000000, 0x18, 0x19, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 4.273823474s ago: executing program 6 (id=956): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=ANY=[], 0xb9) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 4.03818134s ago: executing program 3 (id=957): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000840)={0x40, 0x1, 0x28, "701dbca1a5199b006d954e287b2d0ada3a2c58411ee3414013c97f91e7bd851187baea760edcaf25"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) 3.701105726s ago: executing program 6 (id=958): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 3.400138586s ago: executing program 6 (id=959): io_uring_setup(0x2280, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[], 0x0) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3.26477859s ago: executing program 2 (id=960): syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00'}) syz_open_dev$radio(0x0, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2.863335126s ago: executing program 0 (id=961): r0 = socket$isdn(0x22, 0x2, 0x25) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$isdn(r0, &(0x7f0000000200)={0x22, 0x77, 0x5, 0x3, 0x5}, 0x6) 2.651161527s ago: executing program 0 (id=962): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000726) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0xac}, 0x0, 0x8400, 0x1}) r2 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) 2.242325447s ago: executing program 4 (id=963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb704001400030000000000000000000000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 1.847320725s ago: executing program 1 (id=964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000001) r1 = dup(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 1.656480258s ago: executing program 3 (id=965): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x8611, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) move_mount(r0, 0x0, r1, 0x0, 0x46) 1.63719307s ago: executing program 1 (id=966): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580017, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x200000, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private0, 0x1, 0x6, 0x7, 0x100, 0x6, 0x180107, r6}) 1.627775264s ago: executing program 0 (id=967): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="080003"], 0x44}}, 0x40) 1.458852559s ago: executing program 4 (id=968): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0xd6ab, @private2, 0xc3ca}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000400)='t', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) 1.338739128s ago: executing program 3 (id=969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f050000000014001280"], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 1.241214241s ago: executing program 0 (id=970): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r4, @ANYBLOB="1bc400000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="050033000d000000080032"], 0x2c}}, 0x0) 1.177646405s ago: executing program 4 (id=971): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 1.033969207s ago: executing program 3 (id=972): inotify_init() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@req={0x20, &(0x7f0000000040)={'gretap0\x00', @ifru_flags}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000300), 0x400) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) socket(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) 958.440826ms ago: executing program 4 (id=973): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[], 0xb9) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 866.376062ms ago: executing program 2 (id=974): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) 719.068375ms ago: executing program 1 (id=975): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000840)={0x40, 0x1, 0x28, "701dbca1a5199b006d954e287b2d0ada3a2c58411ee3414013c97f91e7bd851187baea760edcaf25"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x2c020400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x8) r2 = fsopen(&(0x7f0000000580)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000005c0)='\x00', 0x0, r1) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 368.556998ms ago: executing program 4 (id=976): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=977): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) kernel console output (not intermixed with test programs): .290007][ C1] Call Trace: [ 210.290030][ C1] [ 210.290040][ C1] dump_stack_lvl+0x189/0x250 [ 210.290079][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.290110][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 210.290135][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 210.290176][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.290227][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 210.290262][ C1] f2fs_write_end_io+0x886/0xb60 [ 210.290312][ C1] blk_update_request+0x57e/0xe60 [ 210.290355][ C1] blk_mq_end_request+0x3e/0x70 [ 210.290382][ C1] blk_done_softirq+0x10a/0x160 [ 210.290409][ C1] handle_softirqs+0x27d/0x850 [ 210.290441][ C1] ? run_ksoftirqd+0x9b/0x100 [ 210.290477][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 210.290507][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.290534][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290565][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.290592][ C1] run_ksoftirqd+0x9b/0x100 [ 210.290621][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 210.290664][ C1] smpboot_thread_fn+0x542/0xa60 [ 210.290695][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.290732][ C1] kthread+0x711/0x8a0 [ 210.290768][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 210.290796][ C1] ? __pfx_kthread+0x10/0x10 [ 210.290825][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290855][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.290893][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290919][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 210.290943][ C1] ? __pfx_kthread+0x10/0x10 [ 210.290980][ C1] ret_from_fork+0x599/0xb30 [ 210.291008][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 210.291043][ C1] ? __switch_to_asm+0x39/0x70 [ 210.291074][ C1] ? __switch_to_asm+0x33/0x70 [ 210.291105][ C1] ? __pfx_kthread+0x10/0x10 [ 210.291138][ C1] ret_from_fork_asm+0x1a/0x30 [ 210.291189][ C1] [ 210.291199][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 210.313049][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.322474][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 210.322505][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.322521][ C1] Call Trace: [ 210.322533][ C1] [ 210.322543][ C1] dump_stack_lvl+0x189/0x250 [ 210.322586][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.322616][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 210.322653][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 210.322708][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.322759][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 210.322795][ C1] f2fs_write_end_io+0x886/0xb60 [ 210.322845][ C1] blk_update_request+0x57e/0xe60 [ 210.322888][ C1] blk_mq_end_request+0x3e/0x70 [ 210.322915][ C1] blk_done_softirq+0x10a/0x160 [ 210.322943][ C1] handle_softirqs+0x27d/0x850 [ 210.322974][ C1] ? run_ksoftirqd+0x9b/0x100 [ 210.323010][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 210.323040][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.323066][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.323098][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.323125][ C1] run_ksoftirqd+0x9b/0x100 [ 210.323154][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 210.323192][ C1] smpboot_thread_fn+0x542/0xa60 [ 210.323222][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.323281][ C1] kthread+0x711/0x8a0 [ 210.323318][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 210.323346][ C1] ? __pfx_kthread+0x10/0x10 [ 210.323374][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.323406][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.323443][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.323469][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 210.323494][ C1] ? __pfx_kthread+0x10/0x10 [ 210.323527][ C1] ret_from_fork+0x599/0xb30 [ 210.323555][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 210.323590][ C1] ? __switch_to_asm+0x39/0x70 [ 210.323621][ C1] ? __switch_to_asm+0x33/0x70 [ 210.323659][ C1] ? __pfx_kthread+0x10/0x10 [ 210.323692][ C1] ret_from_fork_asm+0x1a/0x30 [ 210.323743][ C1] [ 210.323755][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 210.338746][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 210.338776][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.338789][ C1] Call Trace: [ 210.338798][ C1] [ 210.338807][ C1] dump_stack_lvl+0x189/0x250 [ 210.338841][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.338866][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 210.338889][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 210.338948][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.339002][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 210.339039][ C1] f2fs_write_end_io+0x886/0xb60 [ 210.339096][ C1] blk_update_request+0x57e/0xe60 [ 210.339142][ C1] blk_mq_end_request+0x3e/0x70 [ 210.339170][ C1] blk_done_softirq+0x10a/0x160 [ 210.339207][ C1] handle_softirqs+0x27d/0x850 [ 210.339240][ C1] ? run_ksoftirqd+0x9b/0x100 [ 210.339275][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 210.339305][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.339331][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.339364][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.339390][ C1] run_ksoftirqd+0x9b/0x100 [ 210.339420][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 210.339457][ C1] smpboot_thread_fn+0x542/0xa60 [ 210.339487][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.339525][ C1] kthread+0x711/0x8a0 [ 210.339560][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 210.339588][ C1] ? __pfx_kthread+0x10/0x10 [ 210.339616][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.339654][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.339691][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.339717][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 210.339741][ C1] ? __pfx_kthread+0x10/0x10 [ 210.339774][ C1] ret_from_fork+0x599/0xb30 [ 210.339802][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 210.339836][ C1] ? __switch_to_asm+0x39/0x70 [ 210.339868][ C1] ? __switch_to_asm+0x33/0x70 [ 210.339898][ C1] ? __pfx_kthread+0x10/0x10 [ 210.339931][ C1] ret_from_fork_asm+0x1a/0x30 [ 210.339982][ C1] [ 210.339992][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 210.374631][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.377992][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 210.378023][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.378038][ C1] Call Trace: [ 210.378049][ C1] [ 210.378059][ C1] dump_stack_lvl+0x189/0x250 [ 210.378100][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.378129][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 210.378156][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 210.378196][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.378247][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 210.378282][ C1] f2fs_write_end_io+0x886/0xb60 [ 210.378332][ C1] blk_update_request+0x57e/0xe60 [ 210.378375][ C1] blk_mq_end_request+0x3e/0x70 [ 210.378399][ C1] blk_done_softirq+0x10a/0x160 [ 210.378422][ C1] handle_softirqs+0x27d/0x850 [ 210.378451][ C1] ? run_ksoftirqd+0x9b/0x100 [ 210.378487][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 210.378516][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.378542][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.378587][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.378613][ C1] run_ksoftirqd+0x9b/0x100 [ 210.378651][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 210.378688][ C1] smpboot_thread_fn+0x542/0xa60 [ 210.378718][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 210.378755][ C1] kthread+0x711/0x8a0 [ 210.378791][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 210.378818][ C1] ? __pfx_kthread+0x10/0x10 [ 210.378847][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.378878][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.378915][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.378942][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 210.378966][ C1] ? __pfx_kthread+0x10/0x10 [ 210.378998][ C1] ret_from_fork+0x599/0xb30 [ 210.379026][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 210.379060][ C1] ? __switch_to_asm+0x39/0x70 [ 210.379092][ C1] ? __switch_to_asm+0x33/0x70 [ 210.379122][ C1] ? __pfx_kthread+0x10/0x10 [ 210.379155][ C1] ret_from_fork_asm+0x1a/0x30 [ 210.379206][ C1] [ 210.379216][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 210.551267][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.049370][ T7645] loop1: detected capacity change from 0 to 32768 [ 211.065917][ T5827] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint [ 211.208132][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.328045][ T7652] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.429: inode has both inline data and extents flags [ 211.469730][ T7652] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.429: couldn't read orphan inode 15 (err -117) [ 211.530542][ T7645] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.554354][ T7652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.619079][ T7645] XFS (loop1): Ending clean mount [ 211.926335][ T5826] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.493502][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.262348][ T6426] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 213.364039][ T7687] loop1: detected capacity change from 0 to 64 [ 213.454865][ T6426] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 213.506336][ T6426] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 213.558334][ T6426] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 213.640877][ T6426] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.706612][ T6426] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.741104][ T6426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.774351][ T7689] loop0: detected capacity change from 0 to 4096 [ 213.794687][ T7680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 213.807073][ T6426] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.864231][ T6426] usb 4-1: invalid MIDI out EP 0 [ 213.907478][ T7691] loop1: detected capacity change from 0 to 128 [ 213.915348][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 213.977630][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 214.017294][ T7691] FAT-fs (loop1): Directory bread(block 32) failed [ 214.084066][ T7691] FAT-fs (loop1): Directory bread(block 33) failed [ 214.103693][ T6426] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 214.130583][ T7691] FAT-fs (loop1): Directory bread(block 34) failed [ 214.191699][ T6426] usb 4-1: USB disconnect, device number 19 [ 214.198474][ T7691] FAT-fs (loop1): Directory bread(block 35) failed [ 214.230104][ T6284] udevd[6284]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.261385][ T7691] FAT-fs (loop1): Directory bread(block 36) failed [ 214.323987][ T7691] FAT-fs (loop1): Directory bread(block 37) failed [ 214.405190][ T7691] FAT-fs (loop1): Directory bread(block 38) failed [ 214.461275][ T7691] FAT-fs (loop1): Directory bread(block 39) failed [ 214.489627][ T7691] FAT-fs (loop1): Directory bread(block 40) failed [ 214.518803][ T7691] FAT-fs (loop1): Directory bread(block 41) failed [ 214.877459][ T7556] Set syz1 is full, maxelem 65536 reached [ 215.055079][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.6.441'. [ 215.237622][ T31] audit: type=1326 audit(1766276157.967:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77deb8f749 code=0x7fc00000 [ 215.613919][ T7717] loop2: detected capacity change from 0 to 512 [ 215.793692][ T7717] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.445: inode has both inline data and extents flags [ 215.846512][ T7717] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.445: couldn't read orphan inode 15 (err -117) [ 215.936351][ T7717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.390517][ T7724] loop1: detected capacity change from 0 to 65536 [ 216.467679][ T7724] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 216.518451][ T7724] XFS (loop1): Ending clean mount [ 216.578039][ T5826] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 216.883075][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.922912][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 216.988148][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 217.273208][ T7744] Cannot find del_set index 3 as target [ 218.572249][ T5939] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 218.651519][ T7757] loop4: detected capacity change from 0 to 32768 [ 218.767991][ T7757] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 218.777349][ T7757] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.860126][ T7757] XFS (loop4): Ending clean mount [ 218.864749][ T5939] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.914564][ T5939] usb 3-1: not running at top speed; connect to a high speed hub [ 218.964656][ T5939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.012221][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.060947][ T5939] usb 3-1: string descriptor 0 read error: -22 [ 219.070625][ T5939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.119791][ T7769] loop6: detected capacity change from 0 to 256 [ 219.126293][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.137478][ T5831] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 219.219626][ T7769] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 219.266783][ T5939] usb 3-1: 0:2 : does not exist [ 220.076205][ T7775] loop0: detected capacity change from 0 to 512 [ 220.078182][ T7777] loop3: detected capacity change from 0 to 64 [ 220.097300][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.106605][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.121590][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.134337][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.142652][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.150413][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.158255][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.166080][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.173879][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.182017][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.189950][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.202746][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 220.238352][ T7775] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.464: inode has both inline data and extents flags [ 220.238810][ T5939] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 220.273076][ T5939] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 220.291778][ T5939] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 220.328866][ T5939] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 220.350463][ T5939] usb 3-1: USB disconnect, device number 9 [ 220.384577][ T7775] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.464: couldn't read orphan inode 15 (err -117) [ 220.515206][ T7775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.608412][ T7783] overlayfs: failed to resolve './file1': -2 [ 220.792073][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.944121][ T7789] loop3: detected capacity change from 0 to 16 [ 221.063624][ T7789] erofs (device loop3): mounted with root inode @ nid 36. [ 221.138618][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.192773][ T31] audit: type=1800 audit(1766276163.917:9): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.468" name="bus" dev="overlay" ino=466 res=0 errno=0 [ 221.226623][ T5916] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 221.604756][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 221.633811][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 238, changing to 4 [ 221.645894][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8272, setting to 1023 [ 221.658980][ T5916] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 221.804424][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.903095][ T5916] usb 5-1: config 0 descriptor?? [ 222.128121][ T5916] ath6kl: Failed to submit usb control message: -71 [ 222.186154][ T5916] ath6kl: unable to send the bmi data to the device: -71 [ 222.239270][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 222.267493][ T5916] ath6kl: Unable to send get target info: -71 [ 222.304964][ T5916] ath6kl: Failed to init ath6kl core: -71 [ 222.316794][ T7809] loop1: detected capacity change from 0 to 256 [ 222.331136][ T5916] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 222.499658][ T7809] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 222.524283][ T5916] usb 5-1: USB disconnect, device number 18 [ 222.723070][ T7812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'. [ 223.344039][ T7812] loop3: detected capacity change from 0 to 1764 [ 223.479141][ T7821] loop2: detected capacity change from 0 to 64 [ 223.793404][ T7823] overlayfs: failed to resolve './file1': -2 [ 223.923905][ T7825] loop4: detected capacity change from 0 to 512 [ 224.203852][ T7825] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.483: inode has both inline data and extents flags [ 224.231289][ T7825] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.483: couldn't read orphan inode 15 (err -117) [ 224.305446][ T7802] loop6: detected capacity change from 0 to 40427 [ 224.314058][ T7825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.364378][ T7802] F2FS-fs (loop6): build fault injection rate: 14 [ 224.370848][ T7802] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 224.473639][ T7802] F2FS-fs (loop6): invalid crc value [ 224.524331][ C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 224.592768][ C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 224.937417][ T7843] loop1: detected capacity change from 0 to 16 [ 224.973462][ T7843] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 225.077082][ T7844] cgroup: Unexpected value for 'cpuset_v2_mode' [ 225.109522][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.399918][ T7802] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 225.488659][ T7802] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 225.827785][ T7848] loop4: detected capacity change from 0 to 32768 [ 225.896269][ T7848] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 225.905803][ T7848] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 226.002772][ T5923] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 226.012230][ T7848] XFS (loop4): Ending clean mount [ 226.279232][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 227.079753][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 227.086546][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 227.087324][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 227.096873][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 227.101110][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 227.180649][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 227.477835][ T7848] syz.4.490 (7848): drop_caches: 2 [ 227.532156][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 238, changing to 4 [ 227.592377][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8272, setting to 1023 [ 227.606472][ T5923] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 227.617023][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.635491][ T5923] usb 4-1: config 0 descriptor?? [ 227.893757][ T5923] ath6kl: Failed to submit usb control message: -71 [ 227.900620][ T5923] ath6kl: unable to send the bmi data to the device: -71 [ 227.962487][ T5923] ath6kl: Unable to send get target info: -71 [ 227.979604][ T5923] ath6kl: Failed to init ath6kl core: -71 [ 228.063908][ T5923] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 228.301369][ T5923] usb 4-1: USB disconnect, device number 20 [ 228.398641][ T5831] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.823102][ T7874] overlayfs: failed to resolve './file1': -2 [ 229.583083][ T7881] trusted_key: encrypted_key: keylen parameter is missing [ 229.826041][ T7887] loop4: detected capacity change from 0 to 1024 [ 229.846822][ T7889] loop1: detected capacity change from 0 to 256 [ 229.857866][ T7887] EXT4-fs: Ignoring removed bh option [ 229.961665][ T7887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.986340][ T7889] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 230.007869][ T7891] loop3: detected capacity change from 0 to 1024 [ 230.048054][ T7900] netlink: 24 bytes leftover after parsing attributes in process `syz.6.505'. [ 230.280024][ T7891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.361948][ T7904] overlay: ./file0 is not a directory [ 230.424815][ T7891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.447147][ T7906] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.502: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 230.601615][ T7906] EXT4-fs (loop4): Remounting filesystem read-only [ 230.850603][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.179044][ T7916] overlayfs: failed to resolve './file1': -2 [ 231.306465][ T7914] loop4: detected capacity change from 0 to 4096 [ 231.373042][ T5991] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 231.436575][ T7918] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.568845][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 231.615276][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 238, changing to 4 [ 231.622892][ T7920] loop1: detected capacity change from 0 to 256 [ 231.682449][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8272, setting to 1023 [ 231.732188][ T5991] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 231.767025][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.821331][ T7920] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 231.870642][ T5991] usb 3-1: config 0 descriptor?? [ 232.131546][ T7903] loop0: detected capacity change from 0 to 40427 [ 232.175365][ T7903] F2FS-fs (loop0): build fault injection rate: 14 [ 232.199745][ T5991] ath6kl: Failed to submit usb control message: -71 [ 232.251936][ T7903] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 232.259512][ T5991] ath6kl: unable to send the bmi data to the device: -71 [ 232.272908][ T5991] ath6kl: Unable to send get target info: -71 [ 232.286174][ T5991] ath6kl: Failed to init ath6kl core: -71 [ 232.295304][ T5991] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 232.348894][ T7903] F2FS-fs (loop0): invalid crc value [ 232.362490][ T5991] usb 3-1: USB disconnect, device number 10 [ 232.380399][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 232.442249][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 232.466354][ T7931] loop6: detected capacity change from 0 to 16 [ 232.494922][ T5939] kernel write not supported for file /video8 (pid: 5939 comm: kworker/0:5) [ 232.528968][ T7931] erofs (device loop6): mounted with root inode @ nid 36. [ 232.613424][ T31] audit: type=1800 audit(1766276175.337:10): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.516" name="bus" dev="overlay" ino=81 res=0 errno=0 [ 232.650324][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.781256][ T7903] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 232.823180][ T5939] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 232.882437][ T7903] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 232.907520][ T7903] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 233.012220][ T5939] usb 5-1: device descriptor read/64, error -71 [ 233.022890][ T7903] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40 [ 233.098022][ T7903] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 233.159594][ T7903] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab4/0x1cf0 [ 233.185205][ T7940] loop2: detected capacity change from 0 to 2048 [ 233.232725][ T7903] F2FS-fs (loop0): inconsistent node block, node_type:3, nid:15, node_footer[nid:15,ino:3,ofs:191623,cpver:0,blkaddr:0] [ 233.283448][ T5939] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 233.310849][ T7940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.328554][ T7944] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0 [ 233.348710][ T7940] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 233.420854][ T7944] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:10241045589465957861,blkaddr:4102] [ 233.452217][ T5939] usb 5-1: device descriptor read/64, error -71 [ 233.476273][ T7946] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 233.492302][ T7946] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab4/0x1cf0 [ 233.528748][ T7946] F2FS-fs (loop0): inconsistent node block, node_type:3, nid:17, node_footer[nid:17,ino:3,ofs:249659,cpver:0,blkaddr:0] [ 233.575212][ T5939] usb usb5-port1: attempt power cycle [ 233.742540][ T7956] overlayfs: failed to resolve './file1': -2 [ 233.774898][ C1] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 233.785546][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 233.785582][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.785597][ C1] Call Trace: [ 233.785607][ C1] [ 233.785618][ C1] dump_stack_lvl+0x189/0x250 [ 233.785661][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.785693][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 233.785719][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 233.785762][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 233.785814][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 233.785850][ C1] f2fs_write_end_io+0x886/0xb60 [ 233.785901][ C1] blk_update_request+0x57e/0xe60 [ 233.785945][ C1] blk_mq_end_request+0x3e/0x70 [ 233.785973][ C1] blk_done_softirq+0x10a/0x160 [ 233.786000][ C1] handle_softirqs+0x27d/0x850 [ 233.786033][ C1] ? run_ksoftirqd+0x9b/0x100 [ 233.786069][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 233.786100][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.786127][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.786160][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.786187][ C1] run_ksoftirqd+0x9b/0x100 [ 233.786216][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 233.786254][ C1] smpboot_thread_fn+0x542/0xa60 [ 233.786284][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.786323][ C1] kthread+0x711/0x8a0 [ 233.786360][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 233.786388][ C1] ? __pfx_kthread+0x10/0x10 [ 233.786417][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.786457][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.786495][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.786522][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 233.786546][ C1] ? __pfx_kthread+0x10/0x10 [ 233.786595][ C1] ret_from_fork+0x599/0xb30 [ 233.786625][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 233.786661][ C1] ? __switch_to_asm+0x39/0x70 [ 233.786693][ C1] ? __switch_to_asm+0x33/0x70 [ 233.786724][ C1] ? __pfx_kthread+0x10/0x10 [ 233.786758][ C1] ret_from_fork_asm+0x1a/0x30 [ 233.786810][ C1] [ 233.786821][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 233.902456][ T7958] loop6: detected capacity change from 0 to 4096 [ 233.906224][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 233.906252][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.906267][ C1] Call Trace: [ 233.906278][ C1] [ 233.906290][ C1] dump_stack_lvl+0x189/0x250 [ 233.906329][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.906359][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 233.906385][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 233.906433][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 233.906484][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 233.906520][ C1] f2fs_write_end_io+0x886/0xb60 [ 233.906571][ C1] blk_update_request+0x57e/0xe60 [ 233.906614][ C1] blk_mq_end_request+0x3e/0x70 [ 233.906642][ C1] blk_done_softirq+0x10a/0x160 [ 233.906669][ C1] handle_softirqs+0x27d/0x850 [ 233.906701][ C1] ? run_ksoftirqd+0x9b/0x100 [ 233.906736][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 233.906766][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.906793][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.906824][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.906851][ C1] run_ksoftirqd+0x9b/0x100 [ 233.906880][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 233.906918][ C1] smpboot_thread_fn+0x542/0xa60 [ 233.906948][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.906985][ C1] kthread+0x711/0x8a0 [ 233.907021][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 233.907049][ C1] ? __pfx_kthread+0x10/0x10 [ 233.907077][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.907109][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.907145][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.907172][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 233.907196][ C1] ? __pfx_kthread+0x10/0x10 [ 233.907229][ C1] ret_from_fork+0x599/0xb30 [ 233.907256][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 233.907292][ C1] ? __switch_to_asm+0x39/0x70 [ 233.907322][ C1] ? __switch_to_asm+0x33/0x70 [ 233.907352][ C1] ? __pfx_kthread+0x10/0x10 [ 233.907399][ C1] ret_from_fork_asm+0x1a/0x30 [ 233.907457][ C1] [ 233.907468][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 233.935356][ T5939] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 233.936190][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 233.936219][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.936234][ C1] Call Trace: [ 233.936245][ C1] [ 233.936255][ C1] dump_stack_lvl+0x189/0x250 [ 233.936295][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.936325][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 233.936351][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 233.936392][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 233.936452][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 233.936488][ C1] f2fs_write_end_io+0x886/0xb60 [ 233.936538][ C1] blk_update_request+0x57e/0xe60 [ 233.936582][ C1] blk_mq_end_request+0x3e/0x70 [ 233.936609][ C1] blk_done_softirq+0x10a/0x160 [ 233.936637][ C1] handle_softirqs+0x27d/0x850 [ 233.936669][ C1] ? run_ksoftirqd+0x9b/0x100 [ 233.936704][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 233.936735][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.936761][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.936792][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.936819][ C1] run_ksoftirqd+0x9b/0x100 [ 233.936848][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 233.936886][ C1] smpboot_thread_fn+0x542/0xa60 [ 233.936916][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.936954][ C1] kthread+0x711/0x8a0 [ 233.936990][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 233.937017][ C1] ? __pfx_kthread+0x10/0x10 [ 233.937046][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.937077][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.937115][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.937141][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 233.937165][ C1] ? __pfx_kthread+0x10/0x10 [ 233.937198][ C1] ret_from_fork+0x599/0xb30 [ 233.937225][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 233.937260][ C1] ? __switch_to_asm+0x39/0x70 [ 233.937291][ C1] ? __switch_to_asm+0x33/0x70 [ 233.937321][ C1] ? __pfx_kthread+0x10/0x10 [ 233.937354][ C1] ret_from_fork_asm+0x1a/0x30 [ 233.937406][ C1] [ 233.937417][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 233.984543][ T5939] usb 5-1: device descriptor read/8, error -71 [ 233.985853][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 233.985883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.985912][ C1] Call Trace: [ 233.985923][ C1] [ 233.985934][ C1] dump_stack_lvl+0x189/0x250 [ 233.985973][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.986003][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 233.986028][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 233.986069][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 233.986119][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 233.986155][ C1] f2fs_write_end_io+0x886/0xb60 [ 233.986205][ C1] blk_update_request+0x57e/0xe60 [ 233.986248][ C1] blk_mq_end_request+0x3e/0x70 [ 233.986276][ C1] blk_done_softirq+0x10a/0x160 [ 233.986304][ C1] handle_softirqs+0x27d/0x850 [ 233.986335][ C1] ? run_ksoftirqd+0x9b/0x100 [ 233.986371][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 233.986401][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.986435][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.986467][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.986494][ C1] run_ksoftirqd+0x9b/0x100 [ 233.986523][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 233.986560][ C1] smpboot_thread_fn+0x542/0xa60 [ 233.986590][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 233.986628][ C1] kthread+0x711/0x8a0 [ 233.986664][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 233.986691][ C1] ? __pfx_kthread+0x10/0x10 [ 233.986720][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.986751][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.986788][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.986814][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 233.986843][ C1] ? __pfx_kthread+0x10/0x10 [ 233.986876][ C1] ret_from_fork+0x599/0xb30 [ 233.986904][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 233.986939][ C1] ? __switch_to_asm+0x39/0x70 [ 233.986970][ C1] ? __switch_to_asm+0x33/0x70 [ 233.987000][ C1] ? __pfx_kthread+0x10/0x10 [ 233.987033][ C1] ret_from_fork_asm+0x1a/0x30 [ 233.987084][ C1] [ 233.987094][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 234.242348][ T5939] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 234.242634][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 234.242663][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.242678][ C1] Call Trace: [ 234.242688][ C1] [ 234.242698][ C1] dump_stack_lvl+0x189/0x250 [ 234.242738][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.242768][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 234.242809][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 234.242848][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 234.242899][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 234.242936][ C1] f2fs_write_end_io+0x886/0xb60 [ 234.242985][ C1] blk_update_request+0x57e/0xe60 [ 234.243028][ C1] blk_mq_end_request+0x3e/0x70 [ 234.243056][ C1] blk_done_softirq+0x10a/0x160 [ 234.243083][ C1] handle_softirqs+0x27d/0x850 [ 234.243115][ C1] ? run_ksoftirqd+0x9b/0x100 [ 234.243151][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 234.243181][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 234.243207][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.243240][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 234.243266][ C1] run_ksoftirqd+0x9b/0x100 [ 234.243313][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 234.243351][ C1] smpboot_thread_fn+0x542/0xa60 [ 234.243381][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 234.243419][ C1] kthread+0x711/0x8a0 [ 234.243467][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 234.243494][ C1] ? __pfx_kthread+0x10/0x10 [ 234.243523][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.243555][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.243592][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.243618][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 234.243643][ C1] ? __pfx_kthread+0x10/0x10 [ 234.243675][ C1] ret_from_fork+0x599/0xb30 [ 234.243703][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 234.243738][ C1] ? __switch_to_asm+0x39/0x70 [ 234.243770][ C1] ? __switch_to_asm+0x33/0x70 [ 234.243800][ C1] ? __pfx_kthread+0x10/0x10 [ 234.243833][ C1] ret_from_fork_asm+0x1a/0x30 [ 234.243884][ C1] [ 234.243894][ C1] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 234.282324][ T5939] usb 5-1: device descriptor read/8, error -71 [ 234.332283][ T5827] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint [ 234.342604][ T7963] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.062664][ T5939] usb usb5-port1: unable to enumerate USB device [ 235.503898][ T7974] loop6: detected capacity change from 0 to 16 [ 235.554623][ T7974] erofs (device loop6): mounted with root inode @ nid 36. [ 236.129933][ T7993] loop0: detected capacity change from 0 to 256 [ 236.173584][ T7993] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 236.883531][ T5939] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 237.059773][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.095972][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.132435][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.176380][ T5939] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.212027][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.275433][ T5939] usb 4-1: config 0 descriptor?? [ 237.652437][ T5815] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 237.699981][ T7995] loop2: detected capacity change from 0 to 40427 [ 237.751147][ T7995] F2FS-fs (loop2): build fault injection rate: 14 [ 237.778064][ T8025] loop1: detected capacity change from 0 to 16 [ 237.795082][ T7995] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 237.823744][ T5939] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 237.831393][ T8027] loop4: detected capacity change from 0 to 64 [ 237.843985][ T5815] usb 1-1: device descriptor read/64, error -71 [ 237.876940][ T7995] F2FS-fs (loop2): invalid crc value [ 237.897838][ T8025] erofs (device loop1): mounted with root inode @ nid 36. [ 237.960241][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 238.002364][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 238.085704][ T5815] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 238.254762][ T5815] usb 1-1: device descriptor read/64, error -71 [ 238.365689][ T5815] usb usb1-port1: attempt power cycle [ 238.402371][ T7995] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 238.411457][ T7995] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 238.492368][ T7995] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 238.540617][ T7995] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40 [ 238.586174][ T7995] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 238.602444][ T5939] usb 4-1: USB disconnect, device number 21 [ 238.644395][ T7995] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab4/0x1cf0 [ 238.683660][ T8037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.693084][ T7995] F2FS-fs (loop2): inconsistent node block, node_type:3, nid:15, node_footer[nid:15,ino:3,ofs:191623,cpver:0,blkaddr:0] [ 238.722415][ T5815] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 238.769424][ T5815] usb 1-1: device descriptor read/8, error -71 [ 238.793254][ T7995] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of vfs_getxattr_alloc+0x42e/0x590 [ 238.829626][ T8040] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 238.852959][ T8038] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40 [ 239.000396][ T8042] loop1: detected capacity change from 0 to 256 [ 239.032343][ T5815] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 239.052400][ C1] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 239.063155][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 239.063184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.063200][ C1] Call Trace: [ 239.063210][ C1] [ 239.063221][ C1] dump_stack_lvl+0x189/0x250 [ 239.063262][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.063309][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 239.063339][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 239.063384][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.063484][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 239.063526][ C1] f2fs_write_end_io+0x886/0xb60 [ 239.063582][ C1] blk_update_request+0x57e/0xe60 [ 239.063633][ C1] blk_mq_end_request+0x3e/0x70 [ 239.063677][ C1] blk_done_softirq+0x10a/0x160 [ 239.063708][ C1] handle_softirqs+0x27d/0x850 [ 239.063745][ C1] ? run_ksoftirqd+0x9b/0x100 [ 239.063783][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 239.063821][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.063852][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.063891][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.063920][ C1] run_ksoftirqd+0x9b/0x100 [ 239.063952][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 239.063997][ C1] smpboot_thread_fn+0x542/0xa60 [ 239.064029][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.064073][ C1] kthread+0x711/0x8a0 [ 239.064115][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 239.064149][ C1] ? __pfx_kthread+0x10/0x10 [ 239.064183][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.064220][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.064256][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.064284][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 239.064307][ C1] ? __pfx_kthread+0x10/0x10 [ 239.064341][ C1] ret_from_fork+0x599/0xb30 [ 239.064368][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 239.064403][ C1] ? __switch_to_asm+0x39/0x70 [ 239.064443][ C1] ? __switch_to_asm+0x33/0x70 [ 239.064474][ C1] ? __pfx_kthread+0x10/0x10 [ 239.064508][ C1] ret_from_fork_asm+0x1a/0x30 [ 239.064560][ C1] [ 239.064571][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 239.249863][ T8042] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 239.254516][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 239.254547][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.254562][ C1] Call Trace: [ 239.254572][ C1] [ 239.254582][ C1] dump_stack_lvl+0x189/0x250 [ 239.254622][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.254660][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 239.254687][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 239.254726][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.254778][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 239.254814][ C1] f2fs_write_end_io+0x886/0xb60 [ 239.254864][ C1] blk_update_request+0x57e/0xe60 [ 239.254908][ C1] blk_mq_end_request+0x3e/0x70 [ 239.254936][ C1] blk_done_softirq+0x10a/0x160 [ 239.254963][ C1] handle_softirqs+0x27d/0x850 [ 239.254995][ C1] ? run_ksoftirqd+0x9b/0x100 [ 239.255031][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 239.255060][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.255087][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.255133][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.255160][ C1] run_ksoftirqd+0x9b/0x100 [ 239.255189][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 239.255227][ C1] smpboot_thread_fn+0x542/0xa60 [ 239.255257][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.255294][ C1] kthread+0x711/0x8a0 [ 239.255331][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 239.255358][ C1] ? __pfx_kthread+0x10/0x10 [ 239.255387][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.255417][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.255448][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.255471][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 239.255494][ C1] ? __pfx_kthread+0x10/0x10 [ 239.255528][ C1] ret_from_fork+0x599/0xb30 [ 239.255562][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 239.255597][ C1] ? __switch_to_asm+0x39/0x70 [ 239.255629][ C1] ? __switch_to_asm+0x33/0x70 [ 239.255665][ C1] ? __pfx_kthread+0x10/0x10 [ 239.255699][ C1] ret_from_fork_asm+0x1a/0x30 [ 239.255750][ C1] [ 239.255760][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 239.491523][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 239.491557][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.491572][ C1] Call Trace: [ 239.491582][ C1] [ 239.491593][ C1] dump_stack_lvl+0x189/0x250 [ 239.491634][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.491671][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 239.491698][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 239.491741][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.491793][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 239.491829][ C1] f2fs_write_end_io+0x886/0xb60 [ 239.491882][ C1] blk_update_request+0x57e/0xe60 [ 239.491927][ C1] blk_mq_end_request+0x3e/0x70 [ 239.492007][ C1] blk_done_softirq+0x10a/0x160 [ 239.492035][ C1] handle_softirqs+0x27d/0x850 [ 239.492083][ C1] ? run_ksoftirqd+0x9b/0x100 [ 239.492119][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 239.492149][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.492174][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.492207][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.492233][ C1] run_ksoftirqd+0x9b/0x100 [ 239.492262][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 239.492299][ C1] smpboot_thread_fn+0x542/0xa60 [ 239.492342][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.492383][ C1] kthread+0x711/0x8a0 [ 239.492433][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 239.492461][ C1] ? __pfx_kthread+0x10/0x10 [ 239.492491][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.492524][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.492563][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.492591][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 239.492619][ C1] ? __pfx_kthread+0x10/0x10 [ 239.492656][ C1] ret_from_fork+0x599/0xb30 [ 239.492689][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 239.492725][ C1] ? __switch_to_asm+0x39/0x70 [ 239.492757][ C1] ? __switch_to_asm+0x33/0x70 [ 239.492789][ C1] ? __pfx_kthread+0x10/0x10 [ 239.492822][ C1] ret_from_fork_asm+0x1a/0x30 [ 239.492882][ C1] [ 239.693848][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 239.700759][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 239.700794][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.700810][ C1] Call Trace: [ 239.700820][ C1] [ 239.700833][ C1] dump_stack_lvl+0x189/0x250 [ 239.700875][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.700907][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 239.700933][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 239.700975][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.701027][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 239.701064][ C1] f2fs_write_end_io+0x886/0xb60 [ 239.701115][ C1] blk_update_request+0x57e/0xe60 [ 239.701159][ C1] blk_mq_end_request+0x3e/0x70 [ 239.701188][ C1] blk_done_softirq+0x10a/0x160 [ 239.701216][ C1] handle_softirqs+0x27d/0x850 [ 239.701248][ C1] ? run_ksoftirqd+0x9b/0x100 [ 239.701285][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 239.701315][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.701343][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.701376][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.701404][ C1] run_ksoftirqd+0x9b/0x100 [ 239.701434][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 239.701481][ C1] smpboot_thread_fn+0x542/0xa60 [ 239.701512][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.701550][ C1] kthread+0x711/0x8a0 [ 239.701587][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 239.701615][ C1] ? __pfx_kthread+0x10/0x10 [ 239.701645][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.701678][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.701715][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.701743][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 239.701768][ C1] ? __pfx_kthread+0x10/0x10 [ 239.701816][ C1] ret_from_fork+0x599/0xb30 [ 239.701845][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 239.701880][ C1] ? __switch_to_asm+0x39/0x70 [ 239.701912][ C1] ? __switch_to_asm+0x33/0x70 [ 239.701944][ C1] ? __pfx_kthread+0x10/0x10 [ 239.701978][ C1] ret_from_fork_asm+0x1a/0x30 [ 239.702030][ C1] [ 239.702041][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 239.912718][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 239.912752][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.912767][ C1] Call Trace: [ 239.912778][ C1] [ 239.912789][ C1] dump_stack_lvl+0x189/0x250 [ 239.912830][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.912858][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 239.912881][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 239.912918][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 239.912963][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 239.912995][ C1] f2fs_write_end_io+0x886/0xb60 [ 239.913040][ C1] blk_update_request+0x57e/0xe60 [ 239.913077][ C1] blk_mq_end_request+0x3e/0x70 [ 239.913102][ C1] blk_done_softirq+0x10a/0x160 [ 239.913126][ C1] handle_softirqs+0x27d/0x850 [ 239.913154][ C1] ? run_ksoftirqd+0x9b/0x100 [ 239.913186][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 239.913213][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.913235][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.913264][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.913287][ C1] run_ksoftirqd+0x9b/0x100 [ 239.913313][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 239.913346][ C1] smpboot_thread_fn+0x542/0xa60 [ 239.913373][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 239.913406][ C1] kthread+0x711/0x8a0 [ 239.913438][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 239.913463][ C1] ? __pfx_kthread+0x10/0x10 [ 239.913489][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.913516][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.913549][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.913573][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 239.913593][ C1] ? __pfx_kthread+0x10/0x10 [ 239.913623][ C1] ret_from_fork+0x599/0xb30 [ 239.913647][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 239.913686][ C1] ? __switch_to_asm+0x39/0x70 [ 239.913717][ C1] ? __switch_to_asm+0x33/0x70 [ 239.913747][ C1] ? __pfx_kthread+0x10/0x10 [ 239.913778][ C1] ret_from_fork_asm+0x1a/0x30 [ 239.913838][ C1] [ 239.913854][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 240.123047][ T5838] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint [ 240.163566][ T5815] usb 1-1: device descriptor read/8, error -71 [ 240.258607][ T8056] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 240.269140][ T8056] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.293371][ T5815] usb usb1-port1: unable to enumerate USB device [ 240.560048][ T8062] loop4: detected capacity change from 0 to 64 [ 241.602240][ T8053] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.828212][ T8053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.878532][ T8053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.991596][ T8053] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.059040][ T8053] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.100509][ T8053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.159541][ T8053] usb 2-1: config 0 descriptor?? [ 242.644592][ T8071] loop4: detected capacity change from 0 to 32768 [ 242.714639][ T8071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.566 (8071) [ 242.716522][ T8053] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 242.902701][ T8071] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.974158][ T8071] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 243.255574][ T8071] BTRFS info (device loop4): enabling ssd optimizations [ 243.294963][ T8073] loop0: detected capacity change from 0 to 40427 [ 243.313864][ T8071] BTRFS info (device loop4): turning on async discard [ 243.352233][ T8071] BTRFS info (device loop4): enabling free space tree [ 243.361468][ T8073] F2FS-fs (loop0): build fault injection rate: 14 [ 243.400489][ T8073] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 243.465007][ T8073] F2FS-fs (loop0): invalid crc value [ 243.500806][ T24] usb 2-1: USB disconnect, device number 9 [ 243.545083][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 243.592018][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 243.666018][ T8120] loop2: detected capacity change from 0 to 64 [ 243.925343][ T5831] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.957758][ T8073] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 244.055743][ T8073] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 245.871097][ T8150] loop3: detected capacity change from 0 to 64 [ 246.682655][ T5815] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 246.866589][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.912369][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.960160][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.002924][ T5815] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.039462][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.107829][ T5815] usb 4-1: config 0 descriptor?? [ 247.125971][ T8146] loop2: detected capacity change from 0 to 32768 [ 247.213038][ T8146] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.591 (8146) [ 247.283529][ T8146] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.315760][ T8146] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 247.611695][ T8146] BTRFS info (device loop2): enabling ssd optimizations [ 247.637900][ T5815] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 247.668473][ T8146] BTRFS info (device loop2): turning on async discard [ 247.708749][ T8146] BTRFS info (device loop2): enabling free space tree [ 248.351988][ T5838] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.375021][ T31] audit: type=1804 audit(1766276191.107:11): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.604" name="/newroot/121/bus" dev="tmpfs" ino=693 res=1 errno=0 [ 248.555500][ T5815] usb 4-1: USB disconnect, device number 22 [ 248.777595][ T8202] loop0: detected capacity change from 0 to 64 [ 250.575086][ T8216] netlink: 16 bytes leftover after parsing attributes in process `syz.6.609'. [ 250.666355][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.609'. [ 252.554742][ T8237] loop0: detected capacity change from 0 to 32768 [ 252.627158][ T8237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.617 (8237) [ 252.674545][ T8237] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.685434][ T8237] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 253.221036][ T8237] BTRFS info (device loop0): enabling ssd optimizations [ 253.229153][ T8237] BTRFS info (device loop0): turning on async discard [ 253.236083][ T8237] BTRFS info (device loop0): enabling free space tree [ 253.503375][ T5827] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.738918][ T8264] netlink: 16 bytes leftover after parsing attributes in process `syz.6.624'. [ 253.842410][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.624'. [ 255.774227][ T8287] loop4: detected capacity change from 0 to 40427 [ 255.851278][ T8287] F2FS-fs (loop4): build fault injection rate: 14 [ 255.857863][ T8287] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 255.891084][ T8287] F2FS-fs (loop4): invalid crc value [ 255.963273][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 256.011220][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 256.099439][ T8287] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 256.111591][ T8287] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 256.152516][ T8287] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 256.217026][ T8287] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40 [ 256.233906][ T8287] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0 [ 256.245984][ T8287] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 256.691704][ T8293] program syz.6.631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.892862][ C0] F2FS-fs (loop4): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 256.903581][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 256.903615][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.903632][ C0] Call Trace: [ 256.903642][ C0] [ 256.903652][ C0] dump_stack_lvl+0x189/0x250 [ 256.903691][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.903722][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 256.903750][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 256.903792][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 256.903842][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 256.903876][ C0] f2fs_write_end_io+0x886/0xb60 [ 256.903927][ C0] blk_update_request+0x57e/0xe60 [ 256.903970][ C0] blk_mq_end_request+0x3e/0x70 [ 256.904012][ C0] blk_done_softirq+0x10a/0x160 [ 256.904039][ C0] handle_softirqs+0x27d/0x850 [ 256.904071][ C0] ? run_ksoftirqd+0x9b/0x100 [ 256.904107][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 256.904138][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 256.904165][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.904198][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 256.904225][ C0] run_ksoftirqd+0x9b/0x100 [ 256.904255][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 256.904294][ C0] smpboot_thread_fn+0x542/0xa60 [ 256.904323][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 256.904362][ C0] kthread+0x711/0x8a0 [ 256.904398][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 256.904426][ C0] ? __pfx_kthread+0x10/0x10 [ 256.904461][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.904493][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.904530][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 256.904558][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 256.904583][ C0] ? __pfx_kthread+0x10/0x10 [ 256.904615][ C0] ret_from_fork+0x599/0xb30 [ 256.904643][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 256.904679][ C0] ? __switch_to_asm+0x39/0x70 [ 256.904711][ C0] ? __switch_to_asm+0x33/0x70 [ 256.904743][ C0] ? __pfx_kthread+0x10/0x10 [ 256.904776][ C0] ret_from_fork_asm+0x1a/0x30 [ 256.904828][ C0] [ 256.904838][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 257.115909][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 257.115934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.115946][ C0] Call Trace: [ 257.115957][ C0] [ 257.115966][ C0] dump_stack_lvl+0x189/0x250 [ 257.115998][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.116021][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 257.116042][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 257.116073][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 257.116111][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 257.116138][ C0] f2fs_write_end_io+0x886/0xb60 [ 257.116176][ C0] blk_update_request+0x57e/0xe60 [ 257.116208][ C0] blk_mq_end_request+0x3e/0x70 [ 257.116229][ C0] blk_done_softirq+0x10a/0x160 [ 257.116249][ C0] handle_softirqs+0x27d/0x850 [ 257.116273][ C0] ? run_ksoftirqd+0x9b/0x100 [ 257.116300][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 257.116322][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.116342][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.116382][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.116402][ C0] run_ksoftirqd+0x9b/0x100 [ 257.116425][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 257.116453][ C0] smpboot_thread_fn+0x542/0xa60 [ 257.116476][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.116505][ C0] kthread+0x711/0x8a0 [ 257.116537][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 257.116558][ C0] ? __pfx_kthread+0x10/0x10 [ 257.116580][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.116604][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.116631][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.116652][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 257.116670][ C0] ? __pfx_kthread+0x10/0x10 [ 257.116694][ C0] ret_from_fork+0x599/0xb30 [ 257.116716][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 257.116744][ C0] ? __switch_to_asm+0x39/0x70 [ 257.116768][ C0] ? __switch_to_asm+0x33/0x70 [ 257.116791][ C0] ? __pfx_kthread+0x10/0x10 [ 257.116815][ C0] ret_from_fork_asm+0x1a/0x30 [ 257.116854][ C0] [ 257.116862][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 257.324985][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 257.325009][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.325021][ C0] Call Trace: [ 257.325031][ C0] [ 257.325041][ C0] dump_stack_lvl+0x189/0x250 [ 257.325072][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.325096][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 257.325116][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 257.325147][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 257.325186][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 257.325220][ C0] f2fs_write_end_io+0x886/0xb60 [ 257.325265][ C0] blk_update_request+0x57e/0xe60 [ 257.325298][ C0] blk_mq_end_request+0x3e/0x70 [ 257.325318][ C0] blk_done_softirq+0x10a/0x160 [ 257.325338][ C0] handle_softirqs+0x27d/0x850 [ 257.325362][ C0] ? run_ksoftirqd+0x9b/0x100 [ 257.325389][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 257.325412][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.325439][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.325463][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.325483][ C0] run_ksoftirqd+0x9b/0x100 [ 257.325505][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 257.325533][ C0] smpboot_thread_fn+0x542/0xa60 [ 257.325556][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.325584][ C0] kthread+0x711/0x8a0 [ 257.325611][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 257.325643][ C0] ? __pfx_kthread+0x10/0x10 [ 257.325664][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.325688][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.325717][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.325736][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 257.325754][ C0] ? __pfx_kthread+0x10/0x10 [ 257.325779][ C0] ret_from_fork+0x599/0xb30 [ 257.325800][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 257.325826][ C0] ? __switch_to_asm+0x39/0x70 [ 257.325850][ C0] ? __switch_to_asm+0x33/0x70 [ 257.325873][ C0] ? __pfx_kthread+0x10/0x10 [ 257.325898][ C0] ret_from_fork_asm+0x1a/0x30 [ 257.325937][ C0] [ 257.325945][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 257.536376][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 257.536402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.536414][ C0] Call Trace: [ 257.536425][ C0] [ 257.536434][ C0] dump_stack_lvl+0x189/0x250 [ 257.536467][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.536490][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 257.536543][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 257.536575][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 257.536613][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 257.536642][ C0] f2fs_write_end_io+0x886/0xb60 [ 257.536679][ C0] blk_update_request+0x57e/0xe60 [ 257.536712][ C0] blk_mq_end_request+0x3e/0x70 [ 257.536732][ C0] blk_done_softirq+0x10a/0x160 [ 257.536758][ C0] handle_softirqs+0x27d/0x850 [ 257.536794][ C0] ? run_ksoftirqd+0x9b/0x100 [ 257.536820][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 257.536843][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.536862][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.536886][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.536906][ C0] run_ksoftirqd+0x9b/0x100 [ 257.536929][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 257.536957][ C0] smpboot_thread_fn+0x542/0xa60 [ 257.536980][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.537008][ C0] kthread+0x711/0x8a0 [ 257.537035][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 257.537056][ C0] ? __pfx_kthread+0x10/0x10 [ 257.537078][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.537101][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.537129][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.537149][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 257.537167][ C0] ? __pfx_kthread+0x10/0x10 [ 257.537194][ C0] ret_from_fork+0x599/0xb30 [ 257.537216][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 257.537242][ C0] ? __switch_to_asm+0x39/0x70 [ 257.537266][ C0] ? __switch_to_asm+0x33/0x70 [ 257.537289][ C0] ? __pfx_kthread+0x10/0x10 [ 257.537313][ C0] ret_from_fork_asm+0x1a/0x30 [ 257.537352][ C0] [ 257.537359][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 257.746678][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 257.746704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.746716][ C0] Call Trace: [ 257.746727][ C0] [ 257.746740][ C0] dump_stack_lvl+0x189/0x250 [ 257.746771][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.746795][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 257.746816][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 257.746848][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 257.746887][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 257.746915][ C0] f2fs_write_end_io+0x886/0xb60 [ 257.746953][ C0] blk_update_request+0x57e/0xe60 [ 257.746987][ C0] blk_mq_end_request+0x3e/0x70 [ 257.747008][ C0] blk_done_softirq+0x10a/0x160 [ 257.747028][ C0] handle_softirqs+0x27d/0x850 [ 257.747052][ C0] ? run_ksoftirqd+0x9b/0x100 [ 257.747078][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 257.747101][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.747121][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.747145][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.747165][ C0] run_ksoftirqd+0x9b/0x100 [ 257.747187][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 257.747216][ C0] smpboot_thread_fn+0x542/0xa60 [ 257.747243][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 257.747271][ C0] kthread+0x711/0x8a0 [ 257.747298][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 257.747319][ C0] ? __pfx_kthread+0x10/0x10 [ 257.747341][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.747364][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.747392][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 257.747413][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 257.747485][ C0] ? __pfx_kthread+0x10/0x10 [ 257.747509][ C0] ret_from_fork+0x599/0xb30 [ 257.747530][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 257.747557][ C0] ? __switch_to_asm+0x39/0x70 [ 257.747580][ C0] ? __switch_to_asm+0x33/0x70 [ 257.747603][ C0] ? __pfx_kthread+0x10/0x10 [ 257.747628][ C0] ret_from_fork_asm+0x1a/0x30 [ 257.747666][ C0] [ 257.747686][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 257.970510][ T5831] F2FS-fs (loop4): do_checkpoint failed err:-5, stop checkpoint [ 258.273594][ T5888] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 258.651073][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.746305][ T5888] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 258.829383][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.930748][ T5888] usb 4-1: config 0 descriptor?? [ 259.010892][ T5888] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 260.748701][ T8312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.639'. [ 260.758134][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 261.209132][ T5888] pwc: send_video_command error -71 [ 261.272322][ T5888] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 261.280760][ T5888] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 261.295399][ T5888] usb 4-1: USB disconnect, device number 23 [ 261.297491][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 261.373262][ T8315] loop4: detected capacity change from 0 to 64 [ 262.082374][ T8329] loop4: detected capacity change from 0 to 256 [ 262.152183][ T8329] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 263.165605][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 263.194056][ T8344] : entered promiscuous mode [ 263.861254][ T8355] loop1: detected capacity change from 0 to 32768 [ 263.881298][ T8355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.653 (8355) [ 263.900576][ T8355] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.910990][ T8355] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 264.251703][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.654'. [ 264.265956][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 264.304280][ T8355] BTRFS info (device loop1): enabling ssd optimizations [ 264.311402][ T8355] BTRFS info (device loop1): turning on async discard [ 264.318353][ T8355] BTRFS info (device loop1): enabling free space tree [ 264.560406][ T8349] mmap: syz.6.650 (8349) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 264.734080][ T5826] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 264.918776][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.928078][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.812941][ T8391] loop2: detected capacity change from 0 to 64 [ 267.854829][ T8403] loop1: detected capacity change from 0 to 4096 [ 267.947080][ T8411] loop0: detected capacity change from 0 to 256 [ 268.012670][ T8413] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.114873][ T8411] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 268.312529][ T8419] netlink: 16 bytes leftover after parsing attributes in process `syz.6.667'. [ 268.372511][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.667'. [ 268.577406][ T8416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.169305][ T8438] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 269.466364][ T8438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.123850][ T8441] bond1: (slave veth3): Enslaving as an active interface with a down link [ 270.281370][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 270.299401][ T8446] bond1: (slave dummy0): making interface the new active one [ 270.511767][ T8446] dummy0: entered promiscuous mode [ 270.551569][ T8446] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 270.827741][ T787] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 270.885062][ T8464] loop4: detected capacity change from 0 to 256 [ 270.902579][ T6323] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 270.984819][ T8464] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 271.022188][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 271.035704][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 271.077124][ T787] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 271.102911][ T6323] usb 7-1: Using ep0 maxpacket: 16 [ 271.112142][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.128126][ T6323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.162139][ T787] usb 2-1: Product: syz [ 271.168921][ T6323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.182400][ T787] usb 2-1: Manufacturer: syz [ 271.187038][ T787] usb 2-1: SerialNumber: syz [ 271.229800][ T6323] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.244259][ T787] usb 2-1: config 0 descriptor?? [ 271.286451][ T6323] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 271.322180][ T6323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.352593][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 271.364039][ T8470] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 271.393837][ T6323] usb 7-1: config 0 descriptor?? [ 271.576698][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 271.604641][ T9] usb 3-1: config 0 has no interface number 0 [ 271.641894][ T8470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.648841][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 271.682232][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 271.709578][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.723834][ T787] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 271.749751][ T9] usb 3-1: Product: syz [ 271.759905][ T9] usb 3-1: Manufacturer: syz [ 271.775510][ T9] usb 3-1: SerialNumber: syz [ 271.787462][ T8472] macvlan2: entered promiscuous mode [ 271.793570][ T9] usb 3-1: config 0 descriptor?? [ 271.817357][ T8472] macvlan2: entered allmulticast mode [ 271.830021][ T6323] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 271.857819][ T6323] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 271.884453][ T8472] bond1: entered promiscuous mode [ 271.886842][ T6323] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 271.926079][ T8472] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.931716][ T6323] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 271.981275][ T6323] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 272.001793][ T6323] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 272.022893][ T6323] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 272.030986][ T6323] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 272.047164][ T6323] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 272.081845][ T6323] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 272.123750][ T6323] hid-multitouch 0003:0457:07DA.0015: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 272.150874][ T8472] bond1: left promiscuous mode [ 272.200933][ T6323] usb 7-1: USB disconnect, device number 2 [ 272.449179][ T8490] fido_id[8490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 272.501663][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 272.506485][ T8475] bond1: (slave ip6gretap1): making interface the new active one [ 272.567728][ T8475] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 272.679365][ T8470] macvlan2: entered promiscuous mode [ 272.701062][ T8470] macvlan2: entered allmulticast mode [ 272.732773][ T8470] bond1: entered promiscuous mode [ 272.759340][ T8470] ip6gretap1: entered promiscuous mode [ 272.790571][ T8470] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.808063][ T8470] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 272.886707][ T8470] bond1: left promiscuous mode [ 272.901230][ T8470] ip6gretap1: left promiscuous mode [ 273.225636][ T787] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 273.345579][ T787] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 273.360142][ T787] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 273.605646][ T9] usb 2-1: USB disconnect, device number 10 [ 273.915411][ T8519] loop1: detected capacity change from 0 to 256 [ 273.923228][ T8514] loop0: detected capacity change from 0 to 2048 [ 273.965607][ T8514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.986959][ T8519] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 274.001161][ T8514] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 274.182183][ T5815] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 274.375257][ T5815] usb 5-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 274.416327][ T5815] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.489955][ T5815] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 274.532485][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.569103][ T5815] usb 5-1: config 0 descriptor?? [ 275.162208][ T5815] ath6kl: Failed to submit usb control message: -71 [ 275.202323][ T5815] ath6kl: unable to send the bmi data to the device: -71 [ 275.209394][ T5815] ath6kl: Unable to send get target info: -71 [ 275.217479][ T5815] ath6kl: Failed to init ath6kl core: -71 [ 275.227204][ T5815] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 275.239899][ T5815] usb 5-1: USB disconnect, device number 23 [ 275.495843][ T787] usb 3-1: USB disconnect, device number 11 [ 275.530917][ T8542] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 275.778130][ T8556] loop2: detected capacity change from 0 to 16 [ 275.822765][ T8556] erofs (device loop2): mounted with root inode @ nid 36. [ 275.961812][ T8542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.092376][ T8550] macvlan2: entered promiscuous mode [ 276.107173][ T8550] macvlan2: entered allmulticast mode [ 276.161775][ T8550] bond1: entered promiscuous mode [ 276.178870][ T8550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 276.181215][ T8568] loop6: detected capacity change from 0 to 256 [ 276.221939][ T8550] bond1: left promiscuous mode [ 276.227162][ T787] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 276.259475][ T8568] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 276.415169][ T787] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 276.440758][ T8557] bond1: (slave ip6gretap1): making interface the new active one [ 276.470655][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.484295][ T8557] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 276.505327][ T787] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 276.530350][ T787] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 276.561178][ T787] usb 5-1: Manufacturer: syz [ 276.576283][ T8564] macvlan2: entered promiscuous mode [ 276.589327][ T787] usb 5-1: config 0 descriptor?? [ 276.592909][ T8572] loop1: detected capacity change from 0 to 4096 [ 276.608545][ T8564] macvlan2: entered allmulticast mode [ 276.618523][ T8564] bond1: entered promiscuous mode [ 276.672684][ T8564] ip6gretap1: entered promiscuous mode [ 276.682636][ T8576] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.693224][ T8564] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 276.721081][ T8564] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 276.802466][ T8564] bond1: left promiscuous mode [ 276.812413][ T8564] ip6gretap1: left promiscuous mode [ 276.852151][ T787] rc_core: IR keymap rc-hauppauge not found [ 276.887891][ T787] Registered IR keymap rc-empty [ 276.924902][ T787] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 276.987448][ T787] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 277.190650][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 277.594287][ T787] usb 5-1: USB disconnect, device number 24 [ 277.650250][ T8583] loop1: detected capacity change from 0 to 65536 [ 277.669454][ T8583] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 277.743766][ T8583] XFS (loop1): Ending clean mount [ 277.757835][ T8583] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 277.769212][ T8583] XFS (loop1): Unmount and run xfs_repair [ 277.775034][ T8583] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 277.785422][ T8583] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 277.794908][ T8583] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 277.803869][ T8583] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 277.812796][ T8583] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 277.823983][ T8583] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 277.835129][ T8583] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 277.844461][ T8583] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 277.854390][ T8583] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 277.863339][ T8583] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 277.884345][ T8583] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8a0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 277.900114][ T8583] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 278.074547][ T5826] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 278.841661][ T8605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.995299][ T8612] loop1: detected capacity change from 0 to 16 [ 279.057210][ T8612] erofs (device loop1): mounted with root inode @ nid 36. [ 279.555426][ T8618] loop9: detected capacity change from 0 to 7 [ 279.606444][ T8618] Dev loop9: unable to read RDB block 7 [ 279.639393][ T8618] loop9: AHDI p3 p4 [ 279.652284][ T8618] loop9: partition table partially beyond EOD, truncated [ 279.691282][ T8618] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 279.926828][ T5981] udevd[5981]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 280.217020][ T8630] netlink: 'syz.2.733': attribute type 1 has an invalid length. [ 280.229726][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.735'. [ 280.291189][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 280.533280][ T8630] 8021q: adding VLAN 0 to HW filter on device bond2 [ 280.652250][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 280.692284][ T8635] macvlan2: entered promiscuous mode [ 280.712029][ T8635] macvlan2: entered allmulticast mode [ 280.804963][ T8635] bond2: entered promiscuous mode [ 280.834697][ T8635] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 280.847035][ T24] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 280.881016][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.963158][ T24] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 280.985694][ T24] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 281.022251][ T24] usb 7-1: Manufacturer: syz [ 281.059484][ T24] usb 7-1: config 0 descriptor?? [ 281.086334][ T8635] bond2: left promiscuous mode [ 281.149923][ T8650] loop0: detected capacity change from 0 to 64 [ 281.243490][ T8639] bond2: (slave ip6gretap1): making interface the new active one [ 281.342711][ T8639] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 281.465758][ T24] rc_core: IR keymap rc-hauppauge not found [ 281.477669][ T8644] macvlan2: entered promiscuous mode [ 281.483149][ T8644] macvlan2: entered allmulticast mode [ 281.496137][ T24] Registered IR keymap rc-empty [ 281.528205][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 281.529134][ T8644] bond2: entered promiscuous mode [ 281.599633][ T8644] ip6gretap1: entered promiscuous mode [ 281.613613][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 281.623489][ T8654] loop0: detected capacity change from 0 to 16 [ 281.636035][ T8654] erofs (device loop0): mounted with root inode @ nid 36. [ 281.656630][ T8644] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 281.713036][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 281.725520][ T8644] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 281.761542][ T24] usb 7-1: USB disconnect, device number 3 [ 281.764318][ T8644] bond2: left promiscuous mode [ 281.825037][ T8644] ip6gretap1: left promiscuous mode [ 282.615108][ T1160] dummy0: left promiscuous mode [ 282.712325][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 282.925523][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 282.944944][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 282.970939][ T24] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 283.022148][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.069064][ T24] usb 7-1: Product: syz [ 283.091871][ T24] usb 7-1: Manufacturer: syz [ 283.112136][ T24] usb 7-1: SerialNumber: syz [ 283.140562][ T24] usb 7-1: config 0 descriptor?? [ 283.639760][ T24] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 283.690147][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.753'. [ 283.742415][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 284.524953][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 284.712466][ T24] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 284.743358][ T24] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 284.754345][ T24] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 284.828079][ T24] usb 7-1: USB disconnect, device number 4 [ 284.876408][ T8689] bond1: Invalid ad_actor_system MAC address. [ 284.922383][ T8689] bond1: option ad_actor_system: invalid value (1) [ 285.022025][ T8689] bond1 (unregistering): Released all slaves [ 286.418096][ T8720] loop4: detected capacity change from 0 to 256 [ 286.564430][ T8720] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 286.651399][ T8724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 286.660868][ T8724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 286.898658][ T8723] loop6: detected capacity change from 0 to 32768 [ 286.926361][ T8723] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.765 (8723) [ 286.951025][ T8723] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.962233][ T8723] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 287.264017][ T8723] BTRFS info (device loop6): enabling ssd optimizations [ 287.271400][ T8723] BTRFS info (device loop6): turning on async discard [ 287.278380][ T8723] BTRFS info (device loop6): enabling free space tree [ 287.492742][ T7432] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 288.590006][ T8756] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 288.922169][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 289.102260][ T6323] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 289.112285][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 289.151236][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 289.175500][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 289.206188][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.238242][ T9] usb 2-1: Product: syz [ 289.263766][ T9] usb 2-1: Manufacturer: syz [ 289.281129][ T9] usb 2-1: SerialNumber: syz [ 289.295560][ T6323] usb 7-1: config 0 has no interfaces? [ 289.318318][ T6323] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.331312][ T9] usb 2-1: config 0 descriptor?? [ 289.393180][ T6323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.675027][ T6323] usb 7-1: config 0 descriptor?? [ 289.691484][ T8770] netlink: 200 bytes leftover after parsing attributes in process `syz.4.779'. [ 289.875860][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 289.886372][ T6098] usb 7-1: USB disconnect, device number 5 [ 290.206473][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.782'. [ 290.236885][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.782'. [ 290.439488][ T8773] loop3: detected capacity change from 0 to 32768 [ 290.455343][ T8773] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.780 (8773) [ 290.488295][ T8773] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 290.498731][ T8773] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 290.985638][ T8773] BTRFS info (device loop3): enabling ssd optimizations [ 290.994835][ T8773] BTRFS info (device loop3): turning on async discard [ 291.001763][ T8773] BTRFS info (device loop3): enabling free space tree [ 291.172317][ T9] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 291.202528][ T9] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 291.223302][ T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 291.301818][ T8803] kernel profiling enabled (shift: 63) [ 291.313122][ T8803] profiling shift: 63 too large [ 291.363628][ T6323] usb 2-1: USB disconnect, device number 11 [ 291.457804][ T5844] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 292.412853][ T8823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.325348][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 293.388145][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 294.302772][ T8853] loop0: detected capacity change from 0 to 32768 [ 294.331292][ T8853] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.798 (8853) [ 294.346916][ T8853] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.360087][ T8853] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 294.738371][ T8853] BTRFS info (device loop0): enabling ssd optimizations [ 294.745598][ T8853] BTRFS info (device loop0): turning on async discard [ 294.752821][ T8853] BTRFS info (device loop0): enabling free space tree [ 295.038615][ T8877] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 295.102171][ T5888] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 295.200461][ T5827] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.317180][ T5888] usb 7-1: Using ep0 maxpacket: 32 [ 295.351374][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 295.415821][ T5888] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 295.461223][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.532542][ T5888] usb 7-1: Product: syz [ 295.551947][ T5888] usb 7-1: Manufacturer: syz [ 295.611279][ T5888] usb 7-1: SerialNumber: syz [ 295.650457][ T5888] usb 7-1: config 0 descriptor?? [ 296.106666][ T5888] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 297.312574][ T5888] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 297.335685][ T5888] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 297.390733][ T5888] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 297.882458][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 297.922544][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 298.507548][ T8903] loop0: detected capacity change from 0 to 65536 [ 298.605021][ T5888] usb 7-1: USB disconnect, device number 6 [ 298.619755][ T8903] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 298.655453][ T8903] XFS (loop0): Ending clean mount [ 298.685114][ T8903] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 298.696485][ T8903] XFS (loop0): Unmount and run xfs_repair [ 298.702679][ T8903] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 298.711036][ T8903] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 298.721190][ T8903] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 298.730585][ T8903] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 298.741984][ T8903] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 298.751473][ T8903] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 298.760759][ T8903] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 298.771938][ T8903] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 298.781186][ T8903] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 298.790198][ T8903] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 298.918098][ T8903] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8a0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 298.933451][ T8903] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 298.993365][ T5827] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 299.582208][ T5888] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 299.802212][ T5888] usb 7-1: Using ep0 maxpacket: 32 [ 299.873322][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 299.949664][ T5888] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 300.155620][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.177234][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 300.241797][ T5888] usb 7-1: Product: syz [ 300.281158][ T5888] usb 7-1: Manufacturer: syz [ 300.311974][ T5888] usb 7-1: SerialNumber: syz [ 300.344907][ T5888] usb 7-1: config 0 descriptor?? [ 300.466914][ T8927] ip6gretap0: entered promiscuous mode [ 300.532763][ T8927] macsec1: entered allmulticast mode [ 300.561172][ T8927] ip6gretap0: entered allmulticast mode [ 300.768418][ T5888] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 300.811337][ T8939] netlink: 276 bytes leftover after parsing attributes in process `syz.0.823'. [ 300.935542][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.824'. [ 300.971797][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.824'. [ 301.681621][ T8944] loop1: detected capacity change from 0 to 65536 [ 301.771767][ T8944] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 301.865103][ T8944] XFS (loop1): Ending clean mount [ 301.893879][ T8944] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 301.905318][ T8944] XFS (loop1): Unmount and run xfs_repair [ 301.911118][ T8944] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 301.918628][ T8944] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 301.927815][ T8944] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 301.937039][ T8944] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 301.948135][ T8944] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 301.957251][ T8944] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 301.966526][ T8944] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 301.975559][ T8944] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 301.984569][ T8944] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 301.993539][ T8944] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 302.004878][ T5923] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 302.030149][ T8944] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8a0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 302.045218][ T8944] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 302.059337][ T5888] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 302.077035][ T5888] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 302.099698][ T5888] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 302.176755][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 302.212910][ T8959] netlink: 124 bytes leftover after parsing attributes in process `syz.0.827'. [ 302.215594][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0 [ 302.330769][ T5923] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 302.344084][ T6098] usb 7-1: USB disconnect, device number 7 [ 302.363406][ T5826] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 302.392515][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.448047][ T5923] usb 5-1: Product: syz [ 302.482228][ T5923] usb 5-1: Manufacturer: syz [ 302.512770][ T5923] usb 5-1: SerialNumber: syz [ 302.575421][ T5923] usb 5-1: config 0 descriptor?? [ 303.069116][ T5923] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 303.468475][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.836'. [ 303.661480][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.6.836'. [ 303.737499][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 304.281344][ T8978] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 304.295862][ T5923] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 304.346333][ T5923] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 304.406356][ T5923] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 304.485234][ T8982] ip6gretap0: entered promiscuous mode [ 304.548213][ T8982] macsec1: entered allmulticast mode [ 304.602628][ T8982] ip6gretap0: entered allmulticast mode [ 304.661862][ T8980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.723838][ T37] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 304.870250][ T37] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 304.932768][ T7392] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 304.964884][ T9] usb 5-1: USB disconnect, device number 25 [ 304.996471][ T7392] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 305.002345][ T8996] netlink: 'syz.0.842': attribute type 3 has an invalid length. [ 305.242323][ T9002] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 305.732522][ T9013] netdevsim netdevsim0: Direct firmware load for / [ 305.732522][ T9013] failed with error -2 [ 305.744195][ T9013] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 305.744195][ T9013] [ 306.300817][ T9022] netlink: 'syz.6.853': attribute type 1 has an invalid length. [ 306.579379][ T9022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.610907][ T8994] loop1: detected capacity change from 0 to 32768 [ 306.679479][ T8994] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.840 (8994) [ 306.685509][ T9024] macvlan2: entered promiscuous mode [ 306.803057][ T9024] macvlan2: entered allmulticast mode [ 306.917506][ T8994] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.932641][ T9024] bond2: entered promiscuous mode [ 306.959929][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 306.985228][ T9024] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 306.993497][ T8994] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 307.241785][ T9024] bond2: left promiscuous mode [ 307.396913][ T8994] BTRFS info (device loop1): enabling ssd optimizations [ 307.422388][ T8994] BTRFS info (device loop1): turning on async discard [ 307.463700][ T8994] BTRFS info (device loop1): enabling free space tree [ 307.597569][ T9022] bond2: (slave ip6gretap1): making interface the new active one [ 307.720665][ T9022] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 308.013534][ T9028] macvlan2: entered promiscuous mode [ 308.019058][ T9028] macvlan2: entered allmulticast mode [ 308.100958][ T9028] bond2: entered promiscuous mode [ 308.126875][ T9028] ip6gretap1: entered promiscuous mode [ 308.250387][ T9028] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.299444][ T5826] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 308.306545][ T9028] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 308.563063][ T9028] bond2: left promiscuous mode [ 308.568158][ T9028] ip6gretap1: left promiscuous mode [ 308.939515][ T9032] ip6gretap0: entered promiscuous mode [ 308.967924][ T9032] macsec1: entered allmulticast mode [ 308.977287][ T9032] ip6gretap0: entered allmulticast mode [ 308.985633][ T9035] syzkaller0: entered promiscuous mode [ 309.003399][ T9035] syzkaller0: entered allmulticast mode [ 309.248646][ T9075] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 309.262226][ T9075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.857'. [ 309.472391][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 309.642316][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 309.668957][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 309.698096][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 309.731203][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.772785][ T24] usb 2-1: Product: syz [ 309.790299][ T24] usb 2-1: Manufacturer: syz [ 309.808418][ T24] usb 2-1: SerialNumber: syz [ 309.849795][ T24] usb 2-1: config 0 descriptor?? [ 310.321979][ T24] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 310.422243][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 310.594055][ T9093] program syz.4.863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.665612][ T9] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 310.690237][ T9] usb 7-1: config 0 has no interface number 0 [ 310.707771][ T9] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.790421][ T9] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.019437][ T9] usb 7-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 311.051994][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.104137][ T9] usb 7-1: config 0 descriptor?? [ 311.555277][ T24] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 311.617067][ T24] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 311.688645][ T24] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 311.788350][ T24] usb 2-1: USB disconnect, device number 12 [ 311.847639][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.860406][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.918089][ T5888] hid_parser_main: 1 callbacks suppressed [ 311.918118][ T5888] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 312.012280][ T9] usbhid 7-1:0.2: can't add hid device: -71 [ 312.027300][ T5888] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.048029][ T9097] loop2: detected capacity change from 0 to 2048 [ 312.054650][ T9] usbhid 7-1:0.2: probe with driver usbhid failed with error -71 [ 312.126178][ T9] usb 7-1: USB disconnect, device number 8 [ 312.143090][ T9097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.225748][ T9097] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 312.744063][ T9108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.031524][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.870'. [ 313.105019][ T9111] ip6gretap0: entered promiscuous mode [ 313.140675][ T9111] macsec1: entered allmulticast mode [ 313.159379][ T9111] ip6gretap0: entered allmulticast mode [ 313.511287][ T9117] netlink: 'syz.6.874': attribute type 1 has an invalid length. [ 313.768322][ T9117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.899112][ T9122] macvlan2: entered promiscuous mode [ 313.948427][ T9122] macvlan2: entered allmulticast mode [ 313.994888][ T9122] bond3: entered promiscuous mode [ 314.084554][ T9122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 314.228047][ T9122] bond3: left promiscuous mode [ 314.373926][ T9104] loop3: detected capacity change from 0 to 32768 [ 314.424624][ T9104] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.868 (9104) [ 314.535280][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 314.774593][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.815345][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.865815][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.944230][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.006524][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.086046][ T9125] macvlan2: entered promiscuous mode [ 315.122394][ T9] usb 5-1: config 0 descriptor?? [ 315.138298][ T9125] macvlan2: entered allmulticast mode [ 315.182318][ T5815] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 315.224410][ T9125] bond3: entered promiscuous mode [ 315.281785][ T9125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 315.434779][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 315.449688][ T9125] bond3: left promiscuous mode [ 315.458300][ T5815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 315.487820][ T5815] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 315.516788][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.535314][ T9104] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 315.554547][ T5815] usb 2-1: Product: syz [ 315.566105][ T5815] usb 2-1: Manufacturer: syz [ 315.572776][ T9104] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 315.587696][ T5815] usb 2-1: SerialNumber: syz [ 315.601068][ T5815] usb 2-1: config 0 descriptor?? [ 315.621682][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 315.636066][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 315.734657][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 315.777592][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 315.813528][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 315.907892][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 316.068943][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 316.114352][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 316.134138][ T5815] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 316.151148][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 316.152571][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 316.243084][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 316.345383][ T9104] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 316.448687][ T9104] BTRFS error (device loop3): open_ctree failed: -12 [ 317.436988][ T5815] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 317.627491][ T5815] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 317.694956][ T5815] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 318.124951][ T9165] loop3: detected capacity change from 0 to 2048 [ 318.201181][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 318.209406][ T9165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.309829][ T9165] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 318.396173][ T24] usb 2-1: USB disconnect, device number 13 [ 319.425671][ T9174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.883'. [ 319.859256][ T9185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.047004][ T9190] program syz.3.887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.183890][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 320.222629][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 320.247395][ T9] usb 5-1: USB disconnect, device number 26 [ 321.495397][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.503407][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.557121][ T9211] loop2: detected capacity change from 0 to 2048 [ 321.691691][ T9211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.788344][ T9211] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 322.906563][ T9208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.974606][ T9208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.382348][ T7392] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.430592][ T7392] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.507918][ T7392] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.567909][ T7392] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.625710][ T7392] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.666268][ T7392] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.742217][ T7392] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.751136][ T7392] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.832918][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880543a6000: rx timeout, send abort [ 325.844985][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880543a6000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 325.919432][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 326.215468][ T9254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.369548][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.376105][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.757607][ T9266] loop3: detected capacity change from 0 to 2048 [ 326.861626][ T9266] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.154017][ T8053] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 327.184371][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.913'. [ 327.259641][ T9285] program syz.4.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.362429][ T8053] usb 1-1: Using ep0 maxpacket: 8 [ 327.388397][ T8053] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 327.458725][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.6.913'. [ 327.480598][ T8053] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 327.592237][ T8053] usb 1-1: config 0 has no interface number 0 [ 327.679246][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 327.717082][ T8053] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 327.779691][ T9292] openvswitch: netlink: Unknown nsh attribute 0 [ 327.786876][ T8053] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 327.816382][ T9290] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.837460][ T8053] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.872284][ T8053] usb 1-1: config 0 interface 52 has no altsetting 0 [ 327.884097][ T8053] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 327.922184][ T8053] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 327.961253][ T8053] usb 1-1: Product: syz [ 327.971462][ T8053] usb 1-1: SerialNumber: syz [ 327.999683][ T8053] usb 1-1: config 0 descriptor?? [ 328.146404][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 328.448397][ T8053] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input19 [ 328.811906][ T9224] usb 1-1: USB disconnect, device number 12 [ 328.811987][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 330.066884][ T9327] loop6: detected capacity change from 0 to 2048 [ 330.173157][ T9327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.262833][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 331.716338][ T31] audit: type=1326 audit(1766276273.857:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.3.929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb30f8f749 code=0x0 [ 331.745121][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 332.058876][ T9340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.566449][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 334.238494][ T9369] loop1: detected capacity change from 0 to 2048 [ 334.351382][ T9369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.825584][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.943'. [ 335.343457][ T9391] netdevsim netdevsim2: Direct firmware load for / [ 335.343457][ T9391] failed with error -2 [ 335.707207][ T9391] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 335.707207][ T9391] [ 336.262745][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 337.012251][ T5991] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 337.184692][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 337.246458][ T5991] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.265993][ T5991] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 337.306541][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.377376][ T5991] usb 5-1: Product: syz [ 337.391534][ T5991] usb 5-1: Manufacturer: syz [ 337.437879][ T5991] usb 5-1: SerialNumber: syz [ 337.521081][ T5991] usb 5-1: config 0 descriptor?? [ 337.548607][ T9416] ALSA: mixer_oss: invalid OSS volume '' [ 337.587117][ T9416] ALSA: mixer_oss: invalid OSS volume '1' [ 337.596799][ T9416] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 337.810587][ T6426] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 337.992123][ T6426] usb 4-1: Using ep0 maxpacket: 32 [ 338.062948][ T5991] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 338.081842][ T6426] usb 4-1: config 0 interface 0 has no altsetting 0 [ 338.130662][ T6426] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 338.165791][ T6426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.216819][ T6426] usb 4-1: Product: syz [ 338.221171][ T6426] usb 4-1: Manufacturer: syz [ 338.254807][ T6426] usb 4-1: SerialNumber: syz [ 338.313864][ T6426] usb 4-1: config 0 descriptor?? [ 338.465125][ T9424] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 338.580009][ T9424] netlink: 14 bytes leftover after parsing attributes in process `syz.2.960'. [ 338.697991][ T9428] delete_channel: no stack [ 338.756470][ T6426] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 339.074550][ T5991] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 339.114264][ T5991] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 339.158772][ T6426] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 339.207559][ T5991] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 339.222199][ T6426] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 339.253481][ T6426] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 339.271764][ T5991] usb 5-1: USB disconnect, device number 27 [ 339.367743][ T6426] usb 4-1: USB disconnect, device number 24 [ 339.581860][ T9424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.658681][ T9424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.702959][ T9424] bond0 (unregistering): Released all slaves [ 340.027804][ T9440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.967'. [ 340.220725][ T9444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.969'. [ 340.282229][ T9444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.969'. [ 340.717621][ T9455] ALSA: mixer_oss: invalid OSS volume '' [ 341.412168][ T905] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 341.684658][ T905] usb 2-1: Using ep0 maxpacket: 32 [ 341.697207][ T905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.847058][ T905] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 341.893588][ T8053] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 341.894510][ T905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.968497][ T905] usb 2-1: Product: syz [ 342.001547][ T905] usb 2-1: Manufacturer: syz [ 342.029195][ T905] usb 2-1: SerialNumber: syz [ 342.093495][ T8053] usb 7-1: Using ep0 maxpacket: 32 [ 342.102184][ T8053] usb 7-1: config 0 interface 0 has no altsetting 0 [ 342.104943][ T905] usb 2-1: config 0 descriptor?? [ 342.150706][ T8053] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 342.198555][ T8053] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.235957][ T8053] usb 7-1: Product: syz [ 342.272148][ T8053] usb 7-1: Manufacturer: syz [ 342.292255][ T8053] usb 7-1: SerialNumber: syz [ 342.325206][ T8053] usb 7-1: config 0 descriptor?? [ 342.362760][ T32] INFO: task syz.5.303:7228 blocked for more than 143 seconds. [ 342.370600][ T32] Not tainted syzkaller #0 [ 342.385823][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.432469][ T32] task:syz.5.303 state:D stack:24488 pid:7228 tgid:7191 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 342.496555][ T32] Call Trace: [ 342.519480][ T32] [ 342.549693][ T32] __schedule+0x14bc/0x5000 [ 342.591975][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 342.639194][ T32] ? __pfx___schedule+0x10/0x10 [ 342.656165][ T32] ? schedule+0x91/0x360 [ 342.679400][ T32] schedule+0x165/0x360 [ 342.690446][ T32] schedule_preempt_disabled+0x13/0x30 [ 342.710466][ T905] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 342.724452][ T32] rwsem_down_write_slowpath+0x872/0xfe0 [ 342.759646][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.760525][ T8053] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 342.796235][ T32] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 342.829904][ T32] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 342.859309][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.882881][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.914245][ T32] down_write+0x1ab/0x1f0 [ 342.936691][ T32] ? __pfx_down_write+0x10/0x10 [ 342.955509][ T32] ? __bfs+0x154/0x290 [ 342.962682][ T8053] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 342.998081][ T32] ? __pfx_hlock_conflict+0x10/0x10 [ 343.003939][ T8053] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 343.042003][ T32] f2fs_issue_checkpoint+0x38a/0x5b0 [ 343.063275][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.089747][ T32] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 343.129515][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.156131][ T32] ? f2fs_sync_fs+0x1f0/0x3b0 [ 343.188104][ T32] f2fs_do_sync_file+0x9b7/0x1810 [ 343.188693][ T8053] usb 7-1: USB disconnect, device number 9 [ 343.254512][ T32] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 343.288301][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.323951][ T32] ? f2fs_file_write_iter+0x4c6/0x24a0 [ 343.361172][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.391898][ T32] ? vfs_fsync_range+0x12c/0x1c0 [ 343.421399][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.455756][ T32] ? f2fs_sync_file+0xe9/0x160 [ 343.482485][ T32] f2fs_file_write_iter+0x76d/0x24a0 [ 343.511369][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.570189][ T32] ? __lock_acquire+0x6b6/0x2cf0 [ 343.595594][ T32] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 343.633407][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.653619][ T32] do_iter_readv_writev+0x623/0x8c0 [ 343.672891][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.695148][ T32] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 343.729961][ T32] ? rcu_read_lock_any_held+0xb3/0x120 [ 343.765851][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.791083][ T32] vfs_writev+0x31a/0x960 [ 343.812929][ T32] ? __pfx_vfs_writev+0x10/0x10 [ 343.836198][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.867461][ T32] ? __fget_files+0x2a/0x420 [ 343.887459][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.915825][ T32] ? __fget_files+0x3a0/0x420 [ 343.952521][ T905] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 343.962249][ T32] ? __fget_files+0x2a/0x420 [ 343.966913][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.990546][ T905] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 344.004733][ T32] __se_sys_pwritev2+0x179/0x290 [ 344.020171][ T32] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 344.040236][ T905] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 344.050121][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.069104][ T32] ? __x64_sys_pwritev2+0x20/0xc0 [ 344.091790][ T32] do_syscall_64+0xfa/0xf80 [ 344.110168][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.135759][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 344.159245][ T32] ? exc_page_fault+0xab/0x100 [ 344.172148][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.191405][ T32] RIP: 0033:0x7f7bfcf8f749 [ 344.205050][ T32] RSP: 002b:00007f7bfde22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 344.248808][ T32] RAX: ffffffffffffffda RBX: 00007f7bfd1e6090 RCX: 00007f7bfcf8f749 [ 344.281080][ T32] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005 [ 344.313171][ T32] RBP: 00007f7bfd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 344.343418][ T32] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 344.378084][ T32] R13: 00007f7bfd1e6128 R14: 00007f7bfd1e6090 R15: 00007ffd90e3d1a8 [ 344.395175][ T32] [ 344.411614][ T32] [ 344.411614][ T32] Showing all locks held in the system: [ 344.451308][ T32] 1 lock held by khungtaskd/32: [ 344.502221][ T32] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 344.547302][ T32] 4 locks held by kworker/u8:8/1110: [ 344.569546][ T32] #0: ffff888140ab0148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 344.619849][ T32] #1: ffffc90003f9fb80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 344.655267][ T32] #2: ffff888052c260e0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 344.691250][ T32] #3: ffff888028e29510 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_issue_checkpoint+0x38a/0x5b0 [ 344.733897][ T32] 1 lock held by klogd/5186: [ 344.748193][ T32] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 344.781395][ T32] 2 locks held by getty/5582: [ 344.797109][ T32] #0: ffff8880340f50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 344.857619][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 344.888159][ T32] 4 locks held by syz.5.303/7192: [ 344.918135][ T32] 2 locks held by syz.5.303/7228: [ 344.948270][ T32] #0: ffff888052c26420 (sb_writers#25){.+.+}-{0:0}, at: vfs_writev+0x288/0x960 [ 344.995286][ T32] #1: ffff888028e29510 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_issue_checkpoint+0x38a/0x5b0 [ 345.045765][ T32] 2 locks held by kworker/u8:25/8358: [ 345.052149][ T32] #0: ffff88801c721948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 345.083679][ T32] #1: ffffc9001ee0fb80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 345.115189][ T32] 2 locks held by syz.4.976/9468: [ 345.132219][ T32] [ 345.142458][ T32] ============================================= [ 345.142458][ T32] [ 345.164815][ T32] NMI backtrace for cpu 1 [ 345.164841][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 345.164874][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.164886][ T32] Call Trace: [ 345.164895][ T32] [ 345.164903][ T32] dump_stack_lvl+0x189/0x250 [ 345.164936][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.164959][ T32] ? __pfx__printk+0x10/0x10 [ 345.164996][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 345.165027][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 345.165055][ T32] ? __pfx__printk+0x10/0x10 [ 345.165081][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.165106][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 345.165139][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 345.165167][ T32] sys_info+0x135/0x170 [ 345.165188][ T32] watchdog+0xf95/0xfe0 [ 345.165220][ T32] ? watchdog+0x20a/0xfe0 [ 345.165251][ T32] kthread+0x711/0x8a0 [ 345.165279][ T32] ? __pfx_watchdog+0x10/0x10 [ 345.165303][ T32] ? __pfx_kthread+0x10/0x10 [ 345.165324][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.165355][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.165383][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.165402][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 345.165420][ T32] ? __pfx_kthread+0x10/0x10 [ 345.165444][ T32] ret_from_fork+0x599/0xb30 [ 345.165465][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 345.165491][ T32] ? __switch_to_asm+0x39/0x70 [ 345.165520][ T32] ? __switch_to_asm+0x33/0x70 [ 345.165542][ T32] ? __pfx_kthread+0x10/0x10 [ 345.165567][ T32] ret_from_fork_asm+0x1a/0x30 [ 345.165606][ T32] [ 345.165613][ T32] Sending NMI from CPU 1 to CPUs 0: [ 345.321637][ T8053] usb 2-1: USB disconnect, device number 14 [ 345.322798][ C0] NMI backtrace for cpu 0 [ 345.322816][ C0] CPU: 0 UID: 0 PID: 8053 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 345.322841][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.322856][ C0] Workqueue: usb_hub_wq hub_event [ 345.322894][ C0] RIP: 0010:_raw_spin_unlock_irq+0x35/0x50 [ 345.322933][ C0] Code: 18 48 8b 74 24 08 e8 fa 46 40 f6 48 89 df e8 32 be 40 f6 e8 7d 29 6b f6 fb bf 01 00 00 00 e8 b2 ad 32 f6 65 8b 05 4b 50 20 07 <85> c0 74 07 5b e9 1c e1 b1 f5 cc e8 db 17 d5 f5 5b e9 10 e1 b1 f5 [ 345.322951][ C0] RSP: 0018:ffffc90000007c90 EFLAGS: 00000213 [ 345.322970][ C0] RAX: 0000000000000101 RBX: ffff8880b86260c0 RCX: 0000000000000100 [ 345.322985][ C0] RDX: 0000000000000002 RSI: ffffffff8d79261c RDI: 00000000ffffffff [ 345.322999][ C0] RBP: ffffc90000007e10 R08: ffffffff8f822077 R09: 1ffffffff1f0440e [ 345.323016][ C0] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: ffff8880b86260c0 [ 345.323032][ C0] R13: 1ffff92000000fad R14: ffff888026ad8de8 R15: ffffc90000007d68 [ 345.323051][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 345.323069][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.323084][ C0] CR2: 00007f8bc2db7198 CR3: 0000000075f74000 CR4: 0000000000350ef0 [ 345.323106][ C0] Call Trace: [ 345.323115][ C0] [ 345.323123][ C0] ? __pfx_eql_timer+0x10/0x10 [ 345.323155][ C0] __run_timer_base+0x60a/0x860 [ 345.323190][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 345.323210][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 345.323250][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.323281][ C0] run_timer_softirq+0xb7/0x180 [ 345.323304][ C0] handle_softirqs+0x27d/0x850 [ 345.323332][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 345.323359][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 345.323409][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.323433][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 345.323467][ C0] __irq_exit_rcu+0xca/0x1f0 [ 345.323490][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 345.323517][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.323544][ C0] irq_exit_rcu+0x9/0x30 [ 345.323565][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 345.323588][ C0] [ 345.323600][ C0] [ 345.323609][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.323632][ C0] RIP: 0010:vprintk_emit+0x4d0/0x5f0 [ 345.323663][ C0] Code: 0f 84 34 ff ff ff e8 cf 62 20 00 fb eb 44 e8 c7 62 20 00 e8 82 72 ba 09 4d 85 f6 74 94 e8 b8 62 20 00 fb 48 c7 c7 e0 58 f3 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 28 26 [ 345.323680][ C0] RSP: 0018:ffffc9000b897280 EFLAGS: 00000287 [ 345.323698][ C0] RAX: ffffffff81a14f98 RBX: ffffffff81a14df1 RCX: 0000000000100000 [ 345.323714][ C0] RDX: ffffc9001baef000 RSI: 0000000000008835 RDI: ffffffff8df358e0 [ 345.323730][ C0] RBP: ffffc9000b897390 R08: ffffffff8f822077 R09: 1ffffffff1f0440e [ 345.323746][ C0] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: 0000000000000000 [ 345.323761][ C0] R13: 0000000000000029 R14: 0000000000000200 R15: 1ffff92001712e54 [ 345.323779][ C0] ? vprintk_emit+0x321/0x5f0 [ 345.323806][ C0] ? vprintk_emit+0x4c8/0x5f0 [ 345.323840][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 345.323870][ C0] ? __pfx_snprintf+0x10/0x10 [ 345.323897][ C0] ? do_raw_spin_lock+0x121/0x290 [ 345.323937][ C0] dev_vprintk_emit+0x337/0x3f0 [ 345.323968][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 345.324008][ C0] dev_printk_emit+0xe0/0x130 [ 345.324034][ C0] ? __queue_work+0x1a2/0xf90 [ 345.324060][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.324087][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 345.324116][ C0] ? __queue_work+0x1a2/0xf90 [ 345.324141][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.324165][ C0] ? __dev_printk+0x131/0x190 [ 345.324193][ C0] _dev_info+0x10a/0x160 [ 345.324223][ C0] ? __pfx__dev_info+0x10/0x10 [ 345.324250][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.324278][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 345.324319][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.324343][ C0] ? update_usb_device_state+0x354/0x540 [ 345.324367][ C0] usb_disconnect+0xdd/0x990 [ 345.324395][ C0] hub_event+0x1ca9/0x4ef0 [ 345.324442][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 345.324479][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.324507][ C0] ? __pfx_hub_event+0x10/0x10 [ 345.324533][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.324560][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.324587][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.324626][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 345.324647][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 345.324671][ C0] process_scheduled_works+0xad1/0x1770 [ 345.324712][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.324740][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.324770][ C0] worker_thread+0x8a0/0xda0 [ 345.324795][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 345.324836][ C0] ? __kthread_parkme+0x7b/0x200 [ 345.324866][ C0] kthread+0x711/0x8a0 [ 345.324896][ C0] ? __pfx_worker_thread+0x10/0x10 [ 345.324919][ C0] ? __pfx_kthread+0x10/0x10 [ 345.324945][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.324972][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.325005][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.325029][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 345.325050][ C0] ? __pfx_kthread+0x10/0x10 [ 345.325079][ C0] ret_from_fork+0x599/0xb30 [ 345.325102][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 345.325130][ C0] ? __switch_to_asm+0x39/0x70 [ 345.325159][ C0] ? __switch_to_asm+0x33/0x70 [ 345.325187][ C0] ? __pfx_kthread+0x10/0x10 [ 345.325215][ C0] ret_from_fork_asm+0x1a/0x30 [ 345.325257][ C0] [ 345.519716][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 345.519747][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 345.519775][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.519799][ T32] Call Trace: [ 345.519812][ T32] [ 345.519825][ T32] dump_stack_lvl+0x99/0x250 [ 345.519863][ T32] ? __asan_memcpy+0x40/0x70 [ 345.519890][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.519920][ T32] ? __pfx__printk+0x10/0x10 [ 345.519966][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.520000][ T32] vpanic+0x237/0x6d0 [ 345.520031][ T32] ? __pfx_vpanic+0x10/0x10 [ 345.520062][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.520096][ T32] ? preempt_schedule_common+0x83/0xd0 [ 345.520131][ T32] panic+0xb9/0xc0 [ 345.520161][ T32] ? __pfx_panic+0x10/0x10 [ 345.520192][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.520219][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 345.520249][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.520277][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 345.520318][ T32] watchdog+0xfdf/0xfe0 [ 345.520360][ T32] ? watchdog+0x20a/0xfe0 [ 345.520403][ T32] kthread+0x711/0x8a0 [ 345.520441][ T32] ? __pfx_watchdog+0x10/0x10 [ 345.520475][ T32] ? __pfx_kthread+0x10/0x10 [ 345.520505][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.520536][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 345.520574][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.520602][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 345.520627][ T32] ? __pfx_kthread+0x10/0x10 [ 345.520661][ T32] ret_from_fork+0x599/0xb30 [ 345.520689][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 345.520730][ T32] ? __switch_to_asm+0x39/0x70 [ 345.520761][ T32] ? __switch_to_asm+0x33/0x70 [ 345.520798][ T32] ? __pfx_kthread+0x10/0x10 [ 345.520832][ T32] ret_from_fork_asm+0x1a/0x30 [ 345.520884][ T32] [ 345.521349][ T32] Kernel Offset: disabled