last executing test programs: 25.808050096s ago: executing program 0 (id=306): mq_unlink(&(0x7f0000001140)='(:+%{-,/^{\'{.^\x00') r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001100)={[{@clear_cache}, {@compress}, {@ssd_spread}, {@rescan_uuid_tree}, {@skip_balance}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000100)={{r0}, "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"}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x440980, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x2, 0x1}, 0x10) chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x8400, 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) ioctl$FITRIM(r3, 0xc4009420, &(0x7f0000000180)={0x5, 0x204}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000002480)={{r2}, 0x0, 0x0, @inherit={0x68, 0x0}, @subvolid=0x3}) 23.800244638s ago: executing program 3 (id=318): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x2, 0x25dfdbfb, {0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x6004004) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2900004, 0x0, 0x0, 0x0, &(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)="84801dc070eb3d02050b03b7b765146d6bdd78cb2c2bb145f9cbdffe40737978", 0x20) 23.575891424s ago: executing program 3 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/intl_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000280)="0000000001000000", 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, 0xe) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 23.292036361s ago: executing program 3 (id=321): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x401, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ff, 0x8000, &(0x7f0000000080)) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000060, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000800)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x1, 0x1f5, &(0x7f0000000600)="$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") socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) chown(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 23.065883457s ago: executing program 3 (id=323): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@test_dummy_encryption}, {@noacl}, {@journal_dev={'journal_dev', 0x3d, 0x100}}, {@inlinecrypt}, {@usrquota}, {@bh}, {@orlov}]}, 0x1, 0xbdd, &(0x7f0000000bc0)="$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") sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, 0x0, 0x2) pipe2$9p(&(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000001880)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000018c0)={0x18}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000001900)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980), 0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000001a00)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000001a40)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x42, 0x5) 21.576211875s ago: executing program 3 (id=327): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000300)={{0x1, 0x3, 0x88a}, 0x5, 0x1000}) r2 = io_uring_setup(0xf71, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x7, 0xc2}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0x1adf, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_connect$midi(0x4, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0xc, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x7}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 20.562441071s ago: executing program 0 (id=328): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x7, 0x7, 0x0, 0x1, 0x0, '\x00', r0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x301a81, 0xa5) renameat(r2, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r2, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, 0x0) syz_mount_image$hfs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@part={'part', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x4}}, {@file_umask={'file_umask', 0x3d, 0xd}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}]}, 0xff, 0x359, &(0x7f00000005c0)="$eJzs3U1r1E4cB/DvJNlt9r+l/9hWCp6kWvBU2npQPGiR4sU34EGKtd1CaaygFbQgVi9eRLwJgkdvnkXfgl7EN6B4KCie7KV4MDKTSTZJM9k0bLdP3w+4m03m4TebTDJTaQdEdGRdnvn65uyG/CdqAGwAFwALgAs4AI5jxL23stqxIDveEghzim1p5ldaeVld6ByaJz856E/uo90RBEHwzXz4+0X19rt3AdGeEMkenGABfbBUT1TH3Z5HtjvWZbsOvcwNNHGGxRa2cB8DPQ+JiIj2Ff38t/RTol+P3y0LGNOPkQP6/I8jTo1vtvYklv0jfv5b4edAyO/nf3VIzveWVv3WQjiFk2ffimaJeWXlXhOBjbreVO8WYDcTQ65ELflULFZjcclvja+rAp7gkpZINqxeFxA1RCaFKVod0WjO3LRAUduLNVUbarINU4b4h4pqzJ0Af/iJl/nVzX4qEZP4KD6LWeHhFRbi8Z8TCPnlqO/Hy3SVMP4Jc4mqlV6YKtXKdvjHVCUnojPw/m27lQ3T9+rClrHkkaWI7Pjdi+J8UTfnwmBmVBy2btLcOpVrCHCEvriAmj40FSf6k5trOFtXY7Hmt8bnb/umi767cmd04rm4JkbxC+8wkxj/WzL1GMw9M9XLxRjwdFNfGYXtcVSZhvOYojrwrfI9s1Y65WF3JfdEZ/xIf3yGmziPgbsP1pbnfL91Z+83oq5SMfvJLscTXoj6cpR75HsiDVy5IS/CrlX6NwiC3EMOzLngJPbITlo5jLBDnXvdbvLa8pzQ97ztuSyUr0LeOTOHps2JAUwD0HuiO0KVdj2Kc/XpAr2S2Tfl2VZ78i/IKKoedJCoqtQhG32lekqjQqVXHy7P+ZXvRnSAtE86Rq7HA2SJPxo8IuS4S4Tzv8R8ZULddeSLVzD/CToVnihx0jADGlSv/8UzOKXDnKtpnsE1o40Oc65TZ4DT9XSNFqIaH2eL9XSc236ovh/s/L8yxAy+4AY7ORERERERERERERERERERERERERHRQbPT30ao8usE6Ro3jsIf3iAiIiIiIiIiIiIiIiIiIiIiIiIiIiIi6qr2+r/x+i71aP1f9Yeu9fq/RSs1KXa4QozbjfV/7RLr/0brUhBRZf8CAAD//zFOXcU=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'team0\x00', 0x400}) 20.23990989s ago: executing program 3 (id=331): syz_open_dev$usbfs(&(0x7f0000000040), 0x73, 0x3e0341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 20.147762702s ago: executing program 32 (id=331): syz_open_dev$usbfs(&(0x7f0000000040), 0x73, 0x3e0341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 20.044143975s ago: executing program 0 (id=334): syz_io_uring_setup(0xf08, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) preadv2(r1, &(0x7f0000003500)=[{&(0x7f00000002c0)=""/54, 0xfefc}], 0x1, 0x8, 0x80, 0x10) 18.636088601s ago: executing program 0 (id=338): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x4, 0x129f, &(0x7f00000007c0)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) add_key(0x0, 0x0, 0x0, 0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x200e}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001b00)='./proc\x00', &(0x7f0000001b40)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) read(r2, &(0x7f0000001bc0), 0x1000) 17.634501457s ago: executing program 0 (id=341): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000100)='./cgroup/../file0\x00', 0x2004401, &(0x7f0000000040), 0x2c, 0x561, &(0x7f0000000b40)="$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") r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) write(0xffffffffffffffff, &(0x7f0000000140)="a14f1742cfa8a23768d2b0d9c15dd00b697f0e8fc9651a98bc350189d0c24d3fd355d744d5f6ed4a71c0534e7d3690c9376d0ca0f6be7e6330f23bed4af852bae8dad84ce3e2598f6b6a4e", 0x4b) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=@v1={0x1000000, [{0x81, 0x13ea}]}, 0xc, 0x3) sendfile(0xffffffffffffffff, r0, 0x0, 0x100000000) 16.475937406s ago: executing program 0 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1\n', 0xa) write(0xffffffffffffffff, &(0x7f0000000240)='7777\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) 16.299873551s ago: executing program 33 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1\n', 0xa) write(0xffffffffffffffff, &(0x7f0000000240)='7777\n', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) 4.077807006s ago: executing program 2 (id=395): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffa1}, 0x0, 0x0, 0x0) tee(r1, r2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b1a, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0300"}) 3.664412276s ago: executing program 4 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1}) 2.492283196s ago: executing program 4 (id=403): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0xa8000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) poll(0x0, 0x0, 0xfffffffe) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xd, 0x8, 0x10000000400000, 0x7fffffff}, 0x0, 0x0) 2.170839964s ago: executing program 2 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, 0xffffffffffffffff, 0x4000000) dup(r3) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1.93837849s ago: executing program 2 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) getpid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x10044001) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000480)) 1.731421375s ago: executing program 5 (id=332): socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x6) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x102, 0x1a6) r1 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000040)={0x1000000}) fallocate(r4, 0x1, 0x0, 0x1000000) write(r0, &(0x7f00000000c0)='3', 0x1) 1.684182416s ago: executing program 1 (id=406): bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1.651560378s ago: executing program 4 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000008440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=[@ip_retopts={{0x10}}], 0x10}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x5, 0x2}]}]}}}], 0x18}}], 0x2, 0x0) 1.121690881s ago: executing program 1 (id=408): epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) inotify_init1(0x800) rmdir(0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x6, 0xfffffffffffffffc, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000, 0xffffffff, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 1.071861872s ago: executing program 1 (id=409): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x72242, 0x43) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 1.041560573s ago: executing program 2 (id=410): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0xe5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 998.173034ms ago: executing program 1 (id=411): listen(0xffffffffffffffff, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x4, 0x2, 0x1000, 0x7, 0xfffffff9}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xe0f05139a34aa64c}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 676.217023ms ago: executing program 4 (id=412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x14, r3, 0x1, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x48040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) r4 = socket$unix(0x1, 0x2, 0x0) unshare(0x8040480) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$unix(r4, &(0x7f00000003c0)=@abs={0x1}, 0x2) 611.994004ms ago: executing program 2 (id=413): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x10001, 0x1, 0x0, 0x0, 0xfffd, 0x69}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x220) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000340)=ANY=[@ANYBLOB]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xfffffff7}, 0x8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'multiq3\x00', [0x100, 0x5, 0x2, 0xc, 0x10, 0x5, 0x79, 0x0, 0xb, 0x4, 0x2, 0x1, 0x7, 0x8, 0x40, 0x400, 0xfffffffb, 0xdd, 0x4000003, 0x7fff, 0xffffffff, 0xca9f, 0x3, 0x5, 0xffdffffb, 0x4f, 0xffffffff, 0x8, 0x7, 0x0, 0xffffdff8]}) ioctl$COMEDI_SETRSUBD(r1, 0x6410) 577.810196ms ago: executing program 4 (id=414): socket$inet(0x2, 0x2, 0x0) socket(0x11, 0x3, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0, @ANYRES64=r1], 0x97) 420.222719ms ago: executing program 1 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffb}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200448a4}, 0x4890) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f00000007c0)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="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", 0xf9a}], 0x5}, 0x0) 306.742732ms ago: executing program 2 (id=416): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x19c, &(0x7f0000000000)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3a00006, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$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") rmdir(&(0x7f0000000000)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000300)="6f196ccb44d83c6e020bc3f5734df39af58897f2a51723f3680ec91d2b76446b69ccee4412e6d1835e6e6f36634536ebe57cfd7b78559b4adfbb37d76743ac069e06df3cd2d097799a4e1d1dd5a1786f57532c43d0552f450388a1f7c8a7926257a8d9ee1a5e942af18343cadd88f78957927952c878b3eca889c47c3938eae714a48a31338c821666ab6dd3996911922539cc8d04e53bf8f46ed7289b4eed146a0f70e6e6ebc39e089219c43a32dc54b81af07328a16ac5b461b8ff4978e697e0a88d38f85aa1342002576a8536676e0d5e7d25ba0430e7d830db70a43a12") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x4, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 236.189464ms ago: executing program 4 (id=417): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 0s ago: executing program 1 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1048576\n\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='1048576\n\x00', 0x8) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4001, @loopback}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4001, 0x0, @loopback}, 0x1c) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): 59.855621][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 59.910382][ T4261] usb 4-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 59.925223][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.946042][ T4261] usb 4-1: SerialNumber: syz [ 60.082845][ T4369] loop1: detected capacity change from 0 to 32768 [ 60.141362][ T4369] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.29 (4369) [ 60.186588][ T4369] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 60.197235][ T4369] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 60.208954][ T4371] loop2: detected capacity change from 0 to 32768 [ 60.214323][ T4369] BTRFS info (device loop1): use zstd compression, level 3 [ 60.223342][ T4369] BTRFS info (device loop1): using free space tree [ 60.244627][ T4261] usb 4-1: 0:2 : does not exist [ 60.252126][ T4369] BTRFS info (device loop1): has skinny extents [ 60.264333][ T4371] (syz.2.30,4371,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 60.286375][ T26] ums_eneub6250: probe of 1-1:1.0 failed with error 3 [ 60.314999][ T4261] usb 4-1: USB disconnect, device number 3 [ 60.356437][ T4371] (syz.2.30,4371,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 60.362182][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.403111][ T4371] JBD2: Ignoring recovery information on journal [ 60.427361][ T13] usb 1-1: USB disconnect, device number 3 [ 60.480392][ T4369] BTRFS info (device loop1): enabling ssd optimizations [ 60.504726][ T4371] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 60.595553][ T4371] (syz.2.30,4371,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 60.606187][ T25] audit: type=1800 audit(1791837475.874:2): pid=4369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.29" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 60.633623][ T4371] (syz.2.30,4371,0):update_backups:188 ERROR: status = -12 [ 60.661559][ T4371] ocfs2: Failed to update super blocks on 7,2 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 60.852658][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 60.868129][ T4399] loop3: detected capacity change from 0 to 4096 [ 61.128360][ T4399] ntfs3: loop3: Failed to load $Extend. [ 61.197078][ T4411] FAULT_INJECTION: forcing a failure. [ 61.197078][ T4411] name failslab, interval 1, probability 0, space 0, times 1 [ 61.240135][ T4411] CPU: 1 PID: 4411 Comm: syz.0.35 Not tainted syzkaller #0 [ 61.247382][ T4411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.257460][ T4411] Call Trace: [ 61.260751][ T4411] [ 61.263690][ T4411] dump_stack_lvl+0x188/0x250 [ 61.268393][ T4411] ? show_regs_print_info+0x20/0x20 [ 61.273602][ T4411] ? load_image+0x410/0x410 [ 61.278125][ T4411] ? __lock_acquire+0x7d40/0x7d40 [ 61.283171][ T4411] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 61.289161][ T4411] should_fail+0x383/0x4b0 [ 61.293575][ T4411] should_failslab+0x5/0x20 [ 61.298071][ T4411] slab_pre_alloc_hook+0x51/0xc0 [ 61.302995][ T4411] ? ip_setsockopt+0x607/0x31e0 [ 61.307834][ T4411] __kmalloc_track_caller+0x69/0x330 [ 61.313109][ T4411] ? ip_setsockopt+0x607/0x31e0 [ 61.317955][ T4411] ip_set_mcast_msfilter+0x99/0x3c0 [ 61.323140][ T4411] ? ip_setsockopt+0x5f4/0x31e0 [ 61.327985][ T4411] ip_setsockopt+0x607/0x31e0 [ 61.332664][ T4411] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 61.338036][ T4411] ? __might_sleep+0xf0/0xf0 [ 61.342617][ T4411] ? rcu_lock_release+0x9/0x20 [ 61.347387][ T4411] tcp_setsockopt+0x229/0x1e60 [ 61.352143][ T4411] ? aa_sk_perm+0x7dc/0x910 [ 61.356641][ T4411] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 61.362003][ T4411] ? aa_af_perm+0x340/0x340 [ 61.366492][ T4411] ? __fget_files+0x402/0x470 [ 61.371162][ T4411] ? aa_sock_opt_perm+0x74/0x100 [ 61.376086][ T4411] ? sock_common_setsockopt+0x32/0xb0 [ 61.381444][ T4411] ? sock_common_recvmsg+0x1c0/0x1c0 [ 61.386743][ T4411] __sys_setsockopt+0x2bf/0x3d0 [ 61.391586][ T4411] __x64_sys_setsockopt+0xb1/0xc0 [ 61.396598][ T4411] do_syscall_64+0x4c/0xa0 [ 61.401002][ T4411] ? clear_bhb_loop+0x30/0x80 [ 61.405668][ T4411] ? clear_bhb_loop+0x30/0x80 [ 61.410332][ T4411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.416228][ T4411] RIP: 0033:0x7fa8bbc4a1d9 [ 61.420638][ T4411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.440319][ T4411] RSP: 002b:00007fa8b9ea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 61.448723][ T4411] RAX: ffffffffffffffda RBX: 00007fa8bbed1fa0 RCX: 00007fa8bbc4a1d9 [ 61.456681][ T4411] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.464641][ T4411] RBP: 00007fa8bbce1888 R08: 0000000000000090 R09: 0000000000000000 [ 61.472598][ T4411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.480553][ T4411] R13: 00007fa8bbed2038 R14: 00007fa8bbed1fa0 R15: 00007ffdb4acd998 [ 61.488526][ T4411] [ 61.547280][ T4414] smpboot: CPU 1 is now offline [ 61.690072][ T4174] Bluetooth: hci5: command 0x1009 tx timeout [ 61.723831][ T4197] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 61.755448][ T4197] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 61.772212][ T25] audit: type=1800 audit(1791837477.044:3): pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.37" name="bmaControls" dev="configfs" ino=33299 res=0 errno=0 [ 63.921705][ T4438] loop3: detected capacity change from 0 to 32768 [ 63.967274][ T4438] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.42 (4438) [ 64.069505][ T4438] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 64.122858][ T4438] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 64.170870][ T4438] BTRFS info (device loop3): use zstd compression, level 3 [ 64.178088][ T4438] BTRFS info (device loop3): using free space tree [ 64.252691][ T4438] BTRFS info (device loop3): has skinny extents [ 64.355425][ T4442] loop0: detected capacity change from 0 to 32768 [ 64.374413][ T4438] BTRFS info (device loop3): enabling ssd optimizations [ 64.412994][ T4442] (syz.0.44,4442,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.467854][ T25] audit: type=1800 audit(1791837479.734:4): pid=4438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 64.513125][ T4442] (syz.0.44,4442,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.635603][ T4442] JBD2: Ignoring recovery information on journal [ 64.767307][ T4442] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 64.916772][ T4442] (syz.0.44,4442,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 64.949918][ T4442] (syz.0.44,4442,0):update_backups:188 ERROR: status = -12 [ 64.963632][ T4480] FAULT_INJECTION: forcing a failure. [ 64.963632][ T4480] name failslab, interval 1, probability 0, space 0, times 0 [ 65.004195][ T4442] ocfs2: Failed to update super blocks on 7,0 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 65.034090][ T4480] CPU: 0 PID: 4480 Comm: syz.1.47 Not tainted syzkaller #0 [ 65.041296][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 65.051330][ T4480] Call Trace: [ 65.054589][ T4480] [ 65.057501][ T4480] dump_stack_lvl+0x188/0x250 [ 65.062161][ T4480] ? show_regs_print_info+0x20/0x20 [ 65.067336][ T4480] ? load_image+0x410/0x410 [ 65.071816][ T4480] ? __lock_acquire+0x7d40/0x7d40 [ 65.076815][ T4480] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 65.082772][ T4480] should_fail+0x383/0x4b0 [ 65.087167][ T4480] should_failslab+0x5/0x20 [ 65.091644][ T4480] slab_pre_alloc_hook+0x51/0xc0 [ 65.096556][ T4480] ? ip_setsockopt+0x607/0x31e0 [ 65.101390][ T4480] __kmalloc_track_caller+0x69/0x330 [ 65.106650][ T4480] ? ip_setsockopt+0x607/0x31e0 [ 65.111485][ T4480] ip_set_mcast_msfilter+0x99/0x3c0 [ 65.116657][ T4480] ? ip_setsockopt+0x5f4/0x31e0 [ 65.121490][ T4480] ip_setsockopt+0x607/0x31e0 [ 65.126149][ T4480] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 65.131508][ T4480] ? __might_sleep+0xf0/0xf0 [ 65.136077][ T4480] ? rcu_lock_release+0x9/0x20 [ 65.140818][ T4480] tcp_setsockopt+0x229/0x1e60 [ 65.145560][ T4480] ? aa_sk_perm+0x7dc/0x910 [ 65.150043][ T4480] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 65.155391][ T4480] ? aa_af_perm+0x340/0x340 [ 65.159870][ T4480] ? __fget_files+0x402/0x470 [ 65.164525][ T4480] ? aa_sock_opt_perm+0x74/0x100 [ 65.169440][ T4480] ? sock_common_setsockopt+0x32/0xb0 [ 65.174791][ T4480] ? sock_common_recvmsg+0x1c0/0x1c0 [ 65.180052][ T4480] __sys_setsockopt+0x2bf/0x3d0 [ 65.184881][ T4480] __x64_sys_setsockopt+0xb1/0xc0 [ 65.189882][ T4480] do_syscall_64+0x4c/0xa0 [ 65.194276][ T4480] ? clear_bhb_loop+0x30/0x80 [ 65.198927][ T4480] ? clear_bhb_loop+0x30/0x80 [ 65.203581][ T4480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.209451][ T4480] RIP: 0033:0x7ff1252a51d9 [ 65.213846][ T4480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.233455][ T4480] RSP: 002b:00007ff1234fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.241846][ T4480] RAX: ffffffffffffffda RBX: 00007ff12552cfa0 RCX: 00007ff1252a51d9 [ 65.249799][ T4480] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 65.257759][ T4480] RBP: 00007ff12533c888 R08: 0000000000000090 R09: 0000000000000000 [ 65.265710][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.273663][ T4480] R13: 00007ff12552d038 R14: 00007ff12552cfa0 R15: 00007ffd241a77d8 [ 65.281622][ T4480] [ 65.359590][ T4442] syz.0.44 (4442) used greatest stack depth: 20416 bytes left [ 65.496452][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 65.634359][ T25] audit: type=1800 audit(1791837480.904:5): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.50" name="bmaControls" dev="configfs" ino=33545 res=0 errno=0 [ 65.778918][ T4493] loop0: detected capacity change from 0 to 4096 [ 65.859893][ T4493] ntfs3: loop0: Failed to load $Extend. [ 65.975491][ T4186] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 66.000043][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 66.160774][ T4499] input: syz0 as /devices/virtual/input/input6 [ 66.610888][ T4500] device syzkaller1 entered promiscuous mode [ 66.794307][ T4525] loop3: detected capacity change from 0 to 256 [ 66.847580][ T4525] ======================================================= [ 66.847580][ T4525] WARNING: The mand mount option has been deprecated and [ 66.847580][ T4525] and is ignored by this kernel. Remove the mand [ 66.847580][ T4525] option from the mount to silence this warning. [ 66.847580][ T4525] ======================================================= [ 66.983943][ T25] audit: type=1800 audit(1791837482.254:6): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.62" name="bmaControls" dev="configfs" ino=33769 res=0 errno=0 [ 67.117661][ T4525] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.234793][ T4538] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.325498][ T4538] kvm: pic: non byte read [ 67.719828][ T4528] loop1: detected capacity change from 0 to 32768 [ 67.813841][ T4528] (syz.1.61,4528,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 67.908103][ T4528] (syz.1.61,4528,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 68.011688][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.029216][ T4528] JBD2: Ignoring recovery information on journal [ 68.035682][ T4477] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 68.053116][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 68.085980][ T4534] loop4: detected capacity change from 0 to 40427 [ 68.127009][ T4534] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 68.137968][ T4528] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 68.159029][ T4534] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 68.202274][ T4534] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 68.221774][ T4534] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 68.234206][ T4528] (syz.1.61,4528,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 68.248964][ T4534] F2FS-fs (loop4): invalid crc value [ 68.255741][ T4528] (syz.1.61,4528,0):update_backups:188 ERROR: status = -12 [ 68.266695][ T4528] ocfs2: Failed to update super blocks on 7,1 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 68.285402][ T4534] F2FS-fs (loop4): Found nat_bits in checkpoint [ 68.336297][ T4534] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 68.372803][ T4534] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.392006][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 68.430577][ T4477] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.480699][ T4477] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 68.527785][ T4477] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 68.584633][ T4477] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 68.609661][ T4477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.619474][ T4566] FAULT_INJECTION: forcing a failure. [ 68.619474][ T4566] name failslab, interval 1, probability 0, space 0, times 0 [ 68.700864][ T4566] CPU: 0 PID: 4566 Comm: syz.2.73 Not tainted syzkaller #0 [ 68.708076][ T4566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.718113][ T4566] Call Trace: [ 68.721377][ T4566] [ 68.724293][ T4566] dump_stack_lvl+0x188/0x250 [ 68.728953][ T4566] ? show_regs_print_info+0x20/0x20 [ 68.734130][ T4566] ? load_image+0x410/0x410 [ 68.738608][ T4566] ? __inet_dev_addr_type+0x3c7/0x470 [ 68.743965][ T4566] should_fail+0x383/0x4b0 [ 68.748363][ T4566] should_failslab+0x5/0x20 [ 68.752842][ T4566] slab_pre_alloc_hook+0x51/0xc0 [ 68.757756][ T4566] ? rds_tcp_conn_alloc+0x4c/0xb40 [ 68.762845][ T4566] kmem_cache_alloc+0x3d/0x280 [ 68.767588][ T4566] rds_tcp_conn_alloc+0x4c/0xb40 [ 68.772505][ T4566] __rds_conn_create+0x1560/0x1ea0 [ 68.777600][ T4566] ? rds_conn_create+0x50/0x50 [ 68.782347][ T4566] rds_conn_create_outgoing+0x3f/0x50 [ 68.787694][ T4566] rds_sendmsg+0xf56/0x1d70 [ 68.792197][ T4566] ? aa_sk_perm+0x7dc/0x910 [ 68.796680][ T4566] ? rds_send_sndbuf_remove+0x230/0x230 [ 68.802204][ T4566] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 68.808594][ T4566] ? aa_sock_msg_perm+0x94/0x150 [ 68.813509][ T4566] ? apparmor_socket_sendmsg+0x88/0x230 [ 68.819033][ T4566] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 68.824291][ T4566] ? security_socket_sendmsg+0x7c/0xa0 [ 68.829726][ T4566] ? rds_send_sndbuf_remove+0x230/0x230 [ 68.835254][ T4566] ____sys_sendmsg+0x5be/0x8f0 [ 68.840000][ T4566] ? __sys_sendmsg_sock+0x30/0x30 [ 68.845006][ T4566] ? import_iovec+0x6f/0xa0 [ 68.849490][ T4566] ___sys_sendmsg+0x236/0x2e0 [ 68.854165][ T4566] ? __sys_sendmsg+0x290/0x290 [ 68.858910][ T4566] ? rds_bind+0x38d/0x870 [ 68.863240][ T4566] __se_sys_sendmsg+0x1b7/0x2a0 [ 68.868087][ T4566] ? __x64_sys_sendmsg+0x80/0x80 [ 68.873022][ T4566] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 68.879004][ T4566] ? lockdep_hardirqs_on+0x94/0x140 [ 68.884194][ T4566] do_syscall_64+0x4c/0xa0 [ 68.888601][ T4566] ? clear_bhb_loop+0x30/0x80 [ 68.893267][ T4566] ? clear_bhb_loop+0x30/0x80 [ 68.897923][ T4566] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.903794][ T4566] RIP: 0033:0x7fb2cdc1c1d9 [ 68.908194][ T4566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.927778][ T4566] RSP: 002b:00007fb2cbe74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.936172][ T4566] RAX: ffffffffffffffda RBX: 00007fb2cdea3fa0 RCX: 00007fb2cdc1c1d9 [ 68.944127][ T4566] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 68.952076][ T4566] RBP: 00007fb2cdcb3888 R08: 0000000000000000 R09: 0000000000000000 [ 68.960030][ T4566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.967978][ T4566] R13: 00007fb2cdea4038 R14: 00007fb2cdea3fa0 R15: 00007ffd7e9275e8 [ 68.975935][ T4566] [ 68.978986][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.988604][ T4569] Disabled LAPIC found during irq injection [ 69.375887][ T4575] loop2: detected capacity change from 0 to 512 [ 69.477025][ T4575] EXT4-fs (loop2): Ignoring removed nobh option [ 69.540709][ T4477] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 69.565417][ T4477] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 69.574796][ T4575] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.607072][ T4581] Zero length message leads to an empty skb [ 69.640333][ T4477] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 69.653912][ T4477] ATM dev 0: poll status: error -71 [ 69.695316][ T4477] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 69.735762][ T4477] ATM dev 0: usbatm_submit_urb: urb 0xffff88802485f400 submission failed (-8)! [ 69.766835][ T4477] ATM dev 0: usbatm_submit_urb: urb 0xffff88802485fe00 submission failed (-8)! [ 69.784130][ T4575] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #3: comm syz.2.76: corrupted inode contents [ 69.809884][ T4477] ATM dev 0: usbatm_submit_urb: urb 0xffff888140791f00 submission failed (-8)! [ 69.830658][ T4477] ATM dev 0: usbatm_submit_urb: urb 0xffff88801c7cf900 submission failed (-8)! [ 69.871637][ T4477] usb 4-1: USB disconnect, device number 4 [ 69.893711][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 69.991389][ T4575] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #3: comm syz.2.76: mark_inode_dirty error [ 70.090117][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 70.106372][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 70.170050][ C0] net_ratelimit: 57 callbacks suppressed [ 70.195795][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 70.309074][ T4575] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #3: comm syz.2.76: corrupted inode contents [ 70.446625][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 70.506582][ T4575] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.76: mark_inode_dirty error [ 70.603698][ T4620] device syzkaller0 entered promiscuous mode [ 70.627661][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 70.664421][ T4601] loop1: detected capacity change from 0 to 32768 [ 70.739779][ T4575] Quota error (device loop2): write_blk: dquota write failed [ 70.759577][ T4601] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 70.843995][ T4575] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 70.955466][ T25] audit: type=1800 audit(1791837486.224:7): pid=4601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.80" name="file1" dev="loop1" ino=17060 res=0 errno=0 [ 71.027837][ T4575] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.76: Failed to acquire dquot type 0 [ 71.073658][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 71.133214][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.139673][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.192510][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 71.306385][ T4575] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.76: corrupted inode contents [ 71.374096][ T4637] EXT4-fs warning (device sda1): ext4_group_extend:1831: need to use ext2online to resize further [ 72.025332][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 72.072247][ T4575] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #16: comm syz.2.76: mark_inode_dirty error [ 72.145849][ T4628] loop3: detected capacity change from 0 to 40427 [ 72.170558][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 72.193960][ T4628] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 72.204278][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 72.215079][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 72.237052][ T4628] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.274470][ T4575] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.76: corrupted inode contents [ 72.289630][ T4628] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1ffff [ 72.315486][ T4628] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 72.343984][ T4628] F2FS-fs (loop3): invalid crc value [ 72.358022][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 72.372164][ T4628] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.397921][ T4575] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.76: mark_inode_dirty error [ 72.445286][ T4628] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.460696][ T4628] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.476288][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 72.516759][ T4575] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.76: corrupted inode contents [ 72.623764][ T4651] loop4: detected capacity change from 0 to 8192 [ 72.674312][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 72.754349][ T4575] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 72.798509][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 72.821801][ T4575] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #16: comm syz.2.76: corrupted inode contents [ 72.925495][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 73.002450][ T4575] EXT4-fs error (device loop2): ext4_truncate:4286: inode #16: comm syz.2.76: mark_inode_dirty error [ 73.127714][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 73.196044][ T4575] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 73.227708][ T4671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.286977][ T4575] EXT4-fs (loop2): Remounting filesystem read-only [ 73.325850][ T4575] EXT4-fs (loop2): 1 truncate cleaned up [ 73.392578][ T4575] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 73.552587][ T4575] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.838214][ T4695] FAULT_INJECTION: forcing a failure. [ 73.838214][ T4695] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.938904][ T4695] CPU: 0 PID: 4695 Comm: syz.3.99 Not tainted syzkaller #0 [ 73.946111][ T4695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.956147][ T4695] Call Trace: [ 73.959410][ T4695] [ 73.962319][ T4695] dump_stack_lvl+0x188/0x250 [ 73.966977][ T4695] ? show_regs_print_info+0x20/0x20 [ 73.972163][ T4695] ? load_image+0x410/0x410 [ 73.976645][ T4695] ? __lock_acquire+0x7d40/0x7d40 [ 73.981649][ T4695] should_fail+0x383/0x4b0 [ 73.986047][ T4695] _copy_to_user+0x2e/0x130 [ 73.990527][ T4695] tomoyo_flush+0x154/0x4a0 [ 73.995010][ T4695] tomoyo_read_domain+0x6b1/0xd70 [ 74.000014][ T4695] tomoyo_read_control+0x28f/0x480 [ 74.005103][ T4695] ? tomoyo_realpath_nofollow+0x110/0x110 [ 74.010799][ T4695] vfs_read+0x2ff/0xd50 [ 74.014936][ T4695] ? __lock_acquire+0x7d40/0x7d40 [ 74.019952][ T4695] ? kernel_read+0x1e0/0x1e0 [ 74.024527][ T4695] ? mutex_lock_nested+0x17/0x20 [ 74.029439][ T4695] ? __fdget_pos+0x2bf/0x370 [ 74.034005][ T4695] ? ksys_read+0x70/0x260 [ 74.038315][ T4695] ksys_read+0x153/0x260 [ 74.042535][ T4695] ? vfs_write+0xd70/0xd70 [ 74.046928][ T4695] ? lockdep_hardirqs_on+0x94/0x140 [ 74.052106][ T4695] do_syscall_64+0x4c/0xa0 [ 74.056498][ T4695] ? clear_bhb_loop+0x30/0x80 [ 74.061151][ T4695] ? clear_bhb_loop+0x30/0x80 [ 74.065803][ T4695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.071687][ T4695] RIP: 0033:0x7f0fa60d11d9 [ 74.076082][ T4695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.095676][ T4695] RSP: 002b:00007f0fa4329028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.104070][ T4695] RAX: ffffffffffffffda RBX: 00007f0fa6358fa0 RCX: 00007f0fa60d11d9 [ 74.112018][ T4695] RDX: 0000000000002020 RSI: 0000200000001300 RDI: 0000000000000003 [ 74.119980][ T4695] RBP: 00007f0fa6168888 R08: 0000000000000000 R09: 0000000000000000 [ 74.127925][ T4695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.135879][ T4695] R13: 00007f0fa6359038 R14: 00007f0fa6358fa0 R15: 00007ffed06f2bf8 [ 74.143842][ T4695] [ 74.250132][ T4477] Bluetooth: hci5: command 0x1009 tx timeout [ 74.308211][ T4708] FAULT_INJECTION: forcing a failure. [ 74.308211][ T4708] name failslab, interval 1, probability 0, space 0, times 0 [ 74.434766][ T4708] CPU: 0 PID: 4708 Comm: syz.2.101 Not tainted syzkaller #0 [ 74.442100][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.452141][ T4708] Call Trace: [ 74.455402][ T4708] [ 74.458323][ T4708] dump_stack_lvl+0x188/0x250 [ 74.462986][ T4708] ? show_regs_print_info+0x20/0x20 [ 74.468162][ T4708] ? load_image+0x410/0x410 [ 74.472639][ T4708] ? __lock_acquire+0x7d40/0x7d40 [ 74.477647][ T4708] should_fail+0x383/0x4b0 [ 74.482047][ T4708] should_failslab+0x5/0x20 [ 74.486541][ T4708] slab_pre_alloc_hook+0x51/0xc0 [ 74.491453][ T4708] ? security_inode_alloc+0x30/0x110 [ 74.496712][ T4708] kmem_cache_alloc+0x3d/0x280 [ 74.501457][ T4708] security_inode_alloc+0x30/0x110 [ 74.506565][ T4708] inode_init_always+0x8e5/0xc90 [ 74.511488][ T4708] iget_locked+0x20a/0x820 [ 74.515897][ T4708] kernfs_get_inode+0x4a/0x680 [ 74.520642][ T4708] kernfs_iop_lookup+0x1e5/0x310 [ 74.525556][ T4708] __lookup_slow+0x29d/0x410 [ 74.530138][ T4708] ? lookup_one_len+0x2d0/0x2d0 [ 74.534968][ T4708] ? up_read+0x20/0x20 [ 74.539011][ T4708] ? step_into+0x363/0xcd0 [ 74.543406][ T4708] ? down_read+0x1aa/0x2e0 [ 74.547805][ T4708] lookup_slow+0x53/0x70 [ 74.552025][ T4708] walk_component+0x314/0x460 [ 74.556680][ T4708] link_path_walk+0x688/0xde0 [ 74.561337][ T4708] ? handle_lookup_down+0x130/0x130 [ 74.566516][ T4708] path_openat+0x28e/0x2fb0 [ 74.571004][ T4708] ? __kasan_slab_alloc+0xa9/0xc0 [ 74.576017][ T4708] ? do_filp_open+0x400/0x400 [ 74.580677][ T4708] do_filp_open+0x1df/0x400 [ 74.585160][ T4708] ? vfs_tmpfile+0x300/0x300 [ 74.589734][ T4708] ? _raw_spin_unlock+0x24/0x40 [ 74.594557][ T4708] ? alloc_fd+0x59e/0x650 [ 74.598867][ T4708] do_sys_openat2+0x14b/0x500 [ 74.603517][ T4708] ? __lock_acquire+0x7d40/0x7d40 [ 74.608518][ T4708] ? do_sys_open+0xe0/0xe0 [ 74.612910][ T4708] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 74.618865][ T4708] ? lock_chain_count+0x20/0x20 [ 74.623691][ T4708] __x64_sys_openat+0x135/0x160 [ 74.628520][ T4708] do_syscall_64+0x4c/0xa0 [ 74.632913][ T4708] ? clear_bhb_loop+0x30/0x80 [ 74.637567][ T4708] ? clear_bhb_loop+0x30/0x80 [ 74.642218][ T4708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.648087][ T4708] RIP: 0033:0x7fb2cdc1c1d9 [ 74.652482][ T4708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.672065][ T4708] RSP: 002b:00007fb2cbe74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.680452][ T4708] RAX: ffffffffffffffda RBX: 00007fb2cdea3fa0 RCX: 00007fb2cdc1c1d9 [ 74.688396][ T4708] RDX: 0000000000000001 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 74.696345][ T4708] RBP: 00007fb2cdcb3888 R08: 0000000000000000 R09: 0000000000000000 [ 74.704291][ T4708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.712238][ T4708] R13: 00007fb2cdea4038 R14: 00007fb2cdea3fa0 R15: 00007ffd7e9275e8 [ 74.720215][ T4708] [ 75.210081][ C0] net_ratelimit: 57 callbacks suppressed [ 76.346906][ T4720] loop4: detected capacity change from 0 to 512 [ 76.372130][ T1324] cfg80211: failed to load regulatory.db [ 76.506899][ T4720] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 76.550773][ T4720] FAULT_INJECTION: forcing a failure. [ 76.550773][ T4720] name failslab, interval 1, probability 0, space 0, times 0 [ 76.617001][ T4720] CPU: 0 PID: 4720 Comm: syz.4.105 Not tainted syzkaller #0 [ 76.624291][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.634343][ T4720] Call Trace: [ 76.637601][ T4720] [ 76.640514][ T4720] dump_stack_lvl+0x188/0x250 [ 76.645171][ T4720] ? show_regs_print_info+0x20/0x20 [ 76.650348][ T4720] ? load_image+0x410/0x410 [ 76.654833][ T4720] ? __might_sleep+0xf0/0xf0 [ 76.659418][ T4720] ? __lock_acquire+0x7d40/0x7d40 [ 76.664421][ T4720] should_fail+0x383/0x4b0 [ 76.668832][ T4720] should_failslab+0x5/0x20 [ 76.673311][ T4720] slab_pre_alloc_hook+0x51/0xc0 [ 76.678224][ T4720] __kmalloc_node+0x6d/0x3a0 [ 76.682803][ T4720] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 76.688761][ T4720] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 76.694543][ T4720] slab_post_alloc_hook+0xba/0x380 [ 76.699632][ T4720] ? alloc_buffer_head+0x21/0x100 [ 76.704632][ T4720] kmem_cache_alloc+0x15d/0x280 [ 76.709461][ T4720] alloc_buffer_head+0x21/0x100 [ 76.714289][ T4720] alloc_page_buffers+0x341/0x600 [ 76.719291][ T4720] create_empty_buffers+0x3a/0x6d0 [ 76.724381][ T4720] create_page_buffers+0x1c4/0x320 [ 76.729467][ T4720] __block_write_begin_int+0x25f/0x15d0 [ 76.735000][ T4720] ? page_cache_prev_miss+0x380/0x380 [ 76.740350][ T4720] ? fat_block_truncate_page+0x50/0x50 [ 76.745791][ T4720] ? page_zero_new_buffers+0x490/0x490 [ 76.751230][ T4720] ? rcu_lock_acquire+0x30/0x30 [ 76.756060][ T4720] ? wait_for_stable_page+0xd9/0x110 [ 76.761327][ T4720] cont_write_begin+0x598/0x7b0 [ 76.766174][ T4720] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 76.772044][ T4720] ? __mark_inode_dirty+0x3a4/0xc90 [ 76.777216][ T4720] ? unlock_page+0x17c/0x1f0 [ 76.781792][ T4720] fat_write_begin+0xa2/0x170 [ 76.786457][ T4720] ? fat_block_truncate_page+0x50/0x50 [ 76.791893][ T4720] cont_write_begin+0x263/0x7b0 [ 76.796730][ T4720] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 76.802598][ T4720] ? __mark_inode_dirty+0x757/0xc90 [ 76.807770][ T4720] ? __lock_acquire+0x7d40/0x7d40 [ 76.812770][ T4720] ? do_raw_spin_lock+0x128/0x2f0 [ 76.817769][ T4720] fat_write_begin+0xa2/0x170 [ 76.822421][ T4720] ? fat_block_truncate_page+0x50/0x50 [ 76.827867][ T4720] generic_perform_write+0x2b6/0x550 [ 76.833139][ T4720] ? grab_cache_page_write_begin+0xa0/0xa0 [ 76.838919][ T4720] ? file_remove_privs+0x5d0/0x5d0 [ 76.844008][ T4720] ? rwsem_write_trylock+0x135/0x1c0 [ 76.849267][ T4720] ? clear_nonspinnable+0x60/0x60 [ 76.854270][ T4720] __generic_file_write_iter+0x261/0x4e0 [ 76.859876][ T4720] ? generic_write_checks+0x3be/0x460 [ 76.865231][ T4720] generic_file_write_iter+0xa6/0x1b0 [ 76.870580][ T4720] do_iter_readv_writev+0x47d/0x5f0 [ 76.875772][ T4720] ? aa_path_link+0x8a0/0x8a0 [ 76.880431][ T4720] ? generic_file_rw_checks+0x280/0x280 [ 76.885956][ T4720] ? common_file_perm+0x171/0x1c0 [ 76.890958][ T4720] ? fsnotify_perm+0x5d/0x560 [ 76.895608][ T4720] ? security_file_permission+0x75/0xa0 [ 76.901130][ T4720] do_iter_write+0x1f8/0x7a0 [ 76.905707][ T4720] do_pwritev+0x241/0x3a0 [ 76.910015][ T4720] ? do_preadv+0x390/0x390 [ 76.914414][ T4720] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 76.920371][ T4720] ? lock_chain_count+0x20/0x20 [ 76.925200][ T4720] ? lockdep_hardirqs_on+0x94/0x140 [ 76.930387][ T4720] ? __x64_sys_pwritev2+0xba/0x100 [ 76.935474][ T4720] do_syscall_64+0x4c/0xa0 [ 76.939869][ T4720] ? clear_bhb_loop+0x30/0x80 [ 76.944523][ T4720] ? clear_bhb_loop+0x30/0x80 [ 76.949173][ T4720] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.955042][ T4720] RIP: 0033:0x7f2b3bc631d9 [ 76.959435][ T4720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.979016][ T4720] RSP: 002b:00007f2b39ebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 76.987404][ T4720] RAX: ffffffffffffffda RBX: 00007f2b3beeafa0 RCX: 00007f2b3bc631d9 [ 76.995350][ T4720] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 77.003297][ T4720] RBP: 00007f2b3bcfa888 R08: 0000000000000000 R09: 0000000000000000 [ 77.011256][ T4720] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000000 [ 77.019204][ T4720] R13: 00007f2b3beeb038 R14: 00007f2b3beeafa0 R15: 00007ffd1eadc7c8 [ 77.027160][ T4720] [ 77.733203][ T4740] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 77.861517][ T4744] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 77.952832][ T4746] loop3: detected capacity change from 0 to 256 [ 77.984449][ T4746] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 78.036658][ T25] audit: type=1326 audit(1791837493.304:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4747 comm="syz.2.112" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2cdc1c1d9 code=0x0 [ 78.661310][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.814263][ T4773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.881721][ T4776] device bond_slave_0 entered promiscuous mode [ 78.888187][ T4776] device bond_slave_1 entered promiscuous mode [ 78.959468][ T4776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.029766][ T4776] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 79.051326][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 79.091163][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.111702][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 79.162584][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.206113][ T4783] binder: BINDER_SET_CONTEXT_MGR already set [ 79.225851][ T7] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 79.266766][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.289321][ T4783] binder: 4781:4783 ioctl 4018620d 200000000240 returned -16 [ 79.330338][ T4757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.580048][ T4477] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 79.800386][ T7] usb 1-1: USB disconnect, device number 4 [ 79.852676][ T4477] usb 4-1: Using ep0 maxpacket: 8 [ 79.980658][ T4477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.004812][ T4477] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.034438][ T4477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.068246][ T4477] usb 4-1: config 0 descriptor?? [ 80.187294][ T4760] syz.4.116 (4760): drop_caches: 1 [ 80.206841][ T4766] syz.4.116 (4766): drop_caches: 1 [ 80.233451][ T1324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.266537][ T4801] binder_alloc: 4800: binder_alloc_buf, no vma [ 80.410036][ C0] net_ratelimit: 74 callbacks suppressed [ 81.371734][ T4202] Bluetooth: hci5: Reading Intel version command failed (-110) [ 81.469138][ T4477] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 81.560201][ T1324] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.600360][ T1324] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.647983][ T4261] usb 4-1: USB disconnect, device number 5 [ 81.708845][ T4807] tipc: Started in network mode [ 81.724427][ T4807] tipc: Node identity 66fc0f13f1f4, cluster identity 4711 [ 81.746547][ T4807] tipc: Enabled bearer , priority 0 [ 81.755752][ T1324] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 81.784113][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 81.817209][ T1324] usb 3-1: Product: syz [ 81.831741][ T1324] usb 3-1: Manufacturer: syz [ 81.872215][ T4806] tipc: Resetting bearer [ 81.881133][ T1324] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 81.922987][ T4806] tipc: Disabling bearer [ 82.298062][ T4825] loop3: detected capacity change from 0 to 4096 [ 82.389092][ T4825] ntfs3: loop3: Failed to load $Extend. [ 82.754407][ T4826] loop0: detected capacity change from 0 to 32768 [ 82.824365][ T4826] loop0: p1 p3 < > [ 83.029287][ T4837] ubi0: attaching mtd0 [ 83.107351][ T4837] ubi0: scanning is finished [ 83.139857][ T4837] ubi0: empty MTD device detected [ 83.325900][ T4837] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 83.358464][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 83.383923][ T4837] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 83.394220][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 83.436884][ T4837] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 83.459860][ T4197] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 83.488515][ T4837] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 83.500864][ T4197] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 83.536347][ T4837] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 83.561127][ T4837] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 83.609601][ T4837] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2491162307 [ 83.661951][ T4837] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 83.695784][ T4841] ubi0: background thread "ubi_bgt0d" started, PID 4841 [ 83.704454][ T4839] ubi0: detaching mtd0 [ 83.768089][ T4839] ubi0: mtd0 is detached [ 83.933786][ T4464] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 84.310269][ T4464] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.364993][ T4464] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 84.471523][ T4464] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 84.526060][ T4464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.716346][ T1324] usb 3-1: Moschip 7840/7820 USB Serial Driver converter now attached to ttyUSB0 [ 84.754523][ T4860] binder: BINDER_SET_CONTEXT_MGR already set [ 84.813383][ T4860] binder: 4859:4860 ioctl 4018620d 200000004a80 returned -16 [ 84.822923][ T1324] usb 3-1: USB disconnect, device number 3 [ 84.879085][ T1324] mos7840 ttyUSB0: Moschip 7840/7820 USB Serial Driver converter now disconnected from ttyUSB0 [ 84.963509][ T1324] mos7840 3-1:1.0: device disconnected [ 85.060415][ T4464] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 85.093921][ T4464] dvb_ttusb_budget: ttusb_init_controller: error [ 85.148912][ T4464] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 86.111247][ C0] net_ratelimit: 51 callbacks suppressed [ 86.276352][ T4875] kvm: emulating exchange as write [ 86.407020][ T4464] DVB: Unable to find symbol stv0299_attach() [ 86.467095][ T4878] ubi0: attaching mtd0 [ 86.486786][ T4464] DVB: Unable to find symbol tda8083_attach() [ 86.517498][ T4881] device syzkaller1 entered promiscuous mode [ 86.537221][ T4464] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 86.598369][ T4464] usb 4-1: USB disconnect, device number 6 [ 86.609964][ T4878] ubi0: scanning is finished [ 86.977942][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 87.051524][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 87.063342][ T4898] FAULT_INJECTION: forcing a failure. [ 87.063342][ T4898] name failslab, interval 1, probability 0, space 0, times 0 [ 87.137052][ T4896] device bond_slave_0 left promiscuous mode [ 87.159859][ T4898] CPU: 0 PID: 4898 Comm: syz.1.155 Not tainted syzkaller #0 [ 87.167148][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 87.177185][ T4898] Call Trace: [ 87.180451][ T4898] [ 87.183366][ T4898] dump_stack_lvl+0x188/0x250 [ 87.188119][ T4898] ? show_regs_print_info+0x20/0x20 [ 87.193353][ T4898] ? load_image+0x410/0x410 [ 87.197839][ T4898] ? __might_sleep+0xf0/0xf0 [ 87.202411][ T4898] ? __lock_acquire+0x7d40/0x7d40 [ 87.207417][ T4898] should_fail+0x383/0x4b0 [ 87.211838][ T4898] should_failslab+0x5/0x20 [ 87.216320][ T4898] slab_pre_alloc_hook+0x51/0xc0 [ 87.221235][ T4898] ? ptlock_alloc+0x1c/0x60 [ 87.225716][ T4898] kmem_cache_alloc+0x3d/0x280 [ 87.230460][ T4898] ptlock_alloc+0x1c/0x60 [ 87.234769][ T4898] pte_alloc_one+0xc0/0x310 [ 87.239250][ T4898] ? rcu_lock_release+0x20/0x20 [ 87.244077][ T4898] ? __might_sleep+0xf0/0xf0 [ 87.248643][ T4898] ? do_raw_spin_lock+0x128/0x2f0 [ 87.253647][ T4898] ? __rwlock_init+0x140/0x140 [ 87.258387][ T4898] __pte_alloc+0x21/0x150 [ 87.262695][ T4898] move_page_tables+0xfcd/0x1830 [ 87.267616][ T4898] ? do_mprotect_pkey+0x910/0x910 [ 87.272620][ T4898] move_vma+0x429/0xbc0 [ 87.276765][ T4898] ? vma_expandable+0x110/0x110 [ 87.281590][ T4898] ? cap_mmap_addr+0x153/0x2c0 [ 87.286334][ T4898] ? bpf_lsm_file_free_security+0x10/0x10 [ 87.292030][ T4898] ? security_mmap_addr+0x6e/0x90 [ 87.297030][ T4898] ? get_unmapped_area+0x2f0/0x360 [ 87.302124][ T4898] mremap_to+0x556/0x6b0 [ 87.306365][ T4898] __se_sys_mremap+0x412/0x950 [ 87.311111][ T4898] ? __x64_sys_mremap+0xc0/0xc0 [ 87.315937][ T4898] ? lock_chain_count+0x20/0x20 [ 87.320769][ T4898] ? lockdep_hardirqs_on+0x94/0x140 [ 87.325947][ T4898] ? __x64_sys_mremap+0x1c/0xc0 [ 87.330776][ T4898] do_syscall_64+0x4c/0xa0 [ 87.335169][ T4898] ? clear_bhb_loop+0x30/0x80 [ 87.339829][ T4898] ? clear_bhb_loop+0x30/0x80 [ 87.344487][ T4898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.350359][ T4898] RIP: 0033:0x7ff1252a51d9 [ 87.354757][ T4898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.374341][ T4898] RSP: 002b:00007ff1234fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 87.382735][ T4898] RAX: ffffffffffffffda RBX: 00007ff12552cfa0 RCX: 00007ff1252a51d9 [ 87.390687][ T4898] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 87.398634][ T4898] RBP: 00007ff12533c888 R08: 0000200000ffd000 R09: 0000000000000000 [ 87.406580][ T4898] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 87.414525][ T4898] R13: 00007ff12552d038 R14: 00007ff12552cfa0 R15: 00007ffd241a77d8 [ 87.422483][ T4898] [ 87.445384][ T4896] device bond_slave_1 left promiscuous mode [ 87.523705][ T4878] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 87.817445][ T4878] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 88.020731][ T4878] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 88.144113][ T4878] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 88.207498][ T4927] loop0: detected capacity change from 0 to 128 [ 88.386685][ T4878] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 88.396771][ T4878] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 88.414457][ T4464] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.658553][ T4878] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2491162307 [ 88.727847][ T4878] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 88.797771][ T4905] ubi0: background thread "ubi_bgt0d" started, PID 4905 [ 88.808852][ T4882] ubi0: detaching mtd0 [ 88.848706][ T4882] ubi0: mtd0 is detached [ 88.880869][ T4464] usb 5-1: Using ep0 maxpacket: 8 [ 88.919550][ T4935] loop1: detected capacity change from 0 to 128 [ 88.968564][ T4935] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 88.998120][ T4935] FAT-fs (loop1): Filesystem has been set read-only [ 89.049109][ T4935] attempt to access beyond end of device [ 89.049109][ T4935] loop1: rw=524288, want=2073, limit=128 [ 89.115781][ T4935] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 89.145728][ T4935] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 89.280361][ T4464] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 90.112490][ T4464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.133043][ T25] audit: type=1800 audit(1791837505.404:9): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.166" name="file2" dev="loop1" ino=1048644 res=0 errno=0 [ 90.158303][ T4935] syz.1.166 (4935) used greatest stack depth: 20240 bytes left [ 90.174751][ T4464] usb 5-1: Product: syz [ 90.185844][ T4464] usb 5-1: Manufacturer: syz [ 90.200965][ T4464] usb 5-1: SerialNumber: syz [ 90.228283][ T4464] usb 5-1: config 0 descriptor?? [ 90.500667][ T4464] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 90.618909][ T4952] FAULT_INJECTION: forcing a failure. [ 90.618909][ T4952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.645273][ T4952] CPU: 0 PID: 4952 Comm: syz.0.171 Not tainted syzkaller #0 [ 90.652590][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.662631][ T4952] Call Trace: [ 90.665892][ T4952] [ 90.668812][ T4952] dump_stack_lvl+0x188/0x250 [ 90.673493][ T4952] ? show_regs_print_info+0x20/0x20 [ 90.678676][ T4952] ? load_image+0x410/0x410 [ 90.683158][ T4952] ? __lock_acquire+0x7d40/0x7d40 [ 90.688163][ T4952] ? __lock_acquire+0x7d40/0x7d40 [ 90.693188][ T4952] should_fail+0x383/0x4b0 [ 90.697590][ T4952] set_fd_set+0x3a/0x90 [ 90.701725][ T4952] core_sys_select+0x723/0x8f0 [ 90.706472][ T4952] ? poll_select_set_timeout+0x150/0x150 [ 90.712096][ T4952] ? sigprocmask+0x190/0x190 [ 90.716663][ T4952] ? __context_tracking_exit+0x4c/0x80 [ 90.722106][ T4952] __se_sys_pselect6+0x2f4/0x3c0 [ 90.727026][ T4952] ? __x64_sys_pselect6+0xf0/0xf0 [ 90.732028][ T4952] ? __x64_sys_pselect6+0x1d/0xf0 [ 90.737029][ T4952] do_syscall_64+0x4c/0xa0 [ 90.741423][ T4952] ? clear_bhb_loop+0x30/0x80 [ 90.746094][ T4952] ? clear_bhb_loop+0x30/0x80 [ 90.750775][ T4952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.756667][ T4952] RIP: 0033:0x7fa8bbc4a1d9 [ 90.761071][ T4952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.780759][ T4952] RSP: 002b:00007fa8b9ea2028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 90.789161][ T4952] RAX: ffffffffffffffda RBX: 00007fa8bbed1fa0 RCX: 00007fa8bbc4a1d9 [ 90.797113][ T4952] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000040 [ 90.805064][ T4952] RBP: 00007fa8bbce1888 R08: 0000200000000280 R09: 0000000000000000 [ 90.813018][ T4952] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 90.820979][ T4952] R13: 00007fa8bbed2038 R14: 00007fa8bbed1fa0 R15: 00007ffdb4acd998 [ 90.828953][ T4952] [ 91.130040][ C0] net_ratelimit: 54 callbacks suppressed [ 91.155580][ T4962] resource sanity check: requesting [mem 0xfe800000-0xfe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 91.240390][ T4962] caller generic_access_phys+0x1f0/0x380 mapping multiple BARs [ 91.263071][ T4964] device syzkaller0 entered promiscuous mode [ 91.354464][ T4969] FAULT_INJECTION: forcing a failure. [ 91.354464][ T4969] name failslab, interval 1, probability 0, space 0, times 0 [ 91.477017][ T4969] CPU: 0 PID: 4969 Comm: syz.2.177 Not tainted syzkaller #0 [ 91.484308][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.494343][ T4969] Call Trace: [ 91.497628][ T4969] [ 91.500544][ T4969] dump_stack_lvl+0x188/0x250 [ 91.505222][ T4969] ? show_regs_print_info+0x20/0x20 [ 91.510399][ T4969] ? load_image+0x410/0x410 [ 91.514885][ T4969] ? __might_sleep+0xf0/0xf0 [ 91.519461][ T4969] ? __lock_acquire+0x7d40/0x7d40 [ 91.524474][ T4969] should_fail+0x383/0x4b0 [ 91.528881][ T4969] should_failslab+0x5/0x20 [ 91.533360][ T4969] slab_pre_alloc_hook+0x51/0xc0 [ 91.538276][ T4969] kmem_cache_alloc_trace+0x47/0x290 [ 91.543537][ T4969] ? percpu_ref_init+0xc0/0x340 [ 91.548369][ T4969] ? rcu_lock_release+0x20/0x20 [ 91.553196][ T4969] percpu_ref_init+0xc0/0x340 [ 91.557853][ T4969] blkg_alloc+0xc6/0x640 [ 91.562084][ T4969] blkcg_init_queue+0x26/0x430 [ 91.566845][ T4969] blk_alloc_queue+0x427/0x580 [ 91.571590][ T4969] __blk_mq_alloc_disk+0x43/0x150 [ 91.576595][ T4969] ? loop_add+0x263/0x890 [ 91.580904][ T4969] loop_add+0x288/0x890 [ 91.585038][ T4969] loop_control_ioctl+0x124/0x550 [ 91.590041][ T4969] ? xor_init+0x60/0x60 [ 91.594178][ T4969] ? bpf_lsm_file_ioctl+0x5/0x10 [ 91.599089][ T4969] ? security_file_ioctl+0x7c/0xa0 [ 91.604192][ T4969] ? xor_init+0x60/0x60 [ 91.608325][ T4969] __se_sys_ioctl+0xfa/0x170 [ 91.612895][ T4969] do_syscall_64+0x4c/0xa0 [ 91.617295][ T4969] ? clear_bhb_loop+0x30/0x80 [ 91.621954][ T4969] ? clear_bhb_loop+0x30/0x80 [ 91.626610][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.632482][ T4969] RIP: 0033:0x7fb2cdc1c1d9 [ 91.636883][ T4969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.656470][ T4969] RSP: 002b:00007fb2cbe74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.664869][ T4969] RAX: ffffffffffffffda RBX: 00007fb2cdea3fa0 RCX: 00007fb2cdc1c1d9 [ 91.672820][ T4969] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 91.680773][ T4969] RBP: 00007fb2cdcb3888 R08: 0000000000000000 R09: 0000000000000000 [ 91.688721][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.696674][ T4969] R13: 00007fb2cdea4038 R14: 00007fb2cdea3fa0 R15: 00007ffd7e9275e8 [ 91.704632][ T4969] [ 91.780150][ T4261] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.959124][ T4982] process 'syz.3.180' launched './file0' with NULL argv: empty string added [ 92.033164][ T4261] usb 1-1: Using ep0 maxpacket: 32 [ 92.334828][ T4261] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 92.359154][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.396869][ T4261] usb 1-1: Product: syz [ 92.409850][ T4261] usb 1-1: Manufacturer: syz [ 92.431958][ T4261] usb 1-1: SerialNumber: syz [ 92.443623][ T4996] device syzkaller0 entered promiscuous mode [ 92.596430][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.613049][ T5001] device bond_slave_0 entered promiscuous mode [ 92.619277][ T5001] device bond_slave_1 entered promiscuous mode [ 92.645154][ T5001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.691766][ T4464] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 92.715751][ T4962] loop0: detected capacity change from 0 to 1024 [ 92.742613][ T4464] usb 5-1: USB disconnect, device number 2 [ 92.768377][ T4962] EXT4-fs (loop0): Ignoring removed orlov option [ 92.793832][ T5004] loop3: detected capacity change from 0 to 64 [ 92.838499][ T5004] hfs: unable to parse mount options [ 92.853850][ T4962] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,noauto_da_alloc,norecovery,usrquota,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 92.958106][ T5004] loop3: detected capacity change from 0 to 512 [ 93.010286][ T4261] usb 1-1: MIDIStreaming interface descriptor not found [ 93.056156][ T5004] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 93.108708][ T5011] loop1: detected capacity change from 0 to 128 [ 93.177779][ T4261] usb 1-1: USB disconnect, device number 5 [ 93.229452][ T5004] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.187: corrupted inode contents [ 93.250792][ T5011] FAT-fs (loop1): Unrecognized mount option "sys_immutablelutf8=0" or missing value [ 93.392587][ T5004] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #11: comm syz.3.187: mark_inode_dirty error [ 93.579443][ T5004] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.187: invalid indirect mapped block 1 (level 1) [ 93.705353][ T5004] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.187: corrupted inode contents [ 93.836975][ T5004] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 93.879342][ T5029] FAULT_INJECTION: forcing a failure. [ 93.879342][ T5029] name failslab, interval 1, probability 0, space 0, times 0 [ 93.916123][ T5004] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #11: comm syz.3.187: corrupted inode contents [ 93.964229][ T5029] CPU: 0 PID: 5029 Comm: syz.4.192 Not tainted syzkaller #0 [ 93.971526][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.981564][ T5029] Call Trace: [ 93.984824][ T5029] [ 93.987738][ T5029] dump_stack_lvl+0x188/0x250 [ 93.992420][ T5029] ? ip6_string+0x1a20/0x1a20 [ 93.997081][ T5029] ? show_regs_print_info+0x20/0x20 [ 94.002260][ T5029] ? load_image+0x410/0x410 [ 94.006752][ T5029] should_fail+0x383/0x4b0 [ 94.011153][ T5029] should_failslab+0x5/0x20 [ 94.015633][ T5029] slab_pre_alloc_hook+0x51/0xc0 [ 94.020548][ T5029] ? dst_alloc+0x101/0x160 [ 94.024943][ T5029] kmem_cache_alloc+0x3d/0x280 [ 94.029687][ T5029] dst_alloc+0x101/0x160 [ 94.033909][ T5029] ip_route_output_key_hash_rcu+0x15b9/0x24f0 [ 94.039953][ T5029] ? ip_route_output_key_hash_rcu+0x1211/0x24f0 [ 94.046184][ T5029] ip_route_output_key_hash+0x1c6/0x300 [ 94.051711][ T5029] ? ip_route_input_rcu+0x30e0/0x30e0 [ 94.057067][ T5029] tcp_v4_connect+0x6ab/0x1990 [ 94.061818][ T5029] ? tcp_twsk_unique+0x970/0x970 [ 94.066730][ T5029] ? mark_lock+0x94/0x320 [ 94.071038][ T5029] __inet_stream_connect+0x244/0xd80 [ 94.076299][ T5029] ? lock_chain_count+0x20/0x20 [ 94.081128][ T5029] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 94.087088][ T5029] ? __local_bh_enable_ip+0x136/0x1c0 [ 94.092437][ T5029] ? inet_dgram_connect+0x340/0x340 [ 94.097615][ T5029] ? __local_bh_enable_ip+0x136/0x1c0 [ 94.102964][ T5029] ? _local_bh_enable+0xa0/0xa0 [ 94.107794][ T5029] inet_stream_connect+0x62/0xa0 [ 94.112707][ T5029] ? __inet_stream_connect+0xd80/0xd80 [ 94.118142][ T5029] __sys_connect+0x3cb/0x450 [ 94.122710][ T5029] ? __sys_connect_file+0x170/0x170 [ 94.127895][ T5029] __x64_sys_connect+0x76/0x80 [ 94.132639][ T5029] do_syscall_64+0x4c/0xa0 [ 94.137032][ T5029] ? clear_bhb_loop+0x30/0x80 [ 94.141683][ T5029] ? clear_bhb_loop+0x30/0x80 [ 94.146333][ T5029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.152204][ T5029] RIP: 0033:0x7f2b3bc631d9 [ 94.156598][ T5029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.176203][ T5029] RSP: 002b:00007f2b39ebb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 94.184600][ T5029] RAX: ffffffffffffffda RBX: 00007f2b3beeafa0 RCX: 00007f2b3bc631d9 [ 94.192552][ T5029] RDX: 0000000000000010 RSI: 0000200000000d00 RDI: 0000000000000003 [ 94.200498][ T5029] RBP: 00007f2b3bcfa888 R08: 0000000000000000 R09: 0000000000000000 [ 94.208444][ T5029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.216388][ T5029] R13: 00007f2b3beeb038 R14: 00007f2b3beeafa0 R15: 00007ffd1eadc7c8 [ 94.224345][ T5029] [ 94.242492][ T5004] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.187: mark_inode_dirty error [ 94.285034][ T5004] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 94.319695][ T5004] EXT4-fs (loop3): 1 truncate cleaned up [ 94.343763][ T5004] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.380062][ T4477] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.720226][ T4477] usb 2-1: not running at top speed; connect to a high speed hub [ 94.736278][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 94.833237][ T4477] usb 2-1: config 6 has an invalid interface number: 6 but max is 0 [ 94.855771][ T4477] usb 2-1: config 6 has no interface number 0 [ 94.874657][ T4477] usb 2-1: config 6 interface 6 has no altsetting 0 [ 95.040576][ T4234] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.120215][ T4477] usb 2-1: string descriptor 0 read error: -22 [ 95.128686][ T4477] usb 2-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 95.145588][ T4477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.155431][ T7] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 95.213860][ T4477] uvcvideo 2-1:6.6: Found Unit with invalid ID 0 [ 95.227202][ T4477] usb 2-1: Found UVC 0.00 device (174f:8a12) [ 95.241515][ T4477] usb 2-1: No valid video chain found. [ 95.291914][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 95.411948][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 95.465127][ T4477] usb 2-1: USB disconnect, device number 2 [ 95.521524][ T7] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 95.541371][ T7] usb 4-1: config 0 has no interface number 0 [ 95.547446][ T7] usb 4-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 95.569114][ T7] usb 4-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 95.592860][ T7] usb 4-1: config 0 interface 11 has no altsetting 0 [ 95.603040][ T4234] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.622183][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.631009][ T4234] usb 5-1: Product: syz [ 95.635156][ T4234] usb 5-1: Manufacturer: syz [ 95.639752][ T4234] usb 5-1: SerialNumber: syz [ 95.665304][ T4234] usb 5-1: config 0 descriptor?? [ 95.712164][ T4234] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 95.732494][ T4234] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 95.782648][ T7] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 95.798662][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.813853][ T7] usb 4-1: Product: syz [ 95.822283][ T7] usb 4-1: Manufacturer: syz [ 95.826872][ T7] usb 4-1: SerialNumber: syz [ 95.844394][ T7] usb 4-1: config 0 descriptor?? [ 96.091740][ T5047] udc-core: couldn't find an available UDC or it's busy [ 96.109382][ T5047] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.150775][ T7] usb 4-1: Expected 3 endpoints, found: 0 [ 96.172401][ T7] usb 4-1: USB disconnect, device number 7 [ 96.351049][ T4234] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 96.490025][ C0] net_ratelimit: 66 callbacks suppressed [ 96.862794][ T4234] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 96.893307][ T4234] em28xx 5-1:0.0: board has no eeprom [ 97.617532][ T5034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.640851][ T5075] loop1: detected capacity change from 0 to 32768 [ 97.677767][ T5075] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.208 (5075) [ 97.759866][ T5075] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 97.801566][ T5075] BTRFS info (device loop1): setting nodatacow, compression disabled [ 97.818725][ T5075] BTRFS info (device loop1): setting datasum, datacow enabled [ 97.833283][ T5075] BTRFS info (device loop1): disabling tree log [ 97.848995][ T5075] BTRFS info (device loop1): enabling ssd optimizations [ 97.862454][ T5075] BTRFS info (device loop1): using spread ssd allocation scheme [ 97.888915][ T5075] BTRFS info (device loop1): turning on sync discard [ 97.932699][ T5075] BTRFS info (device loop1): turning off barriers [ 97.969104][ T5075] BTRFS info (device loop1): setting nodatacow, compression disabled [ 98.025958][ T5075] BTRFS info (device loop1): allowing degraded mounts [ 98.061717][ T5045] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 98.073942][ T5075] BTRFS info (device loop1): enabling tree log [ 98.090099][ T4234] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 98.111473][ T5075] BTRFS info (device loop1): using free space tree [ 98.119179][ T4234] em28xx 5-1:0.0: dvb set to bulk mode. [ 98.137813][ T5075] BTRFS info (device loop1): has skinny extents [ 98.174099][ T4234] usb 5-1: USB disconnect, device number 3 [ 98.205591][ T4477] em28xx 5-1:0.0: Binding DVB extension [ 98.218139][ T4234] em28xx 5-1:0.0: Disconnecting em28xx [ 98.316274][ T4477] em28xx 5-1:0.0: Registering input extension [ 98.332047][ T4234] em28xx 5-1:0.0: Closing input extension [ 98.426468][ T4234] em28xx 5-1:0.0: Freeing device [ 99.190122][ T4478] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.222723][ T5128] FAULT_INJECTION: forcing a failure. [ 99.222723][ T5128] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.236925][ T5128] CPU: 0 PID: 5128 Comm: syz.0.219 Not tainted syzkaller #0 [ 99.244198][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.254232][ T5128] Call Trace: [ 99.257498][ T5128] [ 99.260407][ T5128] dump_stack_lvl+0x188/0x250 [ 99.265069][ T5128] ? show_regs_print_info+0x20/0x20 [ 99.270242][ T5128] ? load_image+0x410/0x410 [ 99.274728][ T5128] should_fail+0x383/0x4b0 [ 99.279125][ T5128] prepare_alloc_pages+0x1e3/0x5b0 [ 99.284217][ T5128] __alloc_pages+0x11b/0x480 [ 99.288784][ T5128] ? zone_statistics+0x170/0x170 [ 99.293698][ T5128] ? rcu_lock_acquire+0x30/0x30 [ 99.298542][ T5128] ? alloc_pages+0x452/0x560 [ 99.303127][ T5128] __get_free_pages+0x8/0x30 [ 99.307694][ T5128] __tlb_remove_page_size+0x1f2/0x3f0 [ 99.313044][ T5128] unmap_page_range+0xfcf/0x2410 [ 99.318092][ T5128] unmap_vmas+0x131/0x250 [ 99.322400][ T5128] ? unmap_page_range+0x2410/0x2410 [ 99.327570][ T5128] ? __mutex_lock_common+0x435/0x2400 [ 99.332924][ T5128] ? exit_mm_release+0x16/0x30 [ 99.337668][ T5128] exit_mmap+0x3b9/0x640 [ 99.341888][ T5128] ? vm_brk+0x20/0x20 [ 99.345857][ T5128] ? uprobe_clear_state+0x2f6/0x460 [ 99.351030][ T5128] __mmput+0x115/0x390 [ 99.355101][ T5128] exit_mm+0x632/0x7b0 [ 99.359148][ T5128] ? perf_pmu_migrate_context+0xb70/0xb70 [ 99.365110][ T5128] ? do_exit+0x2110/0x2110 [ 99.369501][ T5128] ? __ia32_sys_timer_delete+0x40/0x40 [ 99.374937][ T5128] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 99.380392][ T5128] ? tty_audit_exit+0x149/0x1f0 [ 99.385222][ T5128] do_exit+0x5b8/0x2110 [ 99.389356][ T5128] ? put_task_struct+0x80/0x80 [ 99.394094][ T5128] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.400051][ T5128] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.405051][ T5128] do_group_exit+0x12c/0x2f0 [ 99.409617][ T5128] ? lockdep_hardirqs_on+0x94/0x140 [ 99.414791][ T5128] get_signal+0x7eb/0x12e0 [ 99.419192][ T5128] arch_do_signal_or_restart+0xe6/0x12a0 [ 99.424808][ T5128] ? futex_exit_release+0x1c0/0x1c0 [ 99.429986][ T5128] ? get_sigframe_size+0x10/0x10 [ 99.434899][ T5128] ? __context_tracking_exit+0x4c/0x80 [ 99.440344][ T5128] ? exit_to_user_mode_loop+0x3b/0x130 [ 99.445779][ T5128] exit_to_user_mode_loop+0x9e/0x130 [ 99.451042][ T5128] exit_to_user_mode_prepare+0xee/0x180 [ 99.456560][ T5128] syscall_exit_to_user_mode+0x16/0x40 [ 99.462018][ T5128] do_syscall_64+0x58/0xa0 [ 99.466411][ T5128] ? clear_bhb_loop+0x30/0x80 [ 99.471065][ T5128] ? clear_bhb_loop+0x30/0x80 [ 99.475718][ T5128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.481587][ T5128] RIP: 0033:0x7fa8bbc4a1d9 [ 99.485978][ T5128] Code: Unable to access opcode bytes at RIP 0x7fa8bbc4a1af. [ 99.493318][ T5128] RSP: 002b:00007fa8b9ea20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.501708][ T5128] RAX: 0000000000000001 RBX: 00007fa8bbed1fa8 RCX: 00007fa8bbc4a1d9 [ 99.509674][ T5128] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa8bbed1fac [ 99.517624][ T5128] RBP: 00007fa8bbed1fa0 R08: 000b471b1b9e30c0 R09: 0000000000000000 [ 99.525574][ T5128] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 99.533523][ T5128] R13: 00007fa8bbed2038 R14: 00007ffdb4acd8b0 R15: 00007ffdb4acd998 [ 99.541476][ T5128] [ 99.544527][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.628619][ T5130] loop1: detected capacity change from 0 to 164 [ 99.997645][ T4478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.017833][ T5140] loop2: detected capacity change from 0 to 16 [ 100.024561][ T4478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.037351][ T4478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 100.254153][ T5140] erofs: (device loop2): mounted with root inode @ nid 36. [ 100.264038][ T4478] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.274721][ T4478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.308172][ T4478] usb 5-1: config 0 descriptor?? [ 100.505289][ T5143] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 100.542986][ T5143] loop0: detected capacity change from 0 to 16 [ 100.585984][ T5143] erofs: (device loop0): mounted with root inode @ nid 36. [ 100.635425][ T5143] netlink: 'syz.0.225': attribute type 8 has an invalid length. [ 100.807577][ T4478] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 101.021696][ T4478] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 101.953081][ C0] net_ratelimit: 61 callbacks suppressed [ 102.278067][ T5190] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.296989][ T4478] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 102.397200][ T5192] device syzkaller0 entered promiscuous mode [ 102.422820][ T4466] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.496723][ T5195] device syzkaller0 entered promiscuous mode [ 102.670771][ T4478] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 102.803733][ T4466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 103.783423][ T13] usb 5-1: USB disconnect, device number 4 [ 103.807956][ T4478] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 103.850731][ T5197] device syzkaller0 entered promiscuous mode [ 103.899059][ T4466] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.931888][ T4478] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 103.962747][ T4478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.972201][ T4466] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 103.987892][ T4466] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.006894][ T4466] usb 2-1: config 0 descriptor?? [ 104.164783][ T5211] netlink: 32 bytes leftover after parsing attributes in process `syz.3.241'. [ 104.514539][ T4466] input: HID 0b05:19b6 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0B05:19B6.0002/input/input9 [ 104.617308][ T5221] loop4: detected capacity change from 0 to 512 [ 104.635752][ T4466] asus 0003:0B05:19B6.0002: input,hidraw0: USB HID v0.00 Joystick [HID 0b05:19b6] on usb-dummy_hcd.1-1/input0 [ 105.126787][ T5188] udc-core: couldn't find an available UDC or it's busy [ 105.143187][ T5188] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 105.211539][ T4466] usb 2-1: USB disconnect, device number 3 [ 105.876693][ T5229] loop4: detected capacity change from 0 to 32768 [ 105.883644][ T4478] pegasus 1-1:1.0: can't reset MAC [ 105.920672][ T4478] pegasus: probe of 1-1:1.0 failed with error -5 [ 105.964571][ T5229] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 105.987183][ T4478] usb 1-1: USB disconnect, device number 6 [ 106.098807][ T5229] (syz.4.246,5229,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 106.178711][ T5229] (syz.4.246,5229,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 106.225616][ T5240] binder: 5239:5240 ioctl c0306201 200000000080 returned -14 [ 106.242420][ T25] audit: type=1800 audit(1791837521.514:10): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.246" name="file1" dev="loop4" ino=17060 res=0 errno=0 [ 106.309280][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 106.323498][ T5240] binder_alloc: 5239: pid 5239 spamming oneway? 2 buffers allocated for a total size of 5120 [ 106.410663][ T5242] binder_alloc: 5239: pid 5239 spamming oneway? 3 buffers allocated for a total size of 5128 [ 107.510992][ C0] net_ratelimit: 44 callbacks suppressed [ 107.926915][ T5264] device syzkaller0 entered promiscuous mode [ 108.253695][ T5272] FAULT_INJECTION: forcing a failure. [ 108.253695][ T5272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.267062][ T5272] CPU: 0 PID: 5272 Comm: syz.2.261 Not tainted syzkaller #0 [ 108.274326][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.284385][ T5272] Call Trace: [ 108.287664][ T5272] [ 108.290578][ T5272] dump_stack_lvl+0x188/0x250 [ 108.295239][ T5272] ? show_regs_print_info+0x20/0x20 [ 108.300416][ T5272] ? load_image+0x410/0x410 [ 108.304899][ T5272] ? mark_lock+0x94/0x320 [ 108.309214][ T5272] should_fail+0x383/0x4b0 [ 108.313616][ T5272] prepare_alloc_pages+0x1e3/0x5b0 [ 108.318709][ T5272] __alloc_pages+0x11b/0x480 [ 108.323278][ T5272] ? zone_statistics+0x170/0x170 [ 108.328198][ T5272] ? rcu_lock_acquire+0x30/0x30 [ 108.333034][ T5272] ? alloc_pages+0x452/0x560 [ 108.337605][ T5272] __get_free_pages+0x8/0x30 [ 108.342177][ T5272] __tlb_remove_page_size+0x1f2/0x3f0 [ 108.347534][ T5272] unmap_page_range+0xfcf/0x2410 [ 108.352465][ T5272] unmap_vmas+0x131/0x250 [ 108.356773][ T5272] ? unmap_page_range+0x2410/0x2410 [ 108.361945][ T5272] ? __mutex_lock_common+0x435/0x2400 [ 108.367295][ T5272] ? exit_mm_release+0x16/0x30 [ 108.372040][ T5272] exit_mmap+0x3b9/0x640 [ 108.376263][ T5272] ? vm_brk+0x20/0x20 [ 108.380249][ T5272] ? uprobe_clear_state+0x2f6/0x460 [ 108.385426][ T5272] __mmput+0x115/0x390 [ 108.389472][ T5272] exit_mm+0x632/0x7b0 [ 108.393519][ T5272] ? perf_pmu_migrate_context+0xb70/0xb70 [ 108.399227][ T5272] ? do_exit+0x2110/0x2110 [ 108.403618][ T5272] ? __ia32_sys_timer_delete+0x40/0x40 [ 108.409052][ T5272] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 108.414491][ T5272] ? tty_audit_exit+0x149/0x1f0 [ 108.419320][ T5272] do_exit+0x5b8/0x2110 [ 108.423454][ T5272] ? put_task_struct+0x80/0x80 [ 108.428195][ T5272] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.434162][ T5272] ? _raw_spin_lock_irq+0xb7/0xf0 [ 108.439167][ T5272] do_group_exit+0x12c/0x2f0 [ 108.443756][ T5272] ? lockdep_hardirqs_on+0x94/0x140 [ 108.448932][ T5272] get_signal+0x7eb/0x12e0 [ 108.453330][ T5272] arch_do_signal_or_restart+0xe6/0x12a0 [ 108.458949][ T5272] ? futex_exit_release+0x1c0/0x1c0 [ 108.464125][ T5272] ? get_sigframe_size+0x10/0x10 [ 108.469061][ T5272] ? __context_tracking_exit+0x4c/0x80 [ 108.474508][ T5272] ? exit_to_user_mode_loop+0x3b/0x130 [ 108.479944][ T5272] exit_to_user_mode_loop+0x9e/0x130 [ 108.485325][ T5272] exit_to_user_mode_prepare+0xee/0x180 [ 108.490848][ T5272] syscall_exit_to_user_mode+0x16/0x40 [ 108.496284][ T5272] do_syscall_64+0x58/0xa0 [ 108.500677][ T5272] ? clear_bhb_loop+0x30/0x80 [ 108.505331][ T5272] ? clear_bhb_loop+0x30/0x80 [ 108.510009][ T5272] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.515880][ T5272] RIP: 0033:0x7fb2cdc1c1d9 [ 108.520272][ T5272] Code: Unable to access opcode bytes at RIP 0x7fb2cdc1c1af. [ 108.527611][ T5272] RSP: 002b:00007fb2cbe740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.536000][ T5272] RAX: 0000000000000001 RBX: 00007fb2cdea3fa8 RCX: 00007fb2cdc1c1d9 [ 108.543951][ T5272] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb2cdea3fac [ 108.551905][ T5272] RBP: 00007fb2cdea3fa0 R08: 000d10de1a4906be R09: 0000000000000000 [ 108.559852][ T5272] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 108.567826][ T5272] R13: 00007fb2cdea4038 R14: 00007ffd7e927500 R15: 00007ffd7e9275e8 [ 108.575786][ T5272] [ 108.674355][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.932185][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 109.220228][ T13] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 109.279783][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.344395][ T13] usb 5-1: Product: syz [ 109.348567][ T13] usb 5-1: Manufacturer: syz [ 109.404195][ T13] usb 5-1: SerialNumber: syz [ 109.435715][ T13] usb 5-1: config 0 descriptor?? [ 109.713122][ T13] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 110.126857][ T5322] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.135338][ T5322] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.618453][ T5322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.663725][ T5322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.920644][ T5340] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 110.954930][ T5340] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.095705][ T5322] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.113356][ T5322] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.153786][ T5322] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.167293][ T5346] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.176755][ T5322] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.301653][ T13] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 111.324543][ T13] usb 5-1: USB disconnect, device number 5 [ 111.439483][ T5355] loop0: detected capacity change from 0 to 4096 [ 111.503765][ T5355] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 111.678466][ T5355] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 111.719859][ T5355] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 111.742231][ T5355] loop0: [ 111.884412][ T5361] netlink: 220 bytes leftover after parsing attributes in process `syz.1.284'. [ 112.421590][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.661103][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 112.731994][ C0] net_ratelimit: 56 callbacks suppressed [ 112.783227][ T7] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 112.824471][ T7] usb 4-1: config 0 has no interface number 0 [ 112.861782][ T7] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 112.900081][ T4465] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 112.919385][ T7] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 112.933809][ T5385] binder: BINDER_SET_CONTEXT_MGR already set [ 112.953606][ T5385] binder: 5384:5385 ioctl 4018620d 2000000002c0 returned -16 [ 113.154805][ T5391] loop1: detected capacity change from 0 to 32768 [ 113.190652][ T5391] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.293 (5391) [ 113.208410][ T5391] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 113.217537][ T5391] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.227087][ T5391] BTRFS info (device loop1): use zstd compression, level 3 [ 113.234292][ T5391] BTRFS info (device loop1): force clearing of disk cache [ 113.241412][ T5391] BTRFS info (device loop1): enabling disk space caching [ 113.248408][ T5391] BTRFS info (device loop1): disk space caching is enabled [ 113.255601][ T5391] BTRFS info (device loop1): has skinny extents [ 113.262253][ T7] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 113.308513][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.347359][ T7] usb 4-1: Product: syz [ 113.368187][ T7] usb 4-1: Manufacturer: syz [ 113.380252][ T4465] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.413800][ T7] usb 4-1: SerialNumber: syz [ 113.423393][ T5391] BTRFS info (device loop1): enabling ssd optimizations [ 113.434899][ T5391] BTRFS info (device loop1): clearing free space tree [ 113.441988][ T5391] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.452121][ T5391] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.491370][ T4465] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 113.505157][ T7] usb 4-1: config 0 descriptor?? [ 113.540195][ T5378] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.600468][ T4465] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 113.613217][ T5378] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.656341][ T4465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.716942][ T4465] usb 1-1: SerialNumber: syz [ 113.887745][ T5378] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.901921][ T4466] Bluetooth: hci2: command 0x0401 tx timeout [ 113.952439][ T5378] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.203705][ T4178] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop1 scanned by udevd (4178) [ 114.240212][ T7] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 114.353994][ T5404] comedi comedi1: reset error (fatal) [ 114.555670][ T4174] usb 1-1: USB disconnect, device number 7 [ 114.573690][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 115.150300][ T5446] Device name cannot be null; rc = [-22] [ 115.400113][ T5446] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.299'. [ 115.924418][ T5450] loop1: detected capacity change from 0 to 32768 [ 116.020862][ T5450] XFS (loop1): Mounting V5 Filesystem [ 116.078911][ T5459] loop4: detected capacity change from 0 to 1024 [ 116.128934][ T5450] XFS (loop1): Ending clean mount [ 116.143396][ T25] audit: type=1800 audit(1791837531.408:11): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.300" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 116.560269][ T5459] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.676977][ T4187] XFS (loop1): Unmounting Filesystem [ 116.708700][ T5459] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.809713][ T5475] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.873769][ T5475] hfsplus: request for non-existent node 33423360 in B*Tree [ 116.934352][ T5459] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.005311][ T5459] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.096851][ T5475] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.136573][ T5475] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.160237][ T7] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.234745][ T7] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 117.346001][ T7] asix: probe of 4-1:0.34 failed with error -71 [ 117.363195][ T5485] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.424015][ T7] usb 4-1: USB disconnect, device number 8 [ 117.448549][ T5485] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.581322][ T5459] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.645855][ T5459] hfsplus: request for non-existent node 33423360 in B*Tree [ 117.851134][ C0] net_ratelimit: 34 callbacks suppressed [ 117.947301][ T5512] device syzkaller0 entered promiscuous mode [ 117.997461][ T5484] loop0: detected capacity change from 0 to 32768 [ 118.059746][ T5484] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.306 (5484) [ 118.182889][ T5484] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 118.248191][ T5484] BTRFS info (device loop0): force clearing of disk cache [ 118.302178][ T5484] BTRFS info (device loop0): use zlib compression, level 3 [ 118.359038][ T5484] BTRFS info (device loop0): enabling ssd optimizations [ 118.407029][ T5484] BTRFS info (device loop0): using spread ssd allocation scheme [ 118.474957][ T5484] BTRFS info (device loop0): using free space tree [ 118.526723][ T5484] BTRFS info (device loop0): has skinny extents [ 118.729719][ T5484] BTRFS info (device loop0): clearing free space tree [ 118.758274][ T5513] loop4: detected capacity change from 0 to 32768 [ 118.777927][ T5484] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.804188][ T5545] loop3: detected capacity change from 0 to 1024 [ 118.849927][ T5484] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.036155][ T5484] BTRFS info (device loop0): creating free space tree [ 119.088622][ T25] audit: type=1326 audit(1791837534.348:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.318" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa60d11d9 code=0x7ffc0000 [ 119.136552][ T5484] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.206626][ T5484] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.305166][ T25] audit: type=1326 audit(1791837534.388:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.318" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa60d11d9 code=0x7ffc0000 [ 119.362780][ T5484] BTRFS info (device loop0): checking UUID tree [ 119.522918][ T25] audit: type=1326 audit(1791837534.388:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.318" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa60d11d9 code=0x7ffc0000 [ 119.576369][ T5568] loop3: detected capacity change from 0 to 256 [ 119.750809][ T25] audit: type=1326 audit(1791837534.388:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.318" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa60d11d9 code=0x7ffc0000 [ 119.908942][ T5576] loop3: detected capacity change from 0 to 4096 [ 119.959934][ T25] audit: type=1326 audit(1791837534.388:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.318" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0fa60d0047 code=0x7ffc0000 [ 120.031495][ T5576] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 120.176900][ T25] audit: type=1326 audit(1791837534.388:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.318" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa60d11d9 code=0x7ffc0000 [ 120.303827][ T5576] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.326097][ T5584] FAULT_INJECTION: forcing a failure. [ 120.326097][ T5584] name failslab, interval 1, probability 0, space 0, times 0 [ 120.343207][ T5576] EXT4-fs (loop3): Test dummy encryption mode enabled [ 120.379620][ T25] audit: type=1326 audit(1791837534.388:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.318" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa60d11d9 code=0x7ffc0000 [ 120.424194][ T5576] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 120.424194][ T5576] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 120.424194][ T5576] [ 120.478520][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.507102][ T5584] CPU: 0 PID: 5584 Comm: syz.2.324 Not tainted syzkaller #0 [ 120.514395][ T5584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.524439][ T5584] Call Trace: [ 120.527697][ T5584] [ 120.530624][ T5584] dump_stack_lvl+0x188/0x250 [ 120.535282][ T5584] ? show_regs_print_info+0x20/0x20 [ 120.540467][ T5584] ? load_image+0x410/0x410 [ 120.544954][ T5584] should_fail+0x383/0x4b0 [ 120.549347][ T5584] should_failslab+0x5/0x20 [ 120.553823][ T5584] slab_pre_alloc_hook+0x51/0xc0 [ 120.558734][ T5584] ? skb_clone+0x1bd/0x350 [ 120.563138][ T5584] kmem_cache_alloc+0x3d/0x280 [ 120.567877][ T5584] skb_clone+0x1bd/0x350 [ 120.572095][ T5584] __netlink_deliver_tap+0x3cb/0x7c0 [ 120.577361][ T5584] netlink_deliver_tap+0x16c/0x180 [ 120.582446][ T5584] netlink_unicast+0x759/0x940 [ 120.587193][ T5584] netlink_sendmsg+0x8ba/0xbe0 [ 120.591936][ T5584] ? netlink_getsockopt+0x570/0x570 [ 120.597104][ T5584] ? aa_sock_msg_perm+0x94/0x150 [ 120.602015][ T5584] ? apparmor_socket_sendmsg+0x88/0x230 [ 120.607533][ T5584] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 120.612806][ T5584] ? security_socket_sendmsg+0x7c/0xa0 [ 120.618252][ T5584] ? netlink_getsockopt+0x570/0x570 [ 120.623425][ T5584] ____sys_sendmsg+0x5be/0x8f0 [ 120.628168][ T5584] ? __sys_sendmsg_sock+0x30/0x30 [ 120.633171][ T5584] ? import_iovec+0x6f/0xa0 [ 120.637650][ T5584] ___sys_sendmsg+0x236/0x2e0 [ 120.642306][ T5584] ? __sys_sendmsg+0x290/0x290 [ 120.647062][ T5584] __se_sys_sendmsg+0x1b7/0x2a0 [ 120.651891][ T5584] ? __x64_sys_sendmsg+0x80/0x80 [ 120.656803][ T5584] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.662764][ T5584] ? lockdep_hardirqs_on+0x94/0x140 [ 120.667938][ T5584] do_syscall_64+0x4c/0xa0 [ 120.672326][ T5584] ? clear_bhb_loop+0x30/0x80 [ 120.676980][ T5584] ? clear_bhb_loop+0x30/0x80 [ 120.681632][ T5584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.687499][ T5584] RIP: 0033:0x7fb2cdc1c1d9 [ 120.691889][ T5584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.711485][ T5584] RSP: 002b:00007fb2cbe74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.719891][ T5584] RAX: ffffffffffffffda RBX: 00007fb2cdea3fa0 RCX: 00007fb2cdc1c1d9 [ 120.727840][ T5584] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 120.735785][ T5584] RBP: 00007fb2cdcb3888 R08: 0000000000000000 R09: 0000000000000000 [ 120.743746][ T5584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.751695][ T5584] R13: 00007fb2cdea4038 R14: 00007fb2cdea3fa0 R15: 00007ffd7e9275e8 [ 120.759646][ T5584] [ 120.779577][ T5576] EXT4-fs (loop3): inline encryption not supported [ 120.791098][ T25] audit: type=1326 audit(1791837534.388:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.318" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa60d11d9 code=0x7ffc0000 [ 120.823735][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.845620][ T5576] EXT4-fs (loop3): Ignoring removed bh option [ 120.864954][ T5484] BTRFS info (device loop0): balance: start -d -m [ 120.876769][ T5598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.886690][ T5576] EXT4-fs (loop3): Ignoring removed orlov option [ 120.915215][ T5598] device bridge_slave_0 left promiscuous mode [ 120.922373][ T5576] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0002] [ 120.944065][ T25] audit: type=1326 audit(1791837534.428:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.318" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0fa60d11d9 code=0x7ffc0000 [ 120.983051][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.007099][ T5576] System zones: 0-5 [ 121.037378][ T5484] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 121.047927][ T5576] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,inlinecrypt,usrquota,bh,orlov,,errors=continue. Quota mode: writeback. [ 121.167048][ T5484] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 121.283424][ T5484] BTRFS info (device loop0): found 11 extents, stage: move data extents [ 121.332452][ T5484] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 121.356234][ T5484] BTRFS info (device loop0): balance: ended with status: 0 [ 121.388102][ T5598] device bridge_slave_1 left promiscuous mode [ 121.418625][ T5606] loop1: detected capacity change from 0 to 128 [ 121.432948][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.471885][ T5606] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 121.502083][ T4197] __quota_error: 30 callbacks suppressed [ 121.502092][ T4197] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 3129 out of range 0-8 [ 121.523691][ T5598] bond0: (slave bond_slave_0): Releasing backup interface [ 121.546725][ T5606] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.586069][ T5598] bond0: (slave bond_slave_1): Releasing backup interface [ 121.596219][ T4197] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 121.637425][ T4197] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz-executor: Failed to acquire dquot type 0 [ 121.660701][ T5598] team0: Port device team_slave_0 removed [ 121.679832][ T5598] team0: Port device team_slave_1 removed [ 121.699027][ T5598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.725754][ T5606] FAULT_INJECTION: forcing a failure. [ 121.725754][ T5606] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 121.742824][ T5598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.776651][ T5598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.788082][ T5606] CPU: 0 PID: 5606 Comm: syz.1.326 Not tainted syzkaller #0 [ 121.795360][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.805393][ T5606] Call Trace: [ 121.808649][ T5606] [ 121.811559][ T5606] dump_stack_lvl+0x188/0x250 [ 121.816218][ T5606] ? show_regs_print_info+0x20/0x20 [ 121.821391][ T5606] ? load_image+0x410/0x410 [ 121.825872][ T5606] ? __lock_acquire+0x7d40/0x7d40 [ 121.830870][ T5606] ? __rb_allocate_pages+0x197/0x6b0 [ 121.836128][ T5606] ? __ring_buffer_alloc+0x24b/0x540 [ 121.841388][ T5606] ? allocate_trace_buffers+0x70/0x2c0 [ 121.846824][ T5606] ? trace_array_create+0x2ac/0xc00 [ 121.852012][ T5606] should_fail+0x383/0x4b0 [ 121.856526][ T5606] prepare_alloc_pages+0x1e3/0x5b0 [ 121.861632][ T5606] __alloc_pages+0x11b/0x480 [ 121.866297][ T5606] ? zone_statistics+0x170/0x170 [ 121.871229][ T5606] __rb_allocate_pages+0x2d8/0x6b0 [ 121.876326][ T5606] rb_allocate_cpu_buffer+0x625/0x9e0 [ 121.881678][ T5606] ? rb_wake_up_waiters+0x190/0x190 [ 121.886864][ T5606] __ring_buffer_alloc+0x24b/0x540 [ 121.891957][ T5606] allocate_trace_buffers+0x70/0x2c0 [ 121.897231][ T5606] ? __raw_spin_lock_init+0x41/0x100 [ 121.902497][ T5606] trace_array_create+0x2ac/0xc00 [ 121.907501][ T5606] instance_mkdir+0xc8/0x120 [ 121.912070][ T5606] tracefs_syscall_mkdir+0xb7/0x110 [ 121.917246][ T5606] vfs_mkdir+0x386/0x570 [ 121.921476][ T5606] do_mkdirat+0x1dd/0x5c0 [ 121.925787][ T5606] ? vfs_mkdir+0x570/0x570 [ 121.930185][ T5606] __x64_sys_mkdirat+0x85/0x90 [ 121.934929][ T5606] do_syscall_64+0x4c/0xa0 [ 121.939323][ T5606] ? clear_bhb_loop+0x30/0x80 [ 121.943976][ T5606] ? clear_bhb_loop+0x30/0x80 [ 121.948631][ T5606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.954498][ T5606] RIP: 0033:0x7ff1252a51d9 [ 121.958892][ T5606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.978489][ T5606] RSP: 002b:00007ff1234fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 121.986881][ T5606] RAX: ffffffffffffffda RBX: 00007ff12552cfa0 RCX: 00007ff1252a51d9 [ 121.994829][ T5606] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 122.002781][ T5606] RBP: 00007ff12533c888 R08: 0000000000000000 R09: 0000000000000000 [ 122.010729][ T5606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.018678][ T5606] R13: 00007ff12552d038 R14: 00007ff12552cfa0 R15: 00007ffd241a77d8 [ 122.026635][ T5606] [ 122.061803][ T5598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.189088][ T5600] team0: Mode changed to "loadbalance" [ 122.210995][ T5584] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 122.637868][ T5616] loop0: detected capacity change from 0 to 64 [ 122.758864][ T5621] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.970035][ C0] net_ratelimit: 42 callbacks suppressed [ 123.660189][ T5630] sg_write: data in/out 417804/136 bytes for SCSI command 0x0-- guessing data in; [ 123.660189][ T5630] program syz.2.335 not setting count and/or reply_len properly [ 124.144705][ T5635] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 124.358117][ T5635] loop4: detected capacity change from 0 to 2048 [ 124.383709][ T5636] loop0: detected capacity change from 0 to 8192 [ 124.474315][ T5635] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.564364][ T5635] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.587268][ T5647] FAULT_INJECTION: forcing a failure. [ 124.587268][ T5647] name failslab, interval 1, probability 0, space 0, times 0 [ 124.587281][ T5647] CPU: 0 PID: 5647 Comm: syz.1.340 Not tainted syzkaller #0 [ 124.587292][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.587299][ T5647] Call Trace: [ 124.587303][ T5647] [ 124.587308][ T5647] dump_stack_lvl+0x188/0x250 [ 124.587324][ T5647] ? show_regs_print_info+0x20/0x20 [ 124.587335][ T5647] ? load_image+0x410/0x410 [ 124.587347][ T5647] ? __might_sleep+0xf0/0xf0 [ 124.587359][ T5647] ? __lock_acquire+0x7d40/0x7d40 [ 124.587374][ T5647] should_fail+0x383/0x4b0 [ 124.587388][ T5647] should_failslab+0x5/0x20 [ 124.587398][ T5647] slab_pre_alloc_hook+0x51/0xc0 [ 124.587408][ T5647] ? __kernfs_new_node+0xa8/0x6b0 [ 124.587421][ T5647] __kmalloc_track_caller+0x69/0x330 [ 124.587431][ T5647] ? __kernfs_new_node+0xa8/0x6b0 [ 124.587444][ T5647] kstrdup_const+0x51/0x90 [ 124.587455][ T5647] __kernfs_new_node+0xa8/0x6b0 [ 124.587469][ T5647] ? kernfs_new_node+0x250/0x250 [ 124.587484][ T5647] ? sysfs_do_create_link_sd+0x75/0x110 [ 124.587499][ T5647] kernfs_new_node+0x148/0x250 [ 124.587512][ T5647] kernfs_create_link+0xa3/0x200 [ 124.587523][ T5647] sysfs_do_create_link_sd+0x83/0x110 [ 124.587534][ T5647] device_create_sys_dev_entry+0x11b/0x180 [ 124.587545][ T5647] ? device_add_attrs+0x690/0x690 [ 124.587557][ T5647] ? device_create_file+0xeb/0x1b0 [ 124.587569][ T5647] device_add+0xb24/0x1050 [ 124.587581][ T5647] device_create+0x266/0x300 [ 124.587592][ T5647] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 124.587604][ T5647] ? _raw_spin_unlock+0x40/0x40 [ 124.587614][ T5647] ? root_device_unregister+0xf0/0xf0 [ 124.587623][ T5647] ? update_attr+0x550/0x730 [ 124.587635][ T5647] ? memcpy+0x3c/0x60 [ 124.587645][ T5647] ? is_console_locked+0x5/0x10 [ 124.587654][ T5647] ? csi_J+0x8d6/0xdb0 [ 124.587665][ T5647] vcs_make_sysfs+0x2e/0x80 [ 124.587675][ T5647] vc_allocate+0x5e4/0x700 [ 124.587688][ T5647] ? vc_cons_allocated+0x70/0x70 [ 124.587703][ T5647] con_install+0x9c/0x720 [ 124.587716][ T5647] ? show_tty_active+0x30/0x30 [ 124.587732][ T5647] tty_init_dev+0xbb/0x470 [ 124.587744][ T5647] tty_open+0x7e8/0xcd0 [ 124.587758][ T5647] ? __lock_acquire+0x7d40/0x7d40 [ 124.587771][ T5647] ? tty_compat_ioctl+0x570/0x570 [ 124.587783][ T5647] ? do_raw_spin_unlock+0x11d/0x230 [ 124.587796][ T5647] chrdev_open+0x585/0x5f0 [ 124.587808][ T5647] ? cd_forget+0x160/0x160 [ 124.587820][ T5647] ? fsnotify_perm+0x3a7/0x560 [ 124.587832][ T5647] ? cd_forget+0x160/0x160 [ 124.587842][ T5647] do_dentry_open+0x7f7/0xf90 [ 124.587852][ T5647] ? vfs_open+0x2b/0x80 [ 124.587865][ T5647] path_openat+0x2718/0x2fb0 [ 124.587886][ T5647] ? __kasan_slab_alloc+0xa9/0xc0 [ 124.587901][ T5647] ? do_filp_open+0x400/0x400 [ 124.587920][ T5647] do_filp_open+0x1df/0x400 [ 124.587933][ T5647] ? vfs_tmpfile+0x300/0x300 [ 124.587953][ T5647] ? _raw_spin_unlock+0x24/0x40 [ 124.587971][ T5647] ? alloc_fd+0x59e/0x650 [ 124.587986][ T5647] do_sys_openat2+0x14b/0x500 [ 124.587996][ T5647] ? __lock_acquire+0x7d40/0x7d40 [ 124.588009][ T5647] ? do_sys_open+0xe0/0xe0 [ 124.588018][ T5647] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.588032][ T5647] ? lock_chain_count+0x20/0x20 [ 124.588046][ T5647] __x64_sys_openat+0x135/0x160 [ 124.588059][ T5647] do_syscall_64+0x4c/0xa0 [ 124.588070][ T5647] ? clear_bhb_loop+0x30/0x80 [ 124.588081][ T5647] ? clear_bhb_loop+0x30/0x80 [ 124.588092][ T5647] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.588104][ T5647] RIP: 0033:0x7ff125265a0e [ 124.588114][ T5647] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.588122][ T5647] RSP: 002b:00007ff1234fcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.588135][ T5647] RAX: ffffffffffffffda RBX: 00007ff1234fd6c0 RCX: 00007ff125265a0e [ 124.588142][ T5647] RDX: 0000000000000002 RSI: 00007ff1234fcc00 RDI: ffffffffffffff9c [ 124.588149][ T5647] RBP: 00007ff12533c888 R08: 0000000000000000 R09: 0000000000000000 [ 124.588155][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.588162][ T5647] R13: 00007ff12552d038 R14: 00007ff12552cfa0 R15: 00007ffd241a77d8 [ 124.588176][ T5647] [ 125.020383][ T4474] Bluetooth: hci4: command 0x0409 tx timeout [ 125.062620][ T5623] chnl_net:caif_netlink_parms(): no params data found [ 125.167504][ T4186] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 125.300262][ T4186] FAT-fs (loop0): Filesystem has been set read-only [ 125.395525][ T4186] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 125.478038][ T5654] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 125.492112][ T4186] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 125.624356][ T5654] device syz_tun entered promiscuous mode [ 125.705811][ T5654] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 125.789902][ T25] audit: type=1326 audit(1791837541.048:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 125.922424][ T25] audit: type=1326 audit(1791837541.098:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 126.005963][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.057806][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.106196][ T25] audit: type=1326 audit(1791837541.098:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 126.148589][ T5623] device bridge_slave_0 entered promiscuous mode [ 126.201553][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.301713][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.372751][ T25] audit: type=1326 audit(1791837541.138:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 126.400918][ T5623] device bridge_slave_1 entered promiscuous mode [ 126.546663][ T5686] loop1: detected capacity change from 0 to 512 [ 126.582349][ T25] audit: type=1326 audit(1791837541.138:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 126.614746][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.623980][ T4471] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.651050][ T5686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.717672][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.738472][ T5686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 126.776273][ T5686] System zones: 1-12 [ 126.807716][ T25] audit: type=1326 audit(1791837541.138:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 126.845293][ T5686] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.353: bad orphan inode 131072 [ 126.924896][ T5686] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 126.956328][ T5623] team0: Port device team_slave_0 added [ 127.016802][ T5623] team0: Port device team_slave_1 added [ 127.034003][ T4471] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.052597][ T25] audit: type=1326 audit(1791837541.138:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff125265a0e code=0x7ffc0000 [ 127.118188][ T4471] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 127.187648][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 127.250698][ T25] audit: type=1326 audit(1791837541.138:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 127.347571][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.355224][ T4471] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 127.385616][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.429962][ T4471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.473526][ T4471] usb 3-1: Product: syz [ 127.484190][ T25] audit: type=1326 audit(1791837541.138:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 127.524564][ T4471] usb 3-1: Manufacturer: syz [ 127.547348][ T4471] usb 3-1: SerialNumber: syz [ 127.595668][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.661166][ T25] audit: type=1326 audit(1791837541.138:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 127.722705][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.752988][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.832195][ T4471] usb 3-1: Limiting number of CPorts to U8_MAX [ 127.861068][ T25] audit: type=1326 audit(1791837541.148:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 127.947306][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.027346][ T25] audit: type=1326 audit(1791837541.148:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 128.090029][ C0] net_ratelimit: 39 callbacks suppressed [ 128.242431][ T25] audit: type=1326 audit(1791837541.148:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 128.271091][ T5623] device hsr_slave_0 entered promiscuous mode [ 128.339813][ T5623] device hsr_slave_1 entered promiscuous mode [ 128.489566][ T5623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.529282][ T5623] Cannot create hsr debugfs directory [ 128.536390][ T25] audit: type=1326 audit(1791837541.158:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1252a51d9 code=0x7ffc0000 [ 128.720068][ C0] usb 3-1: short message received [ 128.972318][ T7] usb 3-1: USB disconnect, device number 4 [ 128.980076][ C0] usb 3-1: failed to resubmit arpc in-urb: -19 [ 128.986299][ C0] usb 3-1: failed to resubmit arpc in-urb: -19 [ 128.992493][ C0] usb 3-1: failed to resubmit in-urb: -19 [ 128.998253][ C0] usb 3-1: failed to resubmit in-urb: -19 [ 129.004021][ C0] usb 3-1: failed to resubmit in-urb: -19 [ 129.009789][ C0] usb 3-1: failed to resubmit in-urb: -19 [ 129.034714][ T5693] chnl_net:caif_netlink_parms(): no params data found [ 129.053248][ T7] usb 3-1: failed to send ARPC request 4: -19 [ 129.088581][ T7] usb 3-1: failed to execute ARPC: -19 [ 129.121836][ T7] usb 3-1: failed to flush cport 0: -19 [ 129.162482][ T7] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 129.203843][ T7] usb 3-1: failed to send ARPC request 2: -19 [ 129.371479][ T7] usb 3-1: failed to execute ARPC: -19 [ 129.376957][ T7] usb 3-1: failed to quiesce cport 0: -19 (0) [ 129.457190][ T7] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 129.489113][ T5715] FAULT_INJECTION: forcing a failure. [ 129.489113][ T5715] name failslab, interval 1, probability 0, space 0, times 0 [ 129.517331][ T5623] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.546739][ T7] usb 3-1: failed to send ARPC request 3: -19 [ 129.587596][ T7] usb 3-1: failed to execute ARPC: -19 [ 129.595982][ T5715] CPU: 0 PID: 5715 Comm: syz.1.361 Not tainted syzkaller #0 [ 129.603264][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.613296][ T5715] Call Trace: [ 129.616557][ T5715] [ 129.619493][ T5715] dump_stack_lvl+0x188/0x250 [ 129.624154][ T5715] ? show_regs_print_info+0x20/0x20 [ 129.629330][ T5715] ? load_image+0x410/0x410 [ 129.633812][ T5715] ? __might_sleep+0xf0/0xf0 [ 129.638377][ T5715] ? __lock_acquire+0x7d40/0x7d40 [ 129.643379][ T5715] should_fail+0x383/0x4b0 [ 129.647774][ T5715] should_failslab+0x5/0x20 [ 129.652254][ T5715] slab_pre_alloc_hook+0x51/0xc0 [ 129.657169][ T5715] kmem_cache_alloc_trace+0x47/0x290 [ 129.662437][ T5715] ? kvm_dev_ioctl+0x68e/0x20a0 [ 129.667267][ T5715] kvm_dev_ioctl+0x68e/0x20a0 [ 129.671932][ T5715] ? hardware_enable_nolock+0x130/0x130 [ 129.677473][ T5715] ? bpf_lsm_file_ioctl+0x5/0x10 [ 129.682394][ T5715] ? security_file_ioctl+0x7c/0xa0 [ 129.687480][ T5715] ? hardware_enable_nolock+0x130/0x130 [ 129.693005][ T5715] __se_sys_ioctl+0xfa/0x170 [ 129.697578][ T5715] do_syscall_64+0x4c/0xa0 [ 129.701985][ T5715] ? clear_bhb_loop+0x30/0x80 [ 129.706651][ T5715] ? clear_bhb_loop+0x30/0x80 [ 129.711306][ T5715] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.717175][ T5715] RIP: 0033:0x7ff1252a51d9 [ 129.721573][ T5715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.741156][ T5715] RSP: 002b:00007ff1234fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.749544][ T5715] RAX: ffffffffffffffda RBX: 00007ff12552cfa0 RCX: 00007ff1252a51d9 [ 129.757491][ T5715] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 129.765436][ T5715] RBP: 00007ff12533c888 R08: 0000000000000000 R09: 0000000000000000 [ 129.773381][ T5715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.781326][ T5715] R13: 00007ff12552d038 R14: 00007ff12552cfa0 R15: 00007ffd241a77d8 [ 129.789292][ T5715] [ 129.825775][ T7] usb 3-1: failed to clear cport 0: -19 [ 129.856512][ T7] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 129.985694][ T4471] Bluetooth: hci1: command 0x0409 tx timeout [ 130.033495][ T4474] Bluetooth: hci4: command 0x040f tx timeout [ 130.119126][ T5623] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.231129][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.238169][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.298112][ T5693] device bridge_slave_0 entered promiscuous mode [ 130.347880][ T5623] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.385493][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.415504][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.460872][ T5693] device bridge_slave_1 entered promiscuous mode [ 130.487685][ T5623] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.629450][ T5693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.689486][ T5727] device syzkaller0 entered promiscuous mode [ 130.760626][ T5693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.916861][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.976524][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.005641][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.063481][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.099143][ T5693] team0: Port device team_slave_0 added [ 131.201780][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.248158][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.302289][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.309380][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.003824][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.063972][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.090163][ T4465] Bluetooth: hci4: command 0x0419 tx timeout [ 132.120144][ T4465] Bluetooth: hci1: command 0x041b tx timeout [ 132.130005][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.137043][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.190893][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.230851][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.264966][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.310738][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.357951][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.384227][ T5733] loop1: detected capacity change from 0 to 32768 [ 132.392143][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.430398][ T5733] XFS: ikeep mount option is deprecated. [ 132.436029][ T5733] XFS: ikeep mount option is deprecated. [ 132.455164][ T5693] team0: Port device team_slave_1 added [ 132.504744][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.525623][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.538358][ T5733] XFS (loop1): Mounting V5 Filesystem [ 132.564703][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.575301][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.583434][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.624683][ T5733] XFS (loop1): Ending clean mount [ 132.641585][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.656292][ T5733] XFS (loop1): Quotacheck needed: Please wait. [ 132.673221][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.723896][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.736597][ T5733] XFS (loop1): Quotacheck: Done. [ 132.814382][ T5755] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.866009][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.889459][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.905961][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.937708][ T5733] XFS (loop1): Unmounting Filesystem [ 133.038694][ T5693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.102447][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.109400][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.290028][ C0] net_ratelimit: 41 callbacks suppressed [ 133.361245][ T5693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.406257][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 133.595739][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.625017][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.766169][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.988184][ T5777] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5777] [ 134.017613][ T5693] device hsr_slave_0 entered promiscuous mode [ 134.055389][ T5693] device hsr_slave_1 entered promiscuous mode [ 134.075090][ T5693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.098578][ T5693] Cannot create hsr debugfs directory [ 134.170223][ T4472] Bluetooth: hci1: command 0x040f tx timeout [ 134.720421][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.765313][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.833633][ T5623] device veth0_vlan entered promiscuous mode [ 134.877620][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.924190][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.976592][ T5623] device veth1_vlan entered promiscuous mode [ 135.013363][ T5805] fuse: Bad value for 'fd' [ 135.034818][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.071771][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.126619][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.598527][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.634603][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.685057][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.734526][ T5623] device veth0_macvtap entered promiscuous mode [ 135.772454][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.858628][ T5623] device veth1_macvtap entered promiscuous mode [ 135.929501][ T5693] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 136.040708][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.178006][ T5827] loop2: detected capacity change from 0 to 2048 [ 136.185242][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.058564][ T4472] Bluetooth: hci1: command 0x0419 tx timeout [ 137.111585][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.176475][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.323273][ T5827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.334471][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.306617][ C0] net_ratelimit: 32 callbacks suppressed [ 138.349638][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.374248][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.399645][ T5693] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.438371][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.455028][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.466329][ T5839] netlink: 52 bytes leftover after parsing attributes in process `syz.4.393'. [ 138.479537][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.496204][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.506347][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.520784][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.535314][ T5623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.555838][ T5623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.573776][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.582886][ T5827] netlink: 'syz.2.389': attribute type 16 has an invalid length. [ 138.595209][ T5827] netlink: 'syz.2.389': attribute type 17 has an invalid length. [ 138.604467][ T5827] netlink: 'syz.2.389': attribute type 27 has an invalid length. [ 138.615146][ T5693] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.632776][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.658073][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.749658][ T5623] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.801330][ T5623] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.841061][ T5623] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.877913][ T5623] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.913786][ T5693] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 140.666715][ T5693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.719290][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.749213][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.786971][ T5693] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.826904][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.862859][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.897943][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.905021][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.957269][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.975422][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.996242][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.018590][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.025674][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.082190][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.183748][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.214783][ T5873] md: could not open device unknown-block(0,0). [ 141.348684][ T5693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.586957][ T5873] md: error, md_import_device() returned -6 [ 141.603131][ T5693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.665476][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.708597][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.755499][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.819790][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.859271][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.940595][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.977096][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.998507][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.162525][ T4213] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.292864][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.336044][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.428226][ T4213] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.599390][ T4213] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.727024][ T9] wlan1: Trigger new scan to find an IBSS to join [ 142.751966][ T9] ------------[ cut here ]------------ [ 143.009192][ T5923] loop2: detected capacity change from 0 to 8 [ 143.020736][ T9] WARNING: CPU: 0 PID: 9 at net/mac80211/scan.c:1219 ieee80211_request_ibss_scan+0xc76/0xda0 [ 143.056173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.076850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.094699][ T9] Modules linked in: [ 143.129607][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 143.149226][ T4213] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.165306][ T5923] attempt to access beyond end of device [ 143.165306][ T5923] loop2: rw=2048, want=36028797018963976, limit=8 [ 143.192904][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.236045][ T5693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.254057][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 143.302348][ T9] RIP: 0010:ieee80211_request_ibss_scan+0xc76/0xda0 [ 143.349137][ T5923] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 143.368230][ T9] Code: 48 8b 7c 24 58 e8 5a c5 ff ff 89 c3 4c 89 f7 e8 b0 4d 81 00 89 d8 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1a ec 2f f8 <0f> 0b bb f0 ff ff ff 4c 8b 74 24 30 eb d4 44 89 f1 80 e1 07 80 c1 [ 143.388042][ C0] net_ratelimit: 77 callbacks suppressed [ 143.530899][ T5923] unable to read xattr id index table [ 143.609654][ T9] RSP: 0018:ffffc90000ce79a8 EFLAGS: 00010293 [ 143.692351][ T9] RAX: ffffffff89493746 RBX: 0000000000000000 RCX: ffff88813fed0000 [ 143.783926][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.826812][ T5923] loop2: detected capacity change from 0 to 1024 [ 143.865348][ T9] RBP: dffffc0000000000 R08: ffffc90000ce7787 R09: 1ffff9200019cef0 [ 143.908886][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 143.945453][ T9] R10: dffffc0000000000 R11: fffff5200019cef1 R12: ffff88802bdd8e00 [ 143.959040][ T4474] Bluetooth: hci4: command 0x0409 tx timeout [ 144.020329][ T5923] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 144.039587][ T9] R13: ffff88802bddaa80 R14: 0000000000000c80 R15: ffff88802bdd8e40 [ 144.105537][ T9] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 144.163740][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.194016][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.225913][ T9] CR2: 00007f9717d5fa10 CR3: 000000007d836000 CR4: 00000000003506f0 [ 144.237813][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.258326][ T5923] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 144.284767][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.349438][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.382946][ T5923] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 144.396843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.422736][ T9] Call Trace: [ 144.429761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.448218][ T9] [ 144.462878][ T9] ieee80211_ibss_work+0xe13/0x10f0 [ 144.484835][ T5693] device veth0_vlan entered promiscuous mode [ 144.503950][ T9] ? _raw_spin_unlock+0x40/0x40 [ 144.538436][ T9] ? mark_lock+0x94/0x320 [ 144.556246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.578918][ T9] ? ieee80211_ibss_rx_queued_mgmt+0x2b50/0x2b50 [ 144.597645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.622721][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 144.648422][ T5693] device veth1_vlan entered promiscuous mode [ 144.658709][ T9] ? ieee80211_iface_work+0xb69/0xc50 [ 144.667187][ T5923] EXT4-fs warning (device loop2): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 144.689673][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 144.731839][ T9] cfg80211_wiphy_work+0x224/0x260 [ 144.748281][ T5693] device veth0_macvtap entered promiscuous mode [ 144.776557][ T9] process_one_work+0x867/0xff0 [ 144.793590][ T9] ? worker_detach_from_pool+0x240/0x240 [ 144.819224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.836037][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 144.847653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.857673][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 144.869804][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 144.884805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.910870][ T9] ? wq_worker_running+0x97/0x170 [ 144.918547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.928630][ T9] worker_thread+0xad7/0x12a0 [ 144.936224][ T9] kthread+0x42e/0x520 [ 144.974796][ T9] ? rcu_lock_release+0x20/0x20 [ 145.022656][ T5693] device veth1_macvtap entered promiscuous mode [ 145.037593][ T9] ? kthread_blkcg+0xd0/0xd0 [ 145.059377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.067206][ T9] ret_from_fork+0x1f/0x30 [ 145.084661][ T9] [ 145.089170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.106595][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.113871][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 145.121133][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.131169][ T9] Workqueue: events_unbound cfg80211_wiphy_work [ 145.137397][ T9] Call Trace: [ 145.140662][ T9] [ 145.143576][ T9] dump_stack_lvl+0x188/0x250 [ 145.148236][ T9] ? show_regs_print_info+0x20/0x20 [ 145.153415][ T9] ? load_image+0x410/0x410 [ 145.157913][ T9] panic+0x2f8/0x850 [ 145.161785][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 145.166269][ T9] ? ret_from_fork+0x1f/0x30 [ 145.170836][ T9] ? ieee80211_request_ibss_scan+0xc76/0xda0 [ 145.176792][ T9] __warn+0x248/0x2b0 [ 145.180756][ T9] ? ieee80211_request_ibss_scan+0xc76/0xda0 [ 145.186713][ T9] report_bug+0x1b9/0x2e0 [ 145.191038][ T9] handle_bug+0x3a/0x70 [ 145.195170][ T9] exc_invalid_op+0x16/0x40 [ 145.199650][ T9] asm_exc_invalid_op+0x16/0x20 [ 145.204480][ T9] RIP: 0010:ieee80211_request_ibss_scan+0xc76/0xda0 [ 145.211048][ T9] Code: 48 8b 7c 24 58 e8 5a c5 ff ff 89 c3 4c 89 f7 e8 b0 4d 81 00 89 d8 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1a ec 2f f8 <0f> 0b bb f0 ff ff ff 4c 8b 74 24 30 eb d4 44 89 f1 80 e1 07 80 c1 [ 145.230629][ T9] RSP: 0018:ffffc90000ce79a8 EFLAGS: 00010293 [ 145.236677][ T9] RAX: ffffffff89493746 RBX: 0000000000000000 RCX: ffff88813fed0000 [ 145.244628][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.252578][ T9] RBP: dffffc0000000000 R08: ffffc90000ce7787 R09: 1ffff9200019cef0 [ 145.260526][ T9] R10: dffffc0000000000 R11: fffff5200019cef1 R12: ffff88802bdd8e00 [ 145.268477][ T9] R13: ffff88802bddaa80 R14: 0000000000000c80 R15: ffff88802bdd8e40 [ 145.276436][ T9] ? ieee80211_request_ibss_scan+0xc76/0xda0 [ 145.283547][ T9] ? ieee80211_request_ibss_scan+0xc76/0xda0 [ 145.289507][ T9] ieee80211_ibss_work+0xe13/0x10f0 [ 145.294691][ T9] ? _raw_spin_unlock+0x40/0x40 [ 145.299519][ T9] ? mark_lock+0x94/0x320 [ 145.303827][ T9] ? ieee80211_ibss_rx_queued_mgmt+0x2b50/0x2b50 [ 145.310132][ T9] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.316096][ T9] ? ieee80211_iface_work+0xb69/0xc50 [ 145.321450][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 145.326628][ T9] cfg80211_wiphy_work+0x224/0x260 [ 145.331720][ T9] process_one_work+0x867/0xff0 [ 145.336556][ T9] ? worker_detach_from_pool+0x240/0x240 [ 145.342168][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 145.347463][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 145.352467][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 145.357990][ T9] ? wq_worker_running+0x97/0x170 [ 145.362991][ T9] worker_thread+0xad7/0x12a0 [ 145.367681][ T9] kthread+0x42e/0x520 [ 145.371729][ T9] ? rcu_lock_release+0x20/0x20 [ 145.376553][ T9] ? kthread_blkcg+0xd0/0xd0 [ 145.381118][ T9] ret_from_fork+0x1f/0x30 [ 145.385538][ T9] [ 145.388596][ T9] Kernel Offset: disabled [ 145.393362][ T9] Rebooting in 86400 seconds..