last executing test programs: 3m46.609468495s ago: executing program 0 (id=540): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180)=r3, 0x17e) 3m45.961181899s ago: executing program 0 (id=546): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 3m45.046445111s ago: executing program 0 (id=550): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x100000000000f7) read$watch_queue(r1, &(0x7f00000000c0)=""/16, 0x10) keyctl$revoke(0x3, r0) 3m44.362648365s ago: executing program 0 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) 3m42.072594764s ago: executing program 0 (id=561): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40011}], 0x1}}], 0x1, 0x24008094) 3m38.713089549s ago: executing program 0 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x625, 0x4c1, 0xc1, 0x0, 0x0) 3m36.467500346s ago: executing program 32 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x625, 0x4c1, 0xc1, 0x0, 0x0) 2m48.195547899s ago: executing program 1 (id=723): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 2m46.971691883s ago: executing program 1 (id=729): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) 2m45.485472591s ago: executing program 1 (id=736): r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x7437, 0x80}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) close_range(r0, 0xffffffffffffffff, 0x0) 2m44.344423627s ago: executing program 1 (id=740): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@resuid}, {@test_dummy_encryption}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x0, 0xbd0, &(0x7f0000000b00)="$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") socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001900), 0x0) gettid() quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000003b80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000005c00)) 2m41.967393308s ago: executing program 1 (id=746): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000080)='./file3\x00', 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1, 0x9e, &(0x7f0000000140)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=") r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x34]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) 2m39.442960332s ago: executing program 1 (id=754): r0 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 2m36.890113685s ago: executing program 33 (id=754): r0 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 1m4.380427281s ago: executing program 4 (id=1029): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x16) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 1m3.43240442s ago: executing program 4 (id=1034): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r1], 0x0) 1m2.684530907s ago: executing program 4 (id=1037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x6282, &(0x7f000000f900)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nodiscard}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$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") read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 1m1.263994953s ago: executing program 4 (id=1042): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000300)={[{@barrier}, {@noblock_validity}, {@abort}, {@inlinecrypt}, {@errors_remount}, {@quota}]}, 0x3, 0x443, &(0x7f0000000440)="$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") mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000342000/0x2000)=nil) creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 57.976842575s ago: executing program 4 (id=1057): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r2, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e) 56.592051551s ago: executing program 4 (id=1062): unshare(0x6020400) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 54.455007937s ago: executing program 34 (id=1062): unshare(0x6020400) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 19.3132967s ago: executing program 2 (id=1137): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) 18.510614103s ago: executing program 2 (id=1141): open(0x0, 0x0, 0x0) unshare(0x26020400) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) unlink(&(0x7f0000000140)='./file1\x00') pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a8", 0x1}], 0x1, 0xe7c, 0x0, 0x2) 16.844786522s ago: executing program 2 (id=1145): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x3b3e, 0x4) 12.098492443s ago: executing program 2 (id=1153): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) 11.335538762s ago: executing program 2 (id=1157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000319000000192263c445269b6cddddb3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x3, 0xffffffff, 0x2, 0x400, 0x8, 0x81}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0}) 10.423512466s ago: executing program 2 (id=1161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 7.834342243s ago: executing program 35 (id=1161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 7.761115727s ago: executing program 6 (id=1165): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./file2\x00', 0x1800410, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0x43, 0x240, &(0x7f0000000740)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x8000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file2\x00', 0x2) 6.793892908s ago: executing program 6 (id=1168): r0 = userfaultfd(0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x111}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000fee000/0x12000)=nil, 0x12000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x67d}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fee000/0x10000)=nil, 0x10000}) 6.249773023s ago: executing program 3 (id=1171): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$binfmt_misc(r0, &(0x7f0000000dc0), 0x386) 5.962817677s ago: executing program 6 (id=1172): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 5.527347368s ago: executing program 5 (id=1173): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$KVM_CAP_SYNC_REGS(0xffffffffffffffff, 0x4068aea3, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e0c010320"], 0xf) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file0\x00', 0x1014552, &(0x7f0000000100)=ANY=[], 0x0, 0x121f, &(0x7f0000002280)="$eJzs3E1rXFUYB/An6Uva1LyotdqCeNCNboYmCze6MEgK0gGlbYRWEG7NjQ5znRnmDoERMXXl1s8hggjuBHGnm2z8BoK7bFxWEK/MjJ10ZAQj0inN77e5D5z7h3Pm3rM4hzn34NXPP2zulLWdrBfzc3Mx34lId1OkmI977sRLr/zw47PXb966ulGvb15L6crGjbWXU0rLz333zsdfPv9979zb3yx/uxD7q+8e/Lr+y/6F/YsHf9z4oFGmRpla7V7K0u12u5fdLvK03SibtZTeKvKszFOjVebdifadot3p9FPW2l5a7HTzskxZq5+aeT/12qnX7afs/azRSrVaLS0tBkd3clxtfXG3qqqIqjoVp6OqqupsLMa5eCyWYjlWYjUejyfiyTgfT70W8XQ8E1///FV/kAAAAAAAAAAAAAAAAAAAAAD+P//6/H9cGJ7/vzi8a9a9BgAAAAAAAAAAAAAAAAAAgEfL9Zu3rm7U65vXUjoTUXy2u7W7NbqO2jd2ohFF5HE5VuL3GJ7+HxnVV96ob15OQ6vxabE3yO9FxO7Wicn82vBzAlPza6N8upePGFwXYvH+/HqsxPnp+fWp+TPx4gv35WuxEj+9F+0oYjsG2cP8J2spvf5m/W/5S8P7AAAA4FFQS2Ork+vfEzFebe9Nax/lp+8PnJq2PzCxvh5kL52c8eCJsv9RMyuKvHtsi/hPqbMR8aC7enq2P9RvVVU9BM9rNsU/z5SFwzdh6civxFxEDIq/ZuOdh2Ck43nBMXD40GfdEwAAAAAAAAAAAI7iQfydcNZjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2YFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwEAAP//UE/SpQ==") setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) 5.266289969s ago: executing program 7 (id=1174): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x40, r2, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x40}}, 0x20) 4.965130433s ago: executing program 3 (id=1175): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 4.700965362s ago: executing program 7 (id=1176): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101040, 0x10c) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) 4.100231841s ago: executing program 5 (id=1177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r0, &(0x7f00000002c0)="abc7", 0x2, 0x4000805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x1, 0x22, 0x0) 3.953013274s ago: executing program 7 (id=1178): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r0, 0x0, 0x0, 0x80800) 3.627481501s ago: executing program 3 (id=1179): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 3.253039636s ago: executing program 5 (id=1180): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x7, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x18}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) 3.252848796s ago: executing program 7 (id=1181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000004c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 2.954425371s ago: executing program 6 (id=1182): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "00000300"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000740)=""/78, 0x4e}], 0x2}, 0xf3}], 0x1, 0x10023, 0x0) 2.512850535s ago: executing program 5 (id=1183): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x9, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00000000481100fe880000000000000000000000000101fe8000000000000000000000000000aa4e1d4e20"], 0x0) 2.435189691s ago: executing program 3 (id=1184): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001c4824b0d28f75930095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.352637691s ago: executing program 6 (id=1185): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$eJzs3U1sXEfhAPDZtdexk/Qfp/+EmjS0CYW2fNRpHBM+IkiqREhETYW4VKq4RGlaIkKQKBJQVcLJiRutqiBx4kOceqkKQqIXFPXEpRKNVCH1VDhwIAqiEgcIJIu8nlnvTnbzdh3vvrX395OeZ+fNezszz2/f97wJwNiqNv4uLs5VQrj85qsn/vbwX2eWxxxtTjHb+DvZEquFECoxPpl93/sTK+HND1460ymshIXG3+X4luURT11vzrsthLAU9oUrYTbsuXz1lbcXnjx18eSl/e+8duTagKoPAABj5atXjizu/vMf79954/UHjoUtzfHpeH02xrfH4/5j8cA/Hf9XQ3u80jK0msqmm4xDdaZ9uokO0zXymew83WSX/Key/GtdptsS7pz/RMu4TvWGjSytx7OhUp1vi1er8/Mr5+ShcV4/VZm/cO78cy+UVFBg3f3zwRDCvpbh+KX2+CCHtLHpZ56jgyhLZWW/PuD61oe1XDfbcGx4ed2oryi9zkMa6jvK3f4AJPn9wtss5VcW7k7z2yZ7y//6E9XO88M6GPb633P+1XhRraz8kzHP/1cXbXFYP5t1bUr1Sr+j7TGe9t7pGab8+aXuv7/8Tkf72Px+RK3Hcna7j7BR7i90K+fEkMuxVt3Kn68Xm9UXY5iWw5ey9NbfT/4/3Sj/Y6Czf+XX/zfyMB0rVUbeEyNQ/4EM+0agDIa2oX0dr93Nd9VL3PYAoy1/bq6e7o9G+XN9efqWgvTpgvSZgvStBenbCtJhnP3muz8OL1dWz/Pzc/p+r4en62z3xPD/+ixPfj2y3/zz5377dbf5588Twyj73emnz37u2Weurjz/X2mu/7fi+p5ON2bjb+tKnCBdL8yvqzef/Z9tz6faZbp7s/Lc02H6xudd7dNVdq1+T2jZztxWjrn2+XZ0m25v+3Sz2XQzcZjOypsfn2zN5kvHH2m7mpbXZFbfWlaPqawcabuyM4Z5OWAt0vrY7fn/tH7OhVrluXPnzz6e7WP/MFHbsjz+4JDLDdy9Xtv/zIX29j/bm+Nr1bRdCC3717S9OBjeiN/XPn6hmU/7+EMxnvZz35iYaYyfP/Pt88+uf/VhrL3wgxe/efr8+bPf8WHNH748GsXo50M6bRmV8vTwIZ0BlVaMaih/IQzxQ4kbJWAoDvxw5SDgsXPfOv382efPXjh0+PChhYXDnz+0eKBxXH+g9ei+1VIJpQXW0+pOP0/ZXk6BAAAAAAAAAAAAgELfO3ni6rtvffa9lfb/q+3/Uvv/9ORvav//o6z9f95OPrWDT+0Ad3ZIb0yTvWB1KpuuFof/z8q7K8tndzbfh2LY7Mcvtv9P2eXvdU3luS8bX8ujMcPsdQK3vS9lKmsfnfcX+NEYXorhLwOUqDLTeXQMi95vndb11Dqr5b0U9YlxeYnyJpD+b2ltWHmPyWpPrh3f69Tyz945pHKyvgbTeHDqji0LgNHw99F7//fS4L77H6sVL7+ehq7D5HDz+2ljjaiO43pRr3frxaPXHmwA1kfZ/X+m654pvPD7r0wvD2my60+0by/z95dCP/70bnt81PufHHT+eb99w86/7PoPu//PZv93PW//sh7zsvc891q6f//s2nst2YY9veaf1z+9B3pXjxlHN2L+qTaPhN7yr/8iyz+/IdSj/2T5b+0x/9vqv3dt+f835p8W26MPFeSfLgxfXClxpdpejpmsHun+X37dOLmZ1T+92/MO9f/ai53qv8Z7DLdi/jDONko/s/3KjiOaB+2tzxeEvvr/jZbWt//fZmGzzVr+HMZnYjztCNJzDnl/J/2WPz1fkfYDu7PvrxTs3/T/u7F9IYZFv4fU/29aH2fjLr8l3liWKV7rsGw367YGNqr3R+/+37gP0yNQBkPvQ31iDfM1+4krufz1en2wF7QKlJo5pS//ss8Tys6/7OVfJO//Nz+Gb55/7uucnvf/m6fn/f/m6TPxP9QtPe//N1+eef+/efp92ffm/QPPFaR/uCB9T+f05mK7v2D+vQXpHylI399MP9o2RUp/oGD+BwvS7y1If6gg/WMF6R8vSH+4IP3RlvTWPqBT+icK5t/sUnuUTvXXpx9sbnn7vHHb/sE4S/d/uv3+dxWkAxvXT14/ePyZX399dqX9/1Tzeki6j3csxmvx/On7MZ7f9w4t8eW0t2L8L1n6qF/vgHGSvz8j378/UpAObFzpOS+/bxhDlenOo2NY9N6qbsf5bCyfjOGnYvjpGD4Ww/kYHohhuje0MKTyMRjH3/jtkZcrq+f7O7L0Xp8nz9sDtb0nKoRwqMfy5NcH+n2ePX+PX7/uNv81NgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoTbXxd3FxrhLC5TdfPfH0qXMHlsccbU4x2/g72RKrNecL4fEYTsTw5/HDzQ9eOtMa3ophJSyESqg0x4enrjdz2hZCWAr7wpUwG/ZcvvrK2wtPnrp48tL+d147cm1wSwAAAAA2v/8FAAD//zjgCFM=") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) creat(&(0x7f0000000080)='./bus\x00', 0x2) 2.286748194s ago: executing program 5 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@uqnoenforce}]}, 0x1, 0x990f, &(0x7f0000013080)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x35) 1.334337565s ago: executing program 7 (id=1187): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020001010007000000000000d96e6c8d5e85080045f00d88724e11d569116e3a1ce41e2a560254ea0043"], 0x34}], 0x1}, 0x80) 1.166833664s ago: executing program 3 (id=1188): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000680)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x4, 0x8, 0x5, {0xac7c, 0x1, 0x8, 0x8, 0x9, 0x3, 0x1, 0x7, 0x8, 0xe154, 0x1000, 0x7f, 0x67, 0x5, "fe1d00003413000000000020b42717e47f00000794c0e800"}}) 421.140857ms ago: executing program 5 (id=1189): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="9089", 0x2}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x8801}}], 0x1, 0x20044034) 420.905247ms ago: executing program 3 (id=1190): fchmodat(0xffffffffffffff9c, 0x0, 0xffffff70) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) 264.144497ms ago: executing program 7 (id=1191): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 0s ago: executing program 6 (id=1192): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) kernel console output (not intermixed with test programs): __dump_stack+0x26/0x30 [ 435.476215][ C0] dump_stack_lvl+0x14c/0x1c0 [ 435.476364][ C0] dump_stack+0x1e/0x25 [ 435.476498][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 435.476671][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 435.476805][ C0] f2fs_write_end_io+0x1013/0x2470 [ 435.476994][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 435.477128][ C0] bio_endio+0xf92/0x10e0 [ 435.477273][ C0] blk_update_request+0xf4c/0x1a90 [ 435.477441][ C0] blk_mq_end_request+0x50/0xb0 [ 435.477573][ C0] lo_complete_rq+0x188/0x3a0 [ 435.477705][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 435.477832][ C0] blk_done_softirq+0x112/0x1f0 [ 435.477999][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 435.478160][ C0] handle_softirqs+0x168/0x6f0 [ 435.478333][ C0] __irq_exit_rcu+0x65/0x170 [ 435.478475][ C0] irq_exit_rcu+0x12/0x20 [ 435.478615][ C0] sysvec_call_function_single+0x81/0x90 [ 435.478785][ C0] [ 435.478827][ C0] [ 435.478877][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 435.479016][ C0] RIP: 0010:virt_to_page_or_null+0xd7/0x170 [ 435.479173][ C0] Code: ff 05 05 f5 b5 12 48 85 c9 74 09 4c 8b 01 41 f6 c0 02 75 5b 65 ff 0d f0 f4 b5 12 0f 84 8a 00 00 00 31 f6 65 ff 0d e1 f4 b5 12 <85> f6 5d 0f 84 4c ff ff ff 48 81 ff 00 00 00 80 72 09 48 8b 0d b0 [ 435.479281][ C0] RSP: 0018:ffff88805496b2b0 EFLAGS: 00000286 [ 435.479386][ C0] RAX: ffff888199c0ff20 RBX: ffff888119c0ff20 RCX: ffff88813fffacf0 [ 435.479486][ C0] RDX: 0000000119c0ff20 RSI: 0000000000000001 RDI: ffff888119c0ff20 [ 435.479576][ C0] RBP: ffff88805496b2b0 R08: ffffea000000000f R09: 0000000000000002 [ 435.479669][ C0] R10: 0000000000000406 R11: 0000000000000000 R12: 0000000000000000 [ 435.479744][ C0] R13: ffff8880531747a0 R14: 0000000000000000 R15: 0000000008100073 [ 435.479861][ C0] kmsan_get_metadata+0xf1/0x160 [ 435.479998][ C0] kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 435.480143][ C0] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 435.480280][ C0] handle_mm_fault+0x7f9/0x6e90 [ 435.480457][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 435.480603][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.480767][ C0] ? mt_find+0x5e1/0x830 [ 435.480915][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 435.481060][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 435.481198][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.481352][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 435.481503][ C0] do_user_addr_fault+0xfd1/0x2520 [ 435.481704][ C0] exc_page_fault+0x70/0xb0 [ 435.481862][ C0] asm_exc_page_fault+0x2b/0x30 [ 435.481984][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 435.482135][ C0] Code: 70 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 435.482244][ C0] RSP: 0018:ffff88805496b760 EFLAGS: 00050206 [ 435.482347][ C0] RAX: 00000000ffffffff RBX: ffff88805496b768 RCX: 0000000000001000 [ 435.482432][ C0] RDX: 000000002b7eb000 RSI: ffff88802b7eb000 RDI: 00007f8b99027000 [ 435.482519][ C0] RBP: ffff88805496b8c8 R08: 0000000000001000 R09: 0000000000000006 [ 435.482607][ C0] R10: 0000000000000005 R11: 0000000000000000 R12: ffff88805496bd18 [ 435.482686][ C0] R13: 0000000000001000 R14: ffff88802b7eb000 R15: 0000000000000000 [ 435.482798][ C0] ? _copy_to_iter+0xf23/0x3400 [ 435.482934][ C0] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 435.483085][ C0] ? filemap_get_pages+0x398d/0x3cd0 [ 435.483278][ C0] copy_page_to_iter+0x482/0x900 [ 435.483419][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 435.483591][ C0] filemap_read+0x1cd6/0x2300 [ 435.483846][ C0] blkdev_read_iter+0x89f/0xb00 [ 435.484043][ C0] vfs_read+0x8ec/0xf90 [ 435.484231][ C0] ? __pfx_blkdev_read_iter+0x10/0x10 [ 435.484415][ C0] ksys_read+0x1d9/0x470 [ 435.484544][ C0] __x64_sys_read+0x97/0xf0 [ 435.484671][ C0] x64_sys_call+0x311c/0x3ea0 [ 435.484835][ C0] do_syscall_64+0x134/0xf80 [ 435.484996][ C0] ? clear_bhb_loop+0x50/0xa0 [ 435.485145][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.485277][ C0] RIP: 0033:0x7f8b988a7407 [ 435.485366][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 435.485482][ C0] RSP: 002b:00007ffe6df098b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 435.485608][ C0] RAX: ffffffffffffffda RBX: 00007f8b99067880 RCX: 00007f8b988a7407 [ 435.485698][ C0] RDX: 0000000000040000 RSI: 00007f8b98ffe000 RDI: 0000000000000009 [ 435.485775][ C0] RBP: 000055ad7d887090 R08: 0000000000000000 R09: 0000000000000000 [ 435.485853][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 435.485930][ C0] R13: 0000000000000000 R14: 000055ad7d8846e8 R15: 00007f8b9918e39c [ 435.486046][ C0] [ 435.984062][ C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 435.991217][ C0] CPU: 0 UID: 0 PID: 6036 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 435.991385][ C0] Tainted: [L]=SOFTLOCKUP [ 435.991436][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 435.991514][ C0] Call Trace: [ 435.991571][ C0] [ 435.991620][ C0] __dump_stack+0x26/0x30 [ 435.991778][ C0] dump_stack_lvl+0x14c/0x1c0 [ 435.991941][ C0] dump_stack+0x1e/0x25 [ 435.992084][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 435.992262][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 435.992408][ C0] f2fs_write_end_io+0x1013/0x2470 [ 435.992619][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 435.992766][ C0] bio_endio+0xf92/0x10e0 [ 435.992921][ C0] blk_update_request+0xf4c/0x1a90 [ 435.993106][ C0] blk_mq_end_request+0x50/0xb0 [ 435.993245][ C0] lo_complete_rq+0x188/0x3a0 [ 435.993380][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 435.993511][ C0] blk_done_softirq+0x112/0x1f0 [ 435.993700][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 435.993876][ C0] handle_softirqs+0x168/0x6f0 [ 435.994062][ C0] __irq_exit_rcu+0x65/0x170 [ 435.994211][ C0] irq_exit_rcu+0x12/0x20 [ 435.994370][ C0] sysvec_call_function_single+0x81/0x90 [ 435.994550][ C0] [ 435.994600][ C0] [ 435.994647][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 435.994800][ C0] RIP: 0010:virt_to_page_or_null+0xd7/0x170 [ 435.994969][ C0] Code: ff 05 05 f5 b5 12 48 85 c9 74 09 4c 8b 01 41 f6 c0 02 75 5b 65 ff 0d f0 f4 b5 12 0f 84 8a 00 00 00 31 f6 65 ff 0d e1 f4 b5 12 <85> f6 5d 0f 84 4c ff ff ff 48 81 ff 00 00 00 80 72 09 48 8b 0d b0 [ 435.995086][ C0] RSP: 0018:ffff88805496b2b0 EFLAGS: 00000286 [ 435.995199][ C0] RAX: ffff888199c0ff20 RBX: ffff888119c0ff20 RCX: ffff88813fffacf0 [ 435.995305][ C0] RDX: 0000000119c0ff20 RSI: 0000000000000001 RDI: ffff888119c0ff20 [ 435.995396][ C0] RBP: ffff88805496b2b0 R08: ffffea000000000f R09: 0000000000000002 [ 435.995490][ C0] R10: 0000000000000406 R11: 0000000000000000 R12: 0000000000000000 [ 435.995579][ C0] R13: ffff8880531747a0 R14: 0000000000000000 R15: 0000000008100073 [ 435.995708][ C0] kmsan_get_metadata+0xf1/0x160 [ 435.995857][ C0] kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 435.996016][ C0] __msan_metadata_ptr_for_load_8+0x24/0x40 [ 435.996161][ C0] handle_mm_fault+0x7f9/0x6e90 [ 435.996358][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 435.996504][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.996674][ C0] ? mt_find+0x5e1/0x830 [ 435.996814][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 435.996969][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 435.997119][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 435.997284][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 435.997447][ C0] do_user_addr_fault+0xfd1/0x2520 [ 435.997666][ C0] exc_page_fault+0x70/0xb0 [ 435.997840][ C0] asm_exc_page_fault+0x2b/0x30 [ 435.997969][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 435.998131][ C0] Code: 70 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 435.998248][ C0] RSP: 0018:ffff88805496b760 EFLAGS: 00050206 [ 435.998358][ C0] RAX: 00000000ffffffff RBX: ffff88805496b768 RCX: 0000000000001000 [ 435.998450][ C0] RDX: 000000002b7eb000 RSI: ffff88802b7eb000 RDI: 00007f8b99027000 [ 435.998546][ C0] RBP: ffff88805496b8c8 R08: 0000000000001000 R09: 0000000000000006 [ 435.998640][ C0] R10: 0000000000000005 R11: 0000000000000000 R12: ffff88805496bd18 [ 435.998728][ C0] R13: 0000000000001000 R14: ffff88802b7eb000 R15: 0000000000000000 [ 435.998851][ C0] ? _copy_to_iter+0xf23/0x3400 [ 435.999002][ C0] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 435.999168][ C0] ? filemap_get_pages+0x398d/0x3cd0 [ 435.999365][ C0] copy_page_to_iter+0x482/0x900 [ 435.999521][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 435.999708][ C0] filemap_read+0x1cd6/0x2300 [ 435.999979][ C0] blkdev_read_iter+0x89f/0xb00 [ 436.000189][ C0] vfs_read+0x8ec/0xf90 [ 436.000382][ C0] ? __pfx_blkdev_read_iter+0x10/0x10 [ 436.000661][ C0] ksys_read+0x1d9/0x470 [ 436.000814][ C0] __x64_sys_read+0x97/0xf0 [ 436.000951][ C0] x64_sys_call+0x311c/0x3ea0 [ 436.001124][ C0] do_syscall_64+0x134/0xf80 [ 436.001295][ C0] ? clear_bhb_loop+0x50/0xa0 [ 436.001443][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.001611][ C0] RIP: 0033:0x7f8b988a7407 [ 436.001712][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 436.001833][ C0] RSP: 002b:00007ffe6df098b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 436.001958][ C0] RAX: ffffffffffffffda RBX: 00007f8b99067880 RCX: 00007f8b988a7407 [ 436.002057][ C0] RDX: 0000000000040000 RSI: 00007f8b98ffe000 RDI: 0000000000000009 [ 436.002146][ C0] RBP: 000055ad7d887090 R08: 0000000000000000 R09: 0000000000000000 [ 436.002232][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 436.002313][ C0] R13: 0000000000000000 R14: 000055ad7d8846e8 R15: 00007f8b9918e39c [ 436.002443][ C0] [ 436.072454][ T795] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 436.072870][ C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 436.232124][ T795] usb 5-1: Using ep0 maxpacket: 8 [ 436.511232][ T5773] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint [ 436.806384][ T8417] gre1: entered promiscuous mode [ 436.817117][ T8417] gre1: entered allmulticast mode [ 436.952557][ T795] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 437.013152][ T49] Bluetooth: hci2: command tx timeout [ 437.042830][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 437.052066][ T795] usb 5-1: Product: syz [ 437.056411][ T795] usb 5-1: Manufacturer: syz [ 437.061554][ T795] usb 5-1: SerialNumber: syz [ 437.077685][ T795] usb 5-1: config 0 descriptor?? [ 437.110206][ T795] gspca_main: sq905-2.14.0 probing 2770:9120 [ 438.179379][ T795] gspca_sq905: bulk read fail (-22) len 0/4 [ 438.212066][ T795] sq905 5-1:0.0: probe with driver sq905 failed with error -5 [ 438.491512][ T795] usb 5-1: USB disconnect, device number 10 [ 438.814750][ T8442] loop3: detected capacity change from 0 to 32768 [ 438.828662][ T8442] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.781 (8442) [ 438.847654][ T8442] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 438.861755][ T8442] BTRFS info (device loop3): using crc32c checksum algorithm [ 439.066725][ T8442] BTRFS info (device loop3): setting nodatasum [ 439.073630][ T8442] BTRFS info (device loop3): enabling ssd optimizations [ 439.080886][ T8442] BTRFS info (device loop3): turning on async discard [ 439.087820][ T8442] BTRFS info (device loop3): enabling free space tree [ 439.090908][ T49] Bluetooth: hci2: command tx timeout [ 439.094991][ T8442] BTRFS info (device loop3): enabling auto defrag [ 439.106804][ T8442] BTRFS info (device loop3): max_inline set to 0 [ 439.193593][ T29] audit: type=1800 audit(1770788649.539:59): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.781" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 439.310496][ T8462] loop5: detected capacity change from 0 to 64 [ 439.573781][ T5783] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 439.823299][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 439.910359][ T7769] hfs: node 4:3 still has 1 user(s)! [ 440.101200][ T8398] chnl_net:caif_netlink_parms(): no params data found [ 440.327978][ T8472] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.416744][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.424464][ T8475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.368338][ T8491] loop5: detected capacity change from 0 to 1024 [ 441.502407][ T8491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.925673][ T8486] loop2: detected capacity change from 0 to 40427 [ 441.940164][ T8486] F2FS-fs (loop2): build fault injection rate: 690 [ 442.033712][ T8486] F2FS-fs (loop2): invalid crc value [ 442.329816][ T8486] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 442.361041][ T8486] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 442.406628][ T7769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.585621][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.593469][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.601309][ T8398] bridge_slave_0: entered allmulticast mode [ 442.623634][ T8398] bridge_slave_0: entered promiscuous mode [ 442.721820][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.729314][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.794233][ T8398] bridge_slave_1: entered allmulticast mode [ 442.867087][ T5773] syz-executor: attempt to access beyond end of device [ 442.867087][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 442.921688][ T5773] CPU: 0 UID: 0 PID: 5773 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 442.921725][ T8398] bridge_slave_1: entered promiscuous mode [ 442.921857][ T5773] Tainted: [L]=SOFTLOCKUP [ 442.921899][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 442.921974][ T5773] Call Trace: [ 442.922019][ T5773] [ 442.922065][ T5773] __dump_stack+0x26/0x30 [ 442.922219][ T5773] dump_stack_lvl+0x14c/0x1c0 [ 442.922370][ T5773] dump_stack+0x1e/0x25 [ 442.922507][ T5773] f2fs_handle_critical_error+0xa6f/0xc20 [ 442.922680][ T5773] f2fs_stop_checkpoint+0x65/0x80 [ 442.922817][ T5773] f2fs_write_end_io+0x1013/0x2470 [ 442.923021][ T5773] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 442.923161][ T5773] bio_endio+0xf92/0x10e0 [ 442.923311][ T5773] submit_bio_noacct+0x533/0x28d0 [ 442.923511][ T5773] submit_bio+0x57a/0x620 [ 442.923662][ T5773] f2fs_submit_write_bio+0x115/0x2d0 [ 442.923854][ T5773] __submit_merged_bio+0x16f/0x6a0 [ 442.924036][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 442.924192][ T5773] __submit_merged_write_cond+0x44a/0x990 [ 442.924396][ T5773] f2fs_write_data_pages+0x4d18/0x57a0 [ 442.924666][ T5773] ? rb_update_pages+0x18a0/0x1930 [ 442.924805][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 442.924970][ T5773] ? free_unref_folios+0x2910/0x2970 [ 442.925137][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 442.925307][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 442.925450][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 442.925599][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 442.925742][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 442.925890][ T5773] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 442.926030][ T5773] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 442.926172][ T5773] do_writepages+0x3f2/0x860 [ 442.926343][ T5773] ? _raw_spin_unlock+0x30/0x50 [ 442.926490][ T5773] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 442.926682][ T5773] filemap_fdatawrite+0x207/0x260 [ 442.926941][ T5773] f2fs_sync_dirty_inodes+0x2aa/0x9d0 [ 442.927124][ T5773] f2fs_write_checkpoint+0x10a3/0x3720 [ 442.927363][ T5773] ? stack_depot_save_flags+0x35/0x790 [ 442.927559][ T5773] kill_f2fs_super+0x320/0x990 [ 442.927749][ T5773] ? __pfx_kill_f2fs_super+0x10/0x10 [ 442.927907][ T5773] deactivate_locked_super+0xcb/0x3c0 [ 442.928088][ T5773] deactivate_super+0x12f/0x140 [ 442.928254][ T5773] cleanup_mnt+0x7eb/0x870 [ 442.928420][ T5773] ? __pfx___cleanup_mnt+0x10/0x10 [ 442.928578][ T5773] __cleanup_mnt+0x22/0x30 [ 442.928728][ T5773] task_work_run+0x208/0x2b0 [ 442.928904][ T5773] exit_to_user_mode_loop+0x306/0x1b60 [ 442.929070][ T5773] ? user_path_at+0x1fc/0x330 [ 442.929247][ T5773] ? __x64_sys_umount+0x1dc/0x250 [ 442.929393][ T5773] do_syscall_64+0x24d/0xf80 [ 442.929561][ T5773] ? clear_bhb_loop+0x50/0xa0 [ 442.929699][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.929837][ T5773] RIP: 0033:0x7f943f19d1d7 [ 442.929940][ T5773] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 442.930053][ T5773] RSP: 002b:00007ffedb723908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 442.930177][ T5773] RAX: 0000000000000000 RBX: 00007f943f231c3b RCX: 00007f943f19d1d7 [ 442.930266][ T5773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedb7239c0 [ 442.930348][ T5773] RBP: 00007ffedb7239c0 R08: 00007ffedb7249c0 R09: 00000000ffffffff [ 442.930440][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedb724a50 [ 442.930524][ T5773] R13: 00007f943f231c3b R14: 000000000006c05c R15: 00007ffedb724a90 [ 442.930649][ T5773] [ 442.965728][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 443.028500][ T8507] loop4: detected capacity change from 0 to 1024 [ 443.315002][ T8508] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 443.343439][ T8507] EXT4-fs: Ignoring removed nobh option [ 443.402187][ T8507] EXT4-fs: Ignoring removed bh option [ 443.559567][ T8507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.899198][ T8519] loop5: detected capacity change from 0 to 256 [ 443.923956][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.972447][ T8507] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 444.026472][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.142760][ T8519] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 444.407172][ T8398] team0: Port device team_slave_0 added [ 444.492395][ T8398] team0: Port device team_slave_1 added [ 444.513931][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.841483][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.848596][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.981093][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.061119][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.091483][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.227506][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.293030][ T795] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 445.481041][ T795] usb 6-1: Using ep0 maxpacket: 8 [ 445.530854][ T795] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 445.570763][ T795] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.632605][ T795] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.661110][ T795] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 445.702744][ T795] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 445.737697][ T795] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.789434][ T795] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 445.790642][ T8398] hsr_slave_0: entered promiscuous mode [ 445.799166][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.853596][ T8398] hsr_slave_1: entered promiscuous mode [ 446.064133][ T795] usb 6-1: GET_CAPABILITIES returned 0 [ 446.070992][ T795] usbtmc 6-1:16.0: can't read capabilities [ 446.731936][ T8538] loop3: detected capacity change from 0 to 512 [ 446.871499][ T8538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.965638][ T8538] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 447.121984][ T795] usb 6-1: USB disconnect, device number 2 [ 447.231268][ T8538] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 447.341319][ T8398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 447.444272][ T8398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 447.568092][ T8545] loop2: detected capacity change from 0 to 2048 [ 447.679008][ T8398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 447.765302][ T8398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 447.831815][ T8545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.043995][ T8545] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.794: bg 0: block 234: padding at end of block bitmap is not set [ 448.117155][ T8545] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 152 with error 28 [ 448.214777][ T8545] EXT4-fs (loop2): This should not happen!! Data will be lost [ 448.214777][ T8545] [ 448.262755][ T8545] EXT4-fs (loop2): Total free blocks count 0 [ 448.268950][ T8545] EXT4-fs (loop2): Free/Dirty block details [ 448.328376][ T8545] EXT4-fs (loop2): free_blocks=0 [ 448.351174][ T8545] EXT4-fs (loop2): dirty_blocks=160 [ 448.381799][ T8545] EXT4-fs (loop2): Block reservation details [ 448.419802][ T8545] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 448.723391][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.865272][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.386546][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.892656][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.031976][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.039721][ T7174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.158042][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.165604][ T7155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.937277][ T8584] loop3: detected capacity change from 0 to 32768 [ 450.946854][ T8584] btrfs: Deprecated parameter 'usebackuproot' [ 450.953347][ T8584] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 450.994581][ T8584] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.811 (8584) [ 451.033879][ T8584] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 451.044381][ T8584] BTRFS info (device loop3): using sha256 checksum algorithm [ 451.442278][ T8584] BTRFS info (device loop3): rebuilding free space tree [ 451.508704][ T8584] BTRFS info (device loop3): disabling free space tree [ 451.518720][ T8584] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 451.528742][ T8584] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 451.556365][ T8584] BTRFS info (device loop3): turning on async discard [ 451.563554][ T8584] BTRFS info (device loop3): force clearing of disk cache [ 451.571112][ T8584] BTRFS info (device loop3): trying to use backup root at mount time [ 451.579443][ T8584] BTRFS info (device loop3): force lzo compression, level 1 [ 451.632763][ T5912] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 451.691682][ T5912] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 452.115187][ T8610] loop4: detected capacity change from 0 to 2048 [ 452.242932][ T5783] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 452.337488][ T8610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.651106][ T5912] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 452.908226][ T8611] fido_id[8611]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 452.960892][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 452.981041][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.000994][ T5912] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 453.010281][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.042986][ T5912] usb 3-1: config 0 descriptor?? [ 453.156355][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.403196][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.649319][ T5912] hid-rmi 0003:1532:011D.000E: item fetching failed at offset 0/2 [ 453.734747][ T5912] hid-rmi 0003:1532:011D.000E: parse failed [ 453.771221][ T5912] hid-rmi 0003:1532:011D.000E: probe with driver hid-rmi failed with error -22 [ 453.851785][ T5912] usb 3-1: USB disconnect, device number 11 [ 454.136733][ T8641] bridge_slave_0: invalid flags given to default FDB implementation [ 454.757779][ T8651] loop5: detected capacity change from 0 to 7 [ 454.831395][ T8651] Dev loop5: unable to read RDB block 7 [ 454.887296][ T8651] loop5: unable to read partition table [ 454.928221][ T8651] loop5: partition table beyond EOD, truncated [ 454.966465][ T8651] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.309807][ T8660] loop5: detected capacity change from 0 to 256 [ 455.442676][ T8660] exfat: Deprecated parameter 'utf8' [ 455.448190][ T8660] exfat: Deprecated parameter 'utf8' [ 455.539365][ T8660] exfat: Deprecated parameter 'utf8' [ 455.728447][ T8660] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 456.623920][ T8398] veth0_vlan: entered promiscuous mode [ 456.818101][ T8398] veth1_vlan: entered promiscuous mode [ 457.343910][ T8398] veth0_macvtap: entered promiscuous mode [ 457.399521][ T8398] veth1_macvtap: entered promiscuous mode [ 457.708242][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.841853][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.897393][ T8695] loop2: detected capacity change from 0 to 64 [ 458.037534][ T7153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.079239][ T7153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.203478][ T7153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.242079][ T7153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.481623][ T8706] loop4: detected capacity change from 0 to 32768 [ 459.739384][ T8706] JBD2: Ignoring recovery information on journal [ 459.771389][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.842'. [ 459.817462][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.842'. [ 459.867735][ T8706] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 460.429661][ T5782] ocfs2: Unmounting device (7,4) on (node local) [ 461.485111][ T8728] loop4: detected capacity change from 0 to 4096 [ 461.552785][ T8736] loop2: detected capacity change from 0 to 512 [ 461.629889][ T8736] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 461.756938][ T8736] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 461.845323][ T8736] EXT4-fs (loop2): 1 truncate cleaned up [ 461.868722][ T8736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.056358][ T8744] loop3: detected capacity change from 0 to 512 [ 462.205965][ T8744] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 462.345875][ T8744] EXT4-fs (loop3): 1 truncate cleaned up [ 462.403082][ T8744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.602646][ T8744] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.848: invalid indirect mapped block 4294901760 (level 0) [ 462.646336][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.045602][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.820029][ T8754] loop2: detected capacity change from 0 to 32768 [ 465.634103][ T8783] input: syz0 as /devices/virtual/input/input10 [ 466.469593][ T8794] mkiss: ax0: crc mode is auto. [ 466.525200][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 466.536648][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.536811][ T49] Tainted: [L]=SOFTLOCKUP [ 466.536863][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 466.536963][ T49] Workqueue: hci4 hci_rx_work [ 466.537116][ T49] Call Trace: [ 466.537171][ T49] [ 466.537221][ T49] __dump_stack+0x26/0x30 [ 466.537368][ T49] dump_stack_lvl+0x14c/0x1c0 [ 466.537527][ T49] dump_stack+0x1e/0x25 [ 466.537661][ T49] sysfs_create_dir_ns+0x46c/0x540 [ 466.537859][ T49] kobject_add_internal+0x1084/0x19b0 [ 466.538046][ T49] kobject_add+0x2c1/0x410 [ 466.538219][ T49] ? kmsan_get_metadata+0xf1/0x160 [ 466.538389][ T49] device_add+0xa70/0x1c00 [ 466.538587][ T49] hci_conn_add_sysfs+0x159/0x2e0 [ 466.538739][ T49] le_conn_complete_evt+0x1d0a/0x2250 [ 466.538951][ T49] hci_le_conn_complete_evt+0x157/0x260 [ 466.539144][ T49] hci_le_meta_evt+0x6eb/0x960 [ 466.539314][ T49] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 466.539506][ T49] hci_event_packet+0xce2/0x1e40 [ 466.539658][ T49] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 466.539861][ T49] hci_rx_work+0x8c3/0xfc0 [ 466.540021][ T49] ? kmsan_get_metadata+0xf1/0x160 [ 466.540178][ T49] ? __pfx_hci_rx_work+0x10/0x10 [ 466.540333][ T49] process_scheduled_works+0xae7/0x1d60 [ 466.540588][ T49] worker_thread+0x1741/0x1de0 [ 466.540764][ T49] kthread+0x53f/0x600 [ 466.540914][ T49] ? __pfx_worker_thread+0x10/0x10 [ 466.541056][ T49] ? __pfx_kthread+0x10/0x10 [ 466.541197][ T49] ret_from_fork+0x20f/0x910 [ 466.541328][ T49] ? __switch_to+0x521/0x750 [ 466.541487][ T49] ? __pfx_kthread+0x10/0x10 [ 466.541635][ T49] ret_from_fork_asm+0x1a/0x30 [ 466.541833][ T49] [ 466.723276][ T49] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 466.738843][ T49] Bluetooth: hci4: failed to register connection device [ 466.832778][ T8799] loop5: detected capacity change from 0 to 512 [ 466.843571][ T8799] EXT4-fs: Ignoring removed oldalloc option [ 467.037599][ T8799] EXT4-fs (loop5): 1 truncate cleaned up [ 467.121139][ T8799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.389950][ T8799] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 467.506079][ T7163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.555713][ T7163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.705768][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 467.772356][ T8812] netlink: 'syz.3.866': attribute type 5 has an invalid length. [ 467.838687][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 467.959926][ T7769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.032374][ T8812] geneve2: entered promiscuous mode [ 468.051407][ T8812] geneve2: entered allmulticast mode [ 468.142785][ T7155] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 8192 - 0 [ 468.165770][ T7138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.185647][ T7155] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 8192 - 0 [ 468.215558][ T7138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.282448][ T7155] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 8192 - 0 [ 468.317111][ T7155] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 8192 - 0 [ 469.114871][ T8831] loop2: detected capacity change from 0 to 512 [ 469.152047][ T7155] Bluetooth: hci5: Frame reassembly failed (-84) [ 469.283792][ T8831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.421490][ T8831] ext4 filesystem being mounted at /183/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.586874][ T29] audit: type=1800 audit(1770788679.929:60): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.872" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 469.692055][ T29] audit: type=1800 audit(1770788679.959:61): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.872" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 470.165407][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.205653][ T8848] netlink: 'syz.3.877': attribute type 12 has an invalid length. [ 470.246203][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.277174][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.310962][ T8848] netlink: 'syz.3.877': attribute type 29 has an invalid length. [ 470.318859][ T8848] netlink: 148 bytes leftover after parsing attributes in process `syz.3.877'. [ 470.391190][ T8848] netlink: 'syz.3.877': attribute type 2 has an invalid length. [ 470.452833][ T8848] netlink: 'syz.3.877': attribute type 3 has an invalid length. [ 470.541136][ T8848] netlink: 15 bytes leftover after parsing attributes in process `syz.3.877'. [ 471.170918][ T5077] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 471.414113][ T8856] loop6: detected capacity change from 0 to 32768 [ 471.423820][ T8856] btrfs: Deprecated parameter 'usebackuproot' [ 471.430115][ T8856] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 471.452275][ T8856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.879 (8856) [ 471.471762][ T8856] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 471.486748][ T8856] BTRFS info (device loop6): using crc32c checksum algorithm [ 471.792656][ T5912] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 471.974291][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 472.030934][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.136422][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.240295][ T5912] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.50 [ 472.316389][ T7165] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 472.361907][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 472.370273][ T5912] usb 4-1: Product: syz [ 472.376077][ T8864] loop2: detected capacity change from 0 to 32768 [ 472.489262][ T8856] BTRFS error (device loop6): failed to load root extent [ 472.496738][ T8856] BTRFS warning (device loop6): try to load backup roots slot 1 [ 472.513807][ T7174] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 472.616629][ T8864] JBD2: Ignoring recovery information on journal [ 472.635113][ T5912] usb 4-1: config 0 descriptor?? [ 472.695974][ T8856] BTRFS warning (device loop6): couldn't read tree root [ 472.703641][ T8856] BTRFS warning (device loop6): try to load backup roots slot 2 [ 472.756112][ T5912] hub 4-1:0.0: USB hub found [ 472.778098][ T7155] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 472.827256][ T8864] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 472.837741][ T8856] BTRFS warning (device loop6): couldn't read tree root [ 472.845410][ T8856] BTRFS warning (device loop6): try to load backup roots slot 3 [ 473.094682][ T5912] hub 4-1:0.0: 1 port detected [ 473.102796][ T8856] BTRFS info (device loop6): rebuilding free space tree [ 473.159441][ T8856] BTRFS info (device loop6): checking UUID tree [ 473.178983][ T8856] BTRFS info (device loop6): enabling ssd optimizations [ 473.186515][ T8856] BTRFS info (device loop6): turning on sync discard [ 473.194005][ T8856] BTRFS info (device loop6): enabling free space tree [ 473.201304][ T8856] BTRFS info (device loop6): force clearing of disk cache [ 473.208714][ T8856] BTRFS info (device loop6): enabling auto defrag [ 473.215599][ T8856] BTRFS info (device loop6): trying to use backup root at mount time [ 473.229197][ T8856] BTRFS info (device loop6): use zstd compression, level 3 [ 473.647321][ T8398] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 473.770956][ T5912] hub 4-1:0.0: activate --> -90 [ 473.878134][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 474.233738][ T5825] usb 4-1: USB disconnect, device number 9 [ 474.240218][ T5912] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 474.294774][ T5912] usb 4-1-port1: connect-debounce failed [ 475.740085][ T8913] loop4: detected capacity change from 0 to 40427 [ 475.821365][ T8913] F2FS-fs (loop4): invalid crc value [ 476.155827][ T8913] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 476.166537][ T8913] F2FS-fs (loop4): Start checkpoint disabled! [ 476.177516][ T8913] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 476.212102][ T8913] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 476.736667][ T7163] kworker/u8:23: attempt to access beyond end of device [ 476.736667][ T7163] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 476.851477][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: kworker/u8:23 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.851647][ T7163] Tainted: [L]=SOFTLOCKUP [ 476.851718][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 476.851820][ T7163] Workqueue: writeback wb_workfn (flush-7:4) [ 476.852013][ T7163] Call Trace: [ 476.852060][ T7163] [ 476.852111][ T7163] __dump_stack+0x26/0x30 [ 476.852259][ T7163] dump_stack_lvl+0x14c/0x1c0 [ 476.852417][ T7163] dump_stack+0x1e/0x25 [ 476.852556][ T7163] f2fs_handle_critical_error+0xa6f/0xc20 [ 476.852739][ T7163] f2fs_stop_checkpoint+0x65/0x80 [ 476.852884][ T7163] f2fs_write_end_io+0x1013/0x2470 [ 476.853084][ T7163] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 476.853230][ T7163] bio_endio+0xf92/0x10e0 [ 476.853386][ T7163] submit_bio_noacct+0x533/0x28d0 [ 476.853586][ T7163] submit_bio+0x57a/0x620 [ 476.853746][ T7163] f2fs_submit_write_bio+0x115/0x2d0 [ 476.853928][ T7163] __submit_merged_bio+0x16f/0x6a0 [ 476.854104][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 476.854257][ T7163] __submit_merged_write_cond+0x44a/0x990 [ 476.854452][ T7163] f2fs_write_data_pages+0x4d18/0x57a0 [ 476.854740][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 476.854878][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 476.855036][ T7163] ? __update_load_avg_cfs_rq+0xd77/0x1000 [ 476.855221][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 476.855364][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 476.855514][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 476.855658][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 476.855815][ T7163] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 476.855958][ T7163] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 476.856102][ T7163] do_writepages+0x3f2/0x860 [ 476.856260][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 476.856418][ T7163] ? queue_io+0x781/0x790 [ 476.856589][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 476.856762][ T7163] __writeback_single_inode+0x101/0x1030 [ 476.856904][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 476.857050][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 476.857213][ T7163] writeback_sb_inodes+0xb2d/0x1f10 [ 476.857491][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 476.857676][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 476.857835][ T7163] wb_writeback+0x4d0/0xc00 [ 476.858031][ T7163] ? queue_io+0x481/0x790 [ 476.858220][ T7163] wb_workfn+0x397/0x1900 [ 476.858378][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 476.858549][ T7163] ? __pfx_wb_workfn+0x10/0x10 [ 476.858715][ T7163] process_scheduled_works+0xae7/0x1d60 [ 476.858967][ T7163] worker_thread+0x1741/0x1de0 [ 476.859151][ T7163] kthread+0x53f/0x600 [ 476.859301][ T7163] ? __pfx_worker_thread+0x10/0x10 [ 476.859441][ T7163] ? __pfx_kthread+0x10/0x10 [ 476.859584][ T7163] ret_from_fork+0x20f/0x910 [ 476.859725][ T7163] ? __switch_to+0x521/0x750 [ 476.859888][ T7163] ? __pfx_kthread+0x10/0x10 [ 476.860036][ T7163] ret_from_fork_asm+0x1a/0x30 [ 476.860237][ T7163] [ 477.205242][ T7163] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 477.631211][ T8934] loop3: detected capacity change from 0 to 64 [ 477.831402][ T5825] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 478.052203][ T5825] usb 7-1: Using ep0 maxpacket: 32 [ 478.087392][ T5825] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 478.133109][ T5825] usb 7-1: config 0 has no interface number 0 [ 478.167243][ T5825] usb 7-1: config 0 interface 184 has no altsetting 0 [ 478.225521][ T5825] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 478.290784][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.336962][ T5825] usb 7-1: Product: syz [ 478.383683][ T5825] usb 7-1: Manufacturer: syz [ 478.388486][ T5825] usb 7-1: SerialNumber: syz [ 478.455454][ T5825] usb 7-1: config 0 descriptor?? [ 478.505905][ T5825] smsc75xx v1.0.0 [ 478.624252][ T8939] loop5: detected capacity change from 0 to 4096 [ 478.766793][ T5825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 478.822974][ T5825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 478.848602][ T8947] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 478.897683][ T29] audit: type=1800 audit(1770788689.239:62): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.899" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 478.918602][ T5825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 478.972966][ T5825] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 479.028555][ T29] audit: type=1800 audit(1770788689.369:63): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.899" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 479.103175][ T5825] usb 7-1: USB disconnect, device number 2 [ 480.021053][ T795] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 480.804622][ T8961] loop5: detected capacity change from 0 to 32768 [ 480.886698][ T795] usb 7-1: Using ep0 maxpacket: 32 [ 480.924039][ T795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.941259][ T795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.955022][ T795] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 480.965520][ T795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.980084][ T795] usb 7-1: config 0 descriptor?? [ 480.988086][ T8961] JBD2: Ignoring recovery information on journal [ 481.048507][ T795] hub 7-1:0.0: USB hub found [ 481.142489][ T8961] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 481.296949][ T795] hub 7-1:0.0: 1 port detected [ 481.458741][ T7769] ocfs2: Unmounting device (7,5) on (node local) [ 481.941558][ T795] hub 7-1:0.0: activate --> -90 [ 482.093189][ T8976] binder: 8975:8976 ioctl c0306201 2000000003c0 returned -14 [ 482.369281][ T795] usb 7-1-port1: config error [ 482.373930][ T5825] usb 7-1: USB disconnect, device number 3 [ 484.647168][ T9011] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 485.265741][ T9023] loop4: detected capacity change from 0 to 16 [ 485.317673][ T9023] erofs (device loop4): invalid ishare xattr prefix id 0 [ 485.523867][ T9027] xt_hashlimit: max too large, truncated to 1048576 [ 486.264739][ T5912] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 486.470852][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 486.552418][ T5912] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 486.585396][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.629101][ T5912] usb 7-1: Product: syz [ 486.641416][ T5912] usb 7-1: Manufacturer: syz [ 486.646202][ T5912] usb 7-1: SerialNumber: syz [ 486.722069][ T5912] usb 7-1: config 0 descriptor?? [ 487.075023][ T5912] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 487.348381][ T5912] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 487.472346][ T5912] usb 7-1: USB disconnect, device number 4 [ 488.490967][ T9050] loop3: detected capacity change from 0 to 65536 [ 488.590686][ T9050] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 488.920394][ T9050] XFS (loop3): Ending clean mount [ 488.929539][ T9050] XFS (loop3): Quotacheck needed: Please wait. [ 488.968640][ T9050] XFS (loop3): Quotacheck: Done. [ 489.120448][ T9077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.149339][ T9077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.156644][ T9077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.163949][ T9077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.171209][ T9077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.178392][ T9077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.185699][ T9077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.192953][ T9077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.200137][ T9077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.207446][ T9077] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 489.530948][ T5825] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 489.747504][ T5825] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 489.799159][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.864291][ T5825] usb 6-1: config 0 descriptor?? [ 489.876015][ T9083] loop2: detected capacity change from 0 to 1024 [ 490.003114][ T9083] EXT4-fs: Ignoring removed orlov option [ 490.229209][ T5783] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 490.446345][ T5825] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 490.449076][ T9083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.720179][ T5825] [drm:udl_init] *ERROR* Selecting channel failed [ 490.725572][ T9091] loop4: detected capacity change from 0 to 512 [ 490.857186][ T5825] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 490.892300][ T5825] [drm] Initialized udl on minor 2 [ 490.904846][ T5825] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 490.979301][ T9091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.005514][ T5825] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 491.013483][ T5834] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 491.101789][ T9091] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.773378][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.789115][ T5834] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 491.797799][ T9098] loop3: detected capacity change from 0 to 32768 [ 491.813227][ T5825] usb 6-1: USB disconnect, device number 3 [ 491.821503][ T5834] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 491.842584][ T9098] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.941 (9098) [ 491.888376][ T9098] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 491.900869][ T9098] BTRFS info (device loop3): using blake2b checksum algorithm [ 492.153246][ T9098] BTRFS info (device loop3): enabling ssd optimizations [ 492.160408][ T9098] BTRFS info (device loop3): turning on async discard [ 492.169807][ T9098] BTRFS info (device loop3): enabling free space tree [ 492.176920][ T9098] BTRFS info (device loop3): use zstd compression, level 3 [ 492.340870][ T9099] INFO: The task syz.4.942:9099 has been waiting for writeback completion for more than 1 seconds. [ 492.340996][ T9099] INFO: The task syz.4.942:9099 has been waiting for writeback completion for more than 1 seconds. [ 493.072177][ T9119] loop5: detected capacity change from 0 to 32768 [ 493.106580][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 493.212018][ T5783] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 493.620032][ T9121] loop2: detected capacity change from 0 to 40427 [ 493.629598][ T9121] F2FS-fs: heap/no_heap options were deprecated [ 493.637199][ T9121] F2FS-fs: heap/no_heap options were deprecated [ 493.674972][ T9119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.946 (9119) [ 493.694026][ T9121] F2FS-fs (loop2): Image doesn't support compression [ 493.712689][ T9121] F2FS-fs (loop2): invalid crc value [ 493.725402][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.746058][ T9119] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 493.756678][ T9119] BTRFS info (device loop5): using sha256 checksum algorithm [ 494.128115][ T9121] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 494.168929][ T9121] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 494.285065][ T9119] BTRFS info (device loop5): enabling ssd optimizations [ 494.292483][ T9119] BTRFS info (device loop5): turning on async discard [ 494.299428][ T9119] BTRFS info (device loop5): enabling free space tree [ 494.464863][ T9119] BTRFS info (device loop5): balance: start -s [ 494.481054][ T9119] BTRFS info (device loop5): relocating block group 1048576 flags system [ 494.663679][ T9119] BTRFS info (device loop5): balance: ended with status: 0 [ 494.966648][ T5773] syz-executor: attempt to access beyond end of device [ 494.966648][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 495.053467][ T5773] CPU: 1 UID: 0 PID: 5773 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 495.053535][ T5825] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 495.053633][ T5773] Tainted: [L]=SOFTLOCKUP [ 495.053680][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 495.053751][ T5773] Call Trace: [ 495.053800][ T5773] [ 495.053848][ T5773] __dump_stack+0x26/0x30 [ 495.054002][ T5773] dump_stack_lvl+0x14c/0x1c0 [ 495.054157][ T5773] dump_stack+0x1e/0x25 [ 495.054299][ T5773] f2fs_handle_critical_error+0xa6f/0xc20 [ 495.054474][ T5773] f2fs_stop_checkpoint+0x65/0x80 [ 495.054615][ T5773] f2fs_write_end_io+0x1013/0x2470 [ 495.054812][ T5773] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 495.054952][ T5773] bio_endio+0xf92/0x10e0 [ 495.055103][ T5773] submit_bio_noacct+0x533/0x28d0 [ 495.055331][ T5773] submit_bio+0x57a/0x620 [ 495.055480][ T5773] f2fs_submit_write_bio+0x115/0x2d0 [ 495.055668][ T5773] __submit_merged_bio+0x16f/0x6a0 [ 495.055851][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.056016][ T5773] f2fs_submit_page_write+0x1f62/0x3c40 [ 495.056296][ T5773] do_write_page+0xc92/0x13a0 [ 495.056436][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 495.056613][ T5773] f2fs_outplace_write_data+0x19b/0x250 [ 495.056786][ T5773] f2fs_do_write_data_page+0x262d/0x2ae0 [ 495.056924][ T5773] ? cpu_rmap_update+0xc00/0xd20 [ 495.057091][ T5773] f2fs_write_single_data_page+0x1644/0x2900 [ 495.057233][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 495.057404][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.057607][ T5773] f2fs_write_data_pages+0x3447/0x57a0 [ 495.057887][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 495.058032][ T5773] ? folio_batch_move_lru+0x6a2/0x6d0 [ 495.058183][ T5773] ? __msan_warning+0x1b/0x30 [ 495.058308][ T5773] ? filter_irq_stacks+0x13f/0x190 [ 495.058469][ T5773] ? stack_depot_save_flags+0x35/0x790 [ 495.058642][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 495.058790][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.058940][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 495.059084][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.059233][ T5773] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 495.059380][ T5773] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 495.059517][ T5773] do_writepages+0x3f2/0x860 [ 495.059684][ T5773] ? _raw_spin_unlock+0x30/0x50 [ 495.059833][ T5773] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 495.060031][ T5773] filemap_fdatawrite+0x207/0x260 [ 495.060290][ T5773] f2fs_sync_dirty_inodes+0x2aa/0x9d0 [ 495.060473][ T5773] f2fs_write_checkpoint+0x10a3/0x3720 [ 495.060715][ T5773] ? stack_depot_save_flags+0x35/0x790 [ 495.060912][ T5773] kill_f2fs_super+0x320/0x990 [ 495.061106][ T5773] ? __pfx_kill_f2fs_super+0x10/0x10 [ 495.061287][ T5773] deactivate_locked_super+0xcb/0x3c0 [ 495.061474][ T5773] deactivate_super+0x12f/0x140 [ 495.061640][ T5773] cleanup_mnt+0x7eb/0x870 [ 495.061809][ T5773] ? __pfx___cleanup_mnt+0x10/0x10 [ 495.061967][ T5773] __cleanup_mnt+0x22/0x30 [ 495.062117][ T5773] task_work_run+0x208/0x2b0 [ 495.062291][ T5773] exit_to_user_mode_loop+0x306/0x1b60 [ 495.062457][ T5773] ? user_path_at+0x1fc/0x330 [ 495.062633][ T5773] ? __x64_sys_umount+0x1dc/0x250 [ 495.062780][ T5773] do_syscall_64+0x24d/0xf80 [ 495.062950][ T5773] ? clear_bhb_loop+0x50/0xa0 [ 495.063091][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.063229][ T5773] RIP: 0033:0x7f943f19d1d7 [ 495.063332][ T5773] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 495.063448][ T5773] RSP: 002b:00007ffedb723908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 495.063575][ T5773] RAX: 0000000000000000 RBX: 00007f943f231c3b RCX: 00007f943f19d1d7 [ 495.063664][ T5773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedb7239c0 [ 495.063746][ T5773] RBP: 00007ffedb7239c0 R08: 00007ffedb7249c0 R09: 00000000ffffffff [ 495.063840][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedb724a50 [ 495.063928][ T5773] R13: 00007f943f231c3b R14: 0000000000078b4b R15: 00007ffedb724a90 [ 495.064052][ T5773] [ 495.270980][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 495.476864][ T5825] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 495.581135][ T5773] syz-executor: attempt to access beyond end of device [ 495.581135][ T5773] loop2: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 495.652427][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.662557][ T5773] CPU: 0 UID: 0 PID: 5773 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 495.662718][ T5773] Tainted: [L]=SOFTLOCKUP [ 495.662767][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 495.662846][ T5773] Call Trace: [ 495.662892][ T5773] [ 495.662942][ T5773] __dump_stack+0x26/0x30 [ 495.663100][ T5773] dump_stack_lvl+0x14c/0x1c0 [ 495.663264][ T5773] dump_stack+0x1e/0x25 [ 495.663403][ T5773] f2fs_handle_critical_error+0xa6f/0xc20 [ 495.663573][ T5773] f2fs_stop_checkpoint+0x65/0x80 [ 495.663715][ T5773] f2fs_write_end_io+0x1013/0x2470 [ 495.663909][ T5773] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 495.664053][ T5773] bio_endio+0xf92/0x10e0 [ 495.664212][ T5773] submit_bio_noacct+0x533/0x28d0 [ 495.664418][ T5773] submit_bio+0x57a/0x620 [ 495.664574][ T5773] f2fs_submit_write_bio+0x115/0x2d0 [ 495.664763][ T5773] __submit_merged_bio+0x16f/0x6a0 [ 495.664942][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.665108][ T5773] __submit_merged_write_cond+0x44a/0x990 [ 495.665327][ T5773] f2fs_write_single_data_page+0x24a3/0x2900 [ 495.665472][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 495.665634][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.665845][ T5773] f2fs_write_data_pages+0x3447/0x57a0 [ 495.666130][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 495.666285][ T5773] ? folio_batch_move_lru+0x6a2/0x6d0 [ 495.666439][ T5773] ? __msan_warning+0x1b/0x30 [ 495.666565][ T5773] ? filter_irq_stacks+0x13f/0x190 [ 495.666729][ T5773] ? stack_depot_save_flags+0x35/0x790 [ 495.666905][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 495.667046][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.667204][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 495.667351][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.667502][ T5773] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 495.667643][ T5773] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 495.667785][ T5773] do_writepages+0x3f2/0x860 [ 495.667962][ T5773] ? _raw_spin_unlock+0x30/0x50 [ 495.668116][ T5773] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 495.668316][ T5773] filemap_fdatawrite+0x207/0x260 [ 495.668573][ T5773] f2fs_sync_dirty_inodes+0x2aa/0x9d0 [ 495.668762][ T5773] f2fs_write_checkpoint+0x10a3/0x3720 [ 495.669006][ T5773] ? stack_depot_save_flags+0x35/0x790 [ 495.669207][ T5773] kill_f2fs_super+0x320/0x990 [ 495.669398][ T5773] ? __pfx_kill_f2fs_super+0x10/0x10 [ 495.669554][ T5773] deactivate_locked_super+0xcb/0x3c0 [ 495.669749][ T5773] deactivate_super+0x12f/0x140 [ 495.669918][ T5773] cleanup_mnt+0x7eb/0x870 [ 495.670085][ T5773] ? __pfx___cleanup_mnt+0x10/0x10 [ 495.670270][ T5773] __cleanup_mnt+0x22/0x30 [ 495.670425][ T5773] task_work_run+0x208/0x2b0 [ 495.670594][ T5773] exit_to_user_mode_loop+0x306/0x1b60 [ 495.670751][ T5773] ? user_path_at+0x1fc/0x330 [ 495.670916][ T5773] ? __x64_sys_umount+0x1dc/0x250 [ 495.671066][ T5773] do_syscall_64+0x24d/0xf80 [ 495.671249][ T5773] ? clear_bhb_loop+0x50/0xa0 [ 495.671394][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.671536][ T5773] RIP: 0033:0x7f943f19d1d7 [ 495.671637][ T5773] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 495.671753][ T5773] RSP: 002b:00007ffedb723908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 495.671880][ T5773] RAX: 0000000000000000 RBX: 00007f943f231c3b RCX: 00007f943f19d1d7 [ 495.671971][ T5773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedb7239c0 [ 495.672058][ T5773] RBP: 00007ffedb7239c0 R08: 00007ffedb7249c0 R09: 00000000ffffffff [ 495.672152][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedb724a50 [ 495.672242][ T5773] R13: 00007f943f231c3b R14: 0000000000078b4b R15: 00007ffedb724a90 [ 495.672369][ T5773] [ 496.107865][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 496.216867][ T5825] usb 5-1: config 0 descriptor?? [ 496.244398][ T5825] cp210x 5-1:0.0: cp210x converter detected [ 496.502143][ T7769] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 496.646482][ T5825] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 496.707190][ T5825] usb 5-1: cp210x converter now attached to ttyUSB0 [ 496.906954][ T5825] usb 5-1: USB disconnect, device number 11 [ 496.996117][ T9142] udevd[9142]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 497.009079][ T5825] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 497.152917][ T5825] cp210x 5-1:0.0: device disconnected [ 498.336508][ T9159] loop3: detected capacity change from 0 to 2048 [ 498.581935][ T9159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.793728][ T5825] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 498.832306][ T29] audit: type=1800 audit(1770788709.169:64): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.948" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 499.101015][ T5825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.143021][ T5825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.206687][ T5825] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 499.258581][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 499.313217][ T5825] usb 6-1: SerialNumber: syz [ 499.592247][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.636270][ T5825] usb 6-1: 0:2 : does not exist [ 499.841371][ T5825] usb 6-1: USB disconnect, device number 4 [ 500.572231][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.331068][ T5077] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 501.338106][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 502.166995][ T9214] netlink: 'syz.5.970': attribute type 14 has an invalid length. [ 502.231864][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 502.301255][ T9214] netlink: 'syz.5.970': attribute type 14 has an invalid length. [ 502.350994][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.970'. [ 503.063449][ T9218] net_ratelimit: 1527 callbacks suppressed [ 503.063525][ T9218] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 503.232116][ T9216] loop3: detected capacity change from 0 to 40427 [ 503.268253][ T9216] F2FS-fs (loop3): invalid crc value [ 503.604144][ T9216] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 503.621837][ T9216] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 503.722955][ T9216] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 504.901152][ T9248] loop4: detected capacity change from 0 to 512 [ 505.130076][ T9248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.269846][ T9248] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.971179][ T5834] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 506.003608][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.160050][ T5834] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.208021][ T5834] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.320234][ T5834] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.380792][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.474240][ T5834] usb 6-1: Product: syz [ 506.478719][ T5834] usb 6-1: Manufacturer: syz [ 506.589825][ T5834] usb 6-1: SerialNumber: syz [ 506.979313][ T5834] usb 6-1: 0:2 : does not exist [ 507.168470][ T9267] loop2: detected capacity change from 0 to 40427 [ 507.205792][ T5834] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 507.239426][ T9267] F2FS-fs (loop2): build fault injection rate: 174 [ 507.246741][ T9267] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 507.260755][ T9267] F2FS-fs (loop2): invalid crc value [ 507.555360][ T5834] usb 6-1: USB disconnect, device number 5 [ 507.559077][ T9267] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 507.594287][ T9267] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 507.791147][ T5773] syz-executor: attempt to access beyond end of device [ 507.791147][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 507.849551][ T5773] CPU: 1 UID: 0 PID: 5773 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 507.849728][ T5773] Tainted: [L]=SOFTLOCKUP [ 507.849773][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 507.849848][ T5773] Call Trace: [ 507.849895][ T5773] [ 507.849942][ T5773] __dump_stack+0x26/0x30 [ 507.850100][ T5773] dump_stack_lvl+0x14c/0x1c0 [ 507.850250][ T5773] dump_stack+0x1e/0x25 [ 507.850391][ T5773] f2fs_handle_critical_error+0xa6f/0xc20 [ 507.850566][ T5773] f2fs_stop_checkpoint+0x65/0x80 [ 507.850709][ T5773] f2fs_write_end_io+0x1013/0x2470 [ 507.850904][ T5773] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 507.851033][ T5773] bio_endio+0xf92/0x10e0 [ 507.851185][ T5773] submit_bio_noacct+0x533/0x28d0 [ 507.851362][ T5773] submit_bio+0x57a/0x620 [ 507.851499][ T5773] f2fs_submit_write_bio+0x115/0x2d0 [ 507.851670][ T5773] __submit_merged_bio+0x16f/0x6a0 [ 507.851827][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 507.851967][ T5773] __submit_merged_write_cond+0x44a/0x990 [ 507.852155][ T5773] f2fs_write_data_pages+0x4d18/0x57a0 [ 507.852411][ T5773] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 507.852577][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 507.852707][ T5773] ? folio_batch_move_lru+0x6a2/0x6d0 [ 507.852843][ T5773] ? __msan_warning+0x1b/0x30 [ 507.852951][ T5773] ? filter_irq_stacks+0x13f/0x190 [ 507.853092][ T5773] ? stack_depot_save_flags+0x35/0x790 [ 507.853262][ T5773] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 507.853443][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 507.853570][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 507.853715][ T5773] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 507.853858][ T5773] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 507.854001][ T5773] do_writepages+0x3f2/0x860 [ 507.854156][ T5773] ? _raw_spin_unlock+0x30/0x50 [ 507.854304][ T5773] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 507.854511][ T5773] filemap_fdatawrite+0x207/0x260 [ 507.854777][ T5773] f2fs_sync_dirty_inodes+0x2aa/0x9d0 [ 507.854967][ T5773] f2fs_write_checkpoint+0x10a3/0x3720 [ 507.855214][ T5773] ? stack_depot_save_flags+0x35/0x790 [ 507.855422][ T5773] kill_f2fs_super+0x320/0x990 [ 507.855621][ T5773] ? __pfx_kill_f2fs_super+0x10/0x10 [ 507.855795][ T5773] deactivate_locked_super+0xcb/0x3c0 [ 507.855981][ T5773] deactivate_super+0x12f/0x140 [ 507.856161][ T5773] cleanup_mnt+0x7eb/0x870 [ 507.856329][ T5773] ? __pfx___cleanup_mnt+0x10/0x10 [ 507.856505][ T5773] __cleanup_mnt+0x22/0x30 [ 507.856660][ T5773] task_work_run+0x208/0x2b0 [ 507.856838][ T5773] exit_to_user_mode_loop+0x306/0x1b60 [ 507.857016][ T5773] ? user_path_at+0x1fc/0x330 [ 507.857200][ T5773] ? __x64_sys_umount+0x1dc/0x250 [ 507.857349][ T5773] do_syscall_64+0x24d/0xf80 [ 507.857522][ T5773] ? clear_bhb_loop+0x50/0xa0 [ 507.857688][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.857832][ T5773] RIP: 0033:0x7f943f19d1d7 [ 507.857936][ T5773] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 507.858052][ T5773] RSP: 002b:00007ffedb723908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 507.858184][ T5773] RAX: 0000000000000000 RBX: 00007f943f231c3b RCX: 00007f943f19d1d7 [ 507.858274][ T5773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedb7239c0 [ 507.858358][ T5773] RBP: 00007ffedb7239c0 R08: 00007ffedb7249c0 R09: 00000000ffffffff [ 507.858451][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffedb724a50 [ 507.858537][ T5773] R13: 00007f943f231c3b R14: 000000000007bef8 R15: 00007ffedb724a90 [ 507.858672][ T5773] [ 508.355565][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 508.379558][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.479464][ T9279] loop3: detected capacity change from 0 to 32768 [ 509.489248][ T9279] xfs: Deprecated parameter 'attr2' [ 509.496925][ T9279] XFS: attr2 mount option is deprecated. [ 509.633802][ T9279] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 510.013388][ T9279] XFS (loop3): Ending clean mount [ 510.037360][ T9279] XFS (loop3): Quotacheck needed: Please wait. [ 510.155653][ T9279] XFS (loop3): Quotacheck: Done. [ 510.971033][ T5834] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 511.054271][ T9301] loop6: detected capacity change from 0 to 40427 [ 511.102934][ T5783] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 511.147019][ T9301] F2FS-fs (loop6): invalid crc value [ 511.199542][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.232534][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.358473][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 511.446295][ T9301] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 511.457298][ T9301] F2FS-fs (loop6): Start checkpoint disabled! [ 511.481860][ T5834] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.516440][ T9301] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 511.546673][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.546788][ T9301] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 511.647574][ T5834] usb 6-1: config 0 descriptor?? [ 511.666289][ T9301] F2FS-fs (loop6): disabling checkpoint not compatible with read-only [ 512.042216][ T7163] kworker/u8:23: attempt to access beyond end of device [ 512.042216][ T7163] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 512.149513][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: kworker/u8:23 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.149682][ T7163] Tainted: [L]=SOFTLOCKUP [ 512.149732][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 512.149834][ T7163] Workqueue: writeback wb_workfn (flush-7:6) [ 512.150035][ T7163] Call Trace: [ 512.150083][ T7163] [ 512.150131][ T7163] __dump_stack+0x26/0x30 [ 512.150285][ T7163] dump_stack_lvl+0x14c/0x1c0 [ 512.150442][ T7163] dump_stack+0x1e/0x25 [ 512.150579][ T7163] f2fs_handle_critical_error+0xa6f/0xc20 [ 512.150752][ T7163] f2fs_stop_checkpoint+0x65/0x80 [ 512.150891][ T7163] f2fs_write_end_io+0x1013/0x2470 [ 512.151089][ T7163] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 512.151230][ T7163] bio_endio+0xf92/0x10e0 [ 512.151384][ T7163] submit_bio_noacct+0x533/0x28d0 [ 512.151588][ T7163] submit_bio+0x57a/0x620 [ 512.151753][ T7163] f2fs_submit_write_bio+0x115/0x2d0 [ 512.151944][ T7163] __submit_merged_bio+0x16f/0x6a0 [ 512.152140][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.152301][ T7163] __submit_merged_write_cond+0x44a/0x990 [ 512.152513][ T7163] f2fs_write_data_pages+0x4d18/0x57a0 [ 512.152741][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.152961][ T7163] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 512.153150][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 512.153304][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.153467][ T7163] ? update_load_avg+0x1539/0x2550 [ 512.153632][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 512.153777][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.153929][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 512.154081][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.154228][ T7163] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 512.154370][ T7163] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 512.154513][ T7163] do_writepages+0x3f2/0x860 [ 512.154674][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.154834][ T7163] ? queue_io+0x781/0x790 [ 512.155007][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 512.155185][ T7163] __writeback_single_inode+0x101/0x1030 [ 512.155327][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 512.155462][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.155624][ T7163] writeback_sb_inodes+0xb2d/0x1f10 [ 512.155905][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.156097][ T7163] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.156254][ T7163] wb_writeback+0x4d0/0xc00 [ 512.156453][ T7163] ? queue_io+0x481/0x790 [ 512.156640][ T7163] wb_workfn+0x397/0x1900 [ 512.156812][ T7163] ? kmsan_get_metadata+0xf1/0x160 [ 512.156989][ T7163] ? __pfx_wb_workfn+0x10/0x10 [ 512.157152][ T7163] process_scheduled_works+0xae7/0x1d60 [ 512.157405][ T7163] worker_thread+0x1741/0x1de0 [ 512.157588][ T7163] kthread+0x53f/0x600 [ 512.157735][ T7163] ? __pfx_worker_thread+0x10/0x10 [ 512.157879][ T7163] ? __pfx_kthread+0x10/0x10 [ 512.158028][ T7163] ret_from_fork+0x20f/0x910 [ 512.158163][ T7163] ? __switch_to+0x521/0x750 [ 512.158325][ T7163] ? __pfx_kthread+0x10/0x10 [ 512.158477][ T7163] ret_from_fork_asm+0x1a/0x30 [ 512.158683][ T7163] [ 512.510383][ T7163] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 512.522628][ T5834] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 512.549847][ T5834] usb 6-1: USB disconnect, device number 6 [ 513.145475][ T9317] fido_id[9317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 514.011746][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1000'. [ 514.638701][ T9335] loop4: detected capacity change from 0 to 128 [ 514.671138][ T9333] binder: 9331:9333 ioctl c0306201 200000000600 returned -14 [ 515.059434][ T9339] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1004'. [ 515.097259][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 515.816258][ T9345] loop3: detected capacity change from 0 to 2048 [ 515.973601][ T9353] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 517.047774][ T9365] Invalid ELF header magic: != ELF [ 517.231664][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1013'. [ 518.121962][ T9372] loop6: detected capacity change from 0 to 32768 [ 518.131683][ T9372] btrfs: Deprecated parameter 'usebackuproot' [ 518.137943][ T9372] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 518.161367][ T9372] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.998 (9372) [ 518.186614][ T9372] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 518.197934][ T9372] BTRFS info (device loop6): using sha256 checksum algorithm [ 518.206142][ T9372] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 518.305349][ T29] audit: type=1326 audit(1770788728.649:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.4.1015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9010d9bf79 code=0x0 [ 518.565200][ T9372] BTRFS info (device loop6): rebuilding free space tree [ 518.632929][ T9372] BTRFS info (device loop6): disabling free space tree [ 518.640110][ T9372] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 518.652649][ T9372] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 518.685537][ T9372] BTRFS info (device loop6): turning on async discard [ 518.695042][ T9372] BTRFS info (device loop6): enabling disk space caching [ 518.702491][ T9372] BTRFS info (device loop6): force clearing of disk cache [ 518.709789][ T9372] BTRFS info (device loop6): trying to use backup root at mount time [ 518.718123][ T9372] BTRFS info (device loop6): force zstd compression, level 3 [ 518.841935][ T29] audit: type=1800 audit(1770788729.159:66): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.998" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 519.455278][ T8398] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 520.609947][ T9422] block nbd2: NBD_DISCONNECT [ 520.636884][ T9415] block nbd2: Disconnected due to user request. [ 520.685808][ T9415] block nbd2: shutting down sockets [ 523.930867][ T9462] loop4: detected capacity change from 0 to 32768 [ 524.018026][ T9462] [ 524.018026][ T9462] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 524.018026][ T9462] [ 524.231284][ T5782] [ 524.231284][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 524.231284][ T5782] [ 524.342434][ T5782] [ 524.342434][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 524.342434][ T5782] [ 526.694297][ T9510] loop4: detected capacity change from 0 to 512 [ 526.726731][ T9510] EXT4-fs: inline encryption not supported [ 526.781728][ T9510] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 526.891093][ T9510] EXT4-fs (loop4): 1 truncate cleaned up [ 526.932315][ T9510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.274371][ T9518] loop3: detected capacity change from 0 to 1024 [ 527.318037][ T9518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 527.330484][ T9508] loop2: detected capacity change from 0 to 4096 [ 527.385034][ T9508] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 527.419149][ T9518] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 527.499635][ T9518] System zones: 0-1, 3-36 [ 527.635680][ T9518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.647290][ T5782] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 527.728144][ T5782] EXT4-fs (loop4): Remounting filesystem read-only [ 527.843393][ T9508] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 528.074432][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.725285][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.845448][ T7176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.940758][ T7176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.346974][ T7176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.400943][ T7176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.687584][ T7176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.758489][ T7176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.936225][ T7176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.985883][ T7176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.447589][ T7176] bridge_slave_1: left allmulticast mode [ 530.456840][ T7176] bridge_slave_1: left promiscuous mode [ 530.486553][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.509760][ T7176] bridge_slave_0: left allmulticast mode [ 530.516235][ T7176] bridge_slave_0: left promiscuous mode [ 530.544254][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.455577][ T7176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.531894][ T7176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.585368][ T7176] bond0 (unregistering): Released all slaves [ 531.655953][ T7176] bond1 (unregistering): Released all slaves [ 531.676726][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.691056][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.770762][ T5834] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 532.001517][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 532.052129][ T5834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.121345][ T5834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.174152][ T5834] usb 3-1: New USB device found, idVendor=1d6a, idProduct=0101, bcdDevice= 0.40 [ 532.210801][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.245531][ T5834] usb 3-1: Product: syz [ 532.603943][ T5077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 532.617966][ T5077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 532.627770][ T5077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 532.651716][ T5077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 532.664492][ T5077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 533.136238][ T9546] loop5: detected capacity change from 0 to 40427 [ 533.147986][ T9546] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 533.154949][ T9546] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 533.175235][ T5834] usb 3-1: Manufacturer: syz [ 533.189221][ T5834] usb 3-1: SerialNumber: syz [ 533.392971][ T49] block nbd3: Receive control failed (result -32) [ 533.459512][ T9546] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 533.477617][ T9553] block nbd3: shutting down sockets [ 533.493834][ T9546] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 533.501193][ T9546] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 533.751489][ T5834] usb 3-1: skipping empty audio interface (v1) [ 533.881871][ T7769] syz-executor: attempt to access beyond end of device [ 533.881871][ T7769] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 533.893224][ T5834] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 533.963056][ T7769] CPU: 1 UID: 0 PID: 7769 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 533.963220][ T7769] Tainted: [L]=SOFTLOCKUP [ 533.963272][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 533.963344][ T7769] Call Trace: [ 533.963386][ T7769] [ 533.963432][ T7769] __dump_stack+0x26/0x30 [ 533.963586][ T7769] dump_stack_lvl+0x14c/0x1c0 [ 533.963742][ T7769] dump_stack+0x1e/0x25 [ 533.963875][ T7769] f2fs_handle_critical_error+0xa6f/0xc20 [ 533.964044][ T7769] f2fs_stop_checkpoint+0x65/0x80 [ 533.964183][ T7769] f2fs_write_end_io+0x1013/0x2470 [ 533.964379][ T7769] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 533.964519][ T7769] bio_endio+0xf92/0x10e0 [ 533.964676][ T7769] submit_bio_noacct+0x533/0x28d0 [ 533.964877][ T7769] submit_bio+0x57a/0x620 [ 533.965035][ T7769] f2fs_submit_write_bio+0x115/0x2d0 [ 533.965225][ T7769] __submit_merged_bio+0x16f/0x6a0 [ 533.965407][ T7769] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.965571][ T7769] __submit_merged_write_cond+0x44a/0x990 [ 533.965781][ T7769] f2fs_write_data_pages+0x4d18/0x57a0 [ 533.966062][ T7769] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 533.966253][ T7769] ? kmsan_get_metadata+0xf1/0x160 [ 533.966401][ T7769] ? folio_batch_move_lru+0x6a2/0x6d0 [ 533.966551][ T7769] ? __msan_warning+0x1b/0x30 [ 533.966680][ T7769] ? filter_irq_stacks+0x13f/0x190 [ 533.966847][ T7769] ? stack_depot_save_flags+0x35/0x790 [ 533.967025][ T7769] ? kmsan_get_metadata+0xf1/0x160 [ 533.967171][ T7769] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.967322][ T7769] ? kmsan_get_metadata+0xf1/0x160 [ 533.967481][ T7769] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.967630][ T7769] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.967781][ T7769] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.967920][ T7769] do_writepages+0x3f2/0x860 [ 533.968085][ T7769] ? _raw_spin_unlock+0x30/0x50 [ 533.968237][ T7769] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 533.968438][ T7769] filemap_fdatawrite+0x207/0x260 [ 533.968698][ T7769] f2fs_sync_dirty_inodes+0x2aa/0x9d0 [ 533.968890][ T7769] f2fs_write_checkpoint+0x10a3/0x3720 [ 533.969130][ T7769] ? stack_depot_save_flags+0x35/0x790 [ 533.969332][ T7769] kill_f2fs_super+0x320/0x990 [ 533.969526][ T7769] ? __pfx_kill_f2fs_super+0x10/0x10 [ 533.969681][ T7769] deactivate_locked_super+0xcb/0x3c0 [ 533.969874][ T7769] deactivate_super+0x12f/0x140 [ 533.970043][ T7769] cleanup_mnt+0x7eb/0x870 [ 533.970212][ T7769] ? __pfx___cleanup_mnt+0x10/0x10 [ 533.970372][ T7769] __cleanup_mnt+0x22/0x30 [ 533.970525][ T7769] task_work_run+0x208/0x2b0 [ 533.970683][ T7769] exit_to_user_mode_loop+0x306/0x1b60 [ 533.970871][ T7769] ? user_path_at+0x1fc/0x330 [ 533.971044][ T7769] ? __x64_sys_umount+0x1dc/0x250 [ 533.971193][ T7769] do_syscall_64+0x24d/0xf80 [ 533.971368][ T7769] ? clear_bhb_loop+0x50/0xa0 [ 533.971507][ T7769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.971648][ T7769] RIP: 0033:0x7ff8a259d1d7 [ 533.971749][ T7769] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 533.971766][ T5834] usb 3-1: USB disconnect, device number 12 [ 533.971868][ T7769] RSP: 002b:00007ffc8ab11508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 533.971985][ T7769] RAX: 0000000000000000 RBX: 00007ff8a2631c3b RCX: 00007ff8a259d1d7 [ 533.972071][ T7769] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8ab115c0 [ 533.972153][ T7769] RBP: 00007ffc8ab115c0 R08: 00007ffc8ab125c0 R09: 00000000ffffffff [ 533.972244][ T7769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc8ab12650 [ 533.972328][ T7769] R13: 00007ff8a2631c3b R14: 0000000000082404 R15: 00007ffc8ab12690 [ 533.972454][ T7769] [ 534.277866][ T7769] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 534.770762][ T49] Bluetooth: hci4: command tx timeout [ 535.018425][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.067803][ T7176] hsr_slave_0: left promiscuous mode [ 535.126625][ T7176] hsr_slave_1: left promiscuous mode [ 535.163602][ T7176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.198365][ T7176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.220973][ T7561] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 535.244173][ T7176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.291750][ T7176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.400906][ T7561] usb 7-1: Using ep0 maxpacket: 16 [ 535.409869][ T7176] veth1_macvtap: left promiscuous mode [ 535.419672][ T7176] veth0_macvtap: left promiscuous mode [ 535.461075][ T7176] veth1_vlan: left promiscuous mode [ 535.466624][ T7176] veth0_vlan: left promiscuous mode [ 535.488494][ T7561] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 535.540735][ T7561] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.558248][ T7561] usb 7-1: Product: syz [ 535.587218][ T7561] usb 7-1: Manufacturer: syz [ 535.605195][ T7561] usb 7-1: SerialNumber: syz [ 535.625075][ T7561] usb 7-1: config 0 descriptor?? [ 536.178281][ T7561] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 536.254112][ T7561] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 536.288720][ T7561] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 536.312830][ T7561] usb 7-1: media controller created [ 536.483083][ T9566] dtv5100: wlen = 0, aborting. [ 536.545193][ T7561] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.770032][ T7561] zl10353_read_register: readreg error (reg=127, ret==0) [ 536.799167][ T7561] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 536.851104][ T7561] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 536.861145][ T49] Bluetooth: hci4: command tx timeout [ 536.917246][ T7561] usb 7-1: USB disconnect, device number 5 [ 538.201244][ T9583] loop2: detected capacity change from 0 to 40427 [ 538.244860][ T9583] F2FS-fs (loop2): invalid crc value [ 538.536228][ T9583] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 538.555290][ T9583] F2FS-fs (loop2): Start checkpoint disabled! [ 538.569918][ T9583] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 538.584115][ T9583] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 538.741678][ T7178] kworker/u8:29: attempt to access beyond end of device [ 538.741678][ T7178] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 538.751550][ T7561] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 538.825402][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: kworker/u8:29 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.825561][ T7178] Tainted: [L]=SOFTLOCKUP [ 538.825606][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 538.825697][ T7178] Workqueue: writeback wb_workfn (flush-7:2) [ 538.825884][ T7178] Call Trace: [ 538.825924][ T7178] [ 538.825975][ T7178] __dump_stack+0x26/0x30 [ 538.826125][ T7178] dump_stack_lvl+0x14c/0x1c0 [ 538.826275][ T7178] dump_stack+0x1e/0x25 [ 538.826399][ T7178] f2fs_handle_critical_error+0xa6f/0xc20 [ 538.826569][ T7178] f2fs_stop_checkpoint+0x65/0x80 [ 538.826708][ T7178] f2fs_write_end_io+0x1013/0x2470 [ 538.826894][ T7178] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 538.827036][ T7178] bio_endio+0xf92/0x10e0 [ 538.827207][ T7178] submit_bio_noacct+0x533/0x28d0 [ 538.827403][ T7178] submit_bio+0x57a/0x620 [ 538.827546][ T7178] f2fs_submit_write_bio+0x115/0x2d0 [ 538.827723][ T7178] __submit_merged_bio+0x16f/0x6a0 [ 538.827898][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.828054][ T7178] __submit_merged_write_cond+0x44a/0x990 [ 538.828254][ T7178] f2fs_write_data_pages+0x4d18/0x57a0 [ 538.828523][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 538.828654][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.828810][ T7178] ? __update_load_avg_cfs_rq+0xd77/0x1000 [ 538.828977][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 538.829119][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.829270][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 538.829412][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.829560][ T7178] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 538.829704][ T7178] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 538.829845][ T7178] do_writepages+0x3f2/0x860 [ 538.830005][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.830169][ T7178] ? queue_io+0x781/0x790 [ 538.830332][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 538.830500][ T7178] __writeback_single_inode+0x101/0x1030 [ 538.830631][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 538.830769][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.830924][ T7178] writeback_sb_inodes+0xb2d/0x1f10 [ 538.831197][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.831364][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.831512][ T7178] wb_writeback+0x4d0/0xc00 [ 538.831709][ T7178] ? queue_io+0x481/0x790 [ 538.831890][ T7178] wb_workfn+0x397/0x1900 [ 538.832050][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 538.832214][ T7178] ? __pfx_wb_workfn+0x10/0x10 [ 538.832372][ T7178] process_scheduled_works+0xae7/0x1d60 [ 538.832619][ T7178] worker_thread+0x1741/0x1de0 [ 538.832799][ T7178] kthread+0x53f/0x600 [ 538.832946][ T7178] ? __pfx_worker_thread+0x10/0x10 [ 538.833087][ T7178] ? __pfx_kthread+0x10/0x10 [ 538.833238][ T7178] ret_from_fork+0x20f/0x910 [ 538.833372][ T7178] ? __switch_to+0x521/0x750 [ 538.833534][ T7178] ? __pfx_kthread+0x10/0x10 [ 538.833681][ T7178] ret_from_fork_asm+0x1a/0x30 [ 538.833878][ T7178] [ 539.178232][ T49] Bluetooth: hci4: command tx timeout [ 539.289017][ T7176] team0 (unregistering): Port device team_slave_1 removed [ 539.324276][ T7178] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 539.331952][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: kworker/u8:29 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.332120][ T7178] Tainted: [L]=SOFTLOCKUP [ 539.332171][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 539.332274][ T7178] Workqueue: writeback wb_workfn (flush-7:2) [ 539.332473][ T7178] Call Trace: [ 539.332519][ T7178] [ 539.332569][ T7178] __dump_stack+0x26/0x30 [ 539.332718][ T7178] dump_stack_lvl+0x14c/0x1c0 [ 539.332876][ T7178] dump_stack+0x1e/0x25 [ 539.333016][ T7178] f2fs_handle_critical_error+0xa6f/0xc20 [ 539.333195][ T7178] f2fs_stop_checkpoint+0x65/0x80 [ 539.333343][ T7178] f2fs_write_end_io+0x1013/0x2470 [ 539.333547][ T7178] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 539.333691][ T7178] bio_endio+0xf92/0x10e0 [ 539.333854][ T7178] submit_bio_noacct+0x533/0x28d0 [ 539.334060][ T7178] submit_bio+0x57a/0x620 [ 539.334213][ T7178] f2fs_submit_write_bio+0x115/0x2d0 [ 539.334411][ T7178] __submit_merged_bio+0x16f/0x6a0 [ 539.334590][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.334756][ T7178] __submit_merged_write_cond+0x44a/0x990 [ 539.334966][ T7178] f2fs_write_data_pages+0x4d18/0x57a0 [ 539.335246][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 539.335398][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.335560][ T7178] ? __update_load_avg_cfs_rq+0xd77/0x1000 [ 539.335741][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 539.335889][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.336040][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 539.336183][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.336338][ T7178] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 539.336482][ T7178] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 539.336625][ T7178] do_writepages+0x3f2/0x860 [ 539.336788][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.336944][ T7178] ? queue_io+0x781/0x790 [ 539.337109][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 539.337276][ T7178] __writeback_single_inode+0x101/0x1030 [ 539.337439][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 539.337589][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.337749][ T7178] writeback_sb_inodes+0xb2d/0x1f10 [ 539.338031][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.338207][ T7178] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.338375][ T7178] wb_writeback+0x4d0/0xc00 [ 539.338572][ T7178] ? queue_io+0x481/0x790 [ 539.338762][ T7178] wb_workfn+0x397/0x1900 [ 539.338924][ T7178] ? kmsan_get_metadata+0xf1/0x160 [ 539.339160][ T7178] ? __pfx_wb_workfn+0x10/0x10 [ 539.339339][ T7178] process_scheduled_works+0xae7/0x1d60 [ 539.339585][ T7178] worker_thread+0x1741/0x1de0 [ 539.339765][ T7178] kthread+0x53f/0x600 [ 539.339915][ T7178] ? __pfx_worker_thread+0x10/0x10 [ 539.340062][ T7178] ? __pfx_kthread+0x10/0x10 [ 539.340226][ T7178] ret_from_fork+0x20f/0x910 [ 539.340357][ T7178] ? __switch_to+0x521/0x750 [ 539.340520][ T7178] ? __pfx_kthread+0x10/0x10 [ 539.340658][ T7178] ret_from_fork_asm+0x1a/0x30 [ 539.340848][ T7178] [ 539.636567][ T7176] team0 (unregistering): Port device team_slave_0 removed [ 539.656750][ T7178] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 539.740876][ T7561] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 539.951502][ T7561] usb 7-1: Using ep0 maxpacket: 8 [ 540.039779][ T7561] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.062354][ T7561] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.091632][ T7561] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 540.150781][ T7561] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.183987][ T7561] usb 7-1: config 0 descriptor?? [ 540.399117][ T9562] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1074'. [ 540.775397][ T7561] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 540.810796][ T7561] isku 0003:1E7D:319C.0010: unknown main item tag 0x0 [ 540.817875][ T7561] isku 0003:1E7D:319C.0010: unknown main item tag 0x7 [ 540.886254][ T7561] isku 0003:1E7D:319C.0010: unbalanced collection at end of report description [ 540.995527][ T7561] isku 0003:1E7D:319C.0010: parse failed [ 541.083178][ T7561] isku 0003:1E7D:319C.0010: probe with driver isku failed with error -22 [ 541.192295][ T7561] usb 7-1: USB disconnect, device number 6 [ 541.259041][ T49] Bluetooth: hci4: command tx timeout [ 542.116465][ T9547] chnl_net:caif_netlink_parms(): no params data found [ 544.571462][ T7561] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 544.857462][ T7561] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 544.960789][ T7561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.093321][ T7561] usb 6-1: config 0 descriptor?? [ 545.202986][ T7561] cp210x 6-1:0.0: cp210x converter detected [ 545.665072][ T7561] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 545.821036][ T9697] loop2: detected capacity change from 0 to 2048 [ 545.953363][ T7561] usb 6-1: cp210x converter now attached to ttyUSB0 [ 546.009598][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.039049][ T9697] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.113376][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.121605][ T7561] usb 6-1: USB disconnect, device number 7 [ 546.135824][ T9547] bridge_slave_0: entered allmulticast mode [ 546.180062][ T9547] bridge_slave_0: entered promiscuous mode [ 546.192761][ T7561] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 546.205765][ T29] audit: type=1800 audit(1770788756.549:67): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1082" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 546.277135][ T7561] cp210x 6-1:0.0: device disconnected [ 546.308214][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.354973][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.411039][ T29] audit: type=1800 audit(1770788756.629:68): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1082" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 546.441628][ T9547] bridge_slave_1: entered allmulticast mode [ 546.500658][ T9547] bridge_slave_1: entered promiscuous mode [ 546.528313][ T29] audit: type=1804 audit(1770788756.649:69): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1082" name="/newroot/231/file0/file1" dev="loop2" ino=1346 res=1 errno=0 [ 546.694983][ T29] audit: type=1800 audit(1770788756.649:70): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1082" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 546.899758][ T9547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.968496][ T9547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.424662][ T9547] team0: Port device team_slave_0 added [ 547.539072][ T9547] team0: Port device team_slave_1 added [ 547.581834][ T9701] loop6: detected capacity change from 0 to 4096 [ 547.651158][ T9701] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 547.997569][ T9718] loop5: detected capacity change from 0 to 128 [ 548.071191][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.100926][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.143637][ T9718] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 548.208929][ T9547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.312048][ T9547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.352487][ T9547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.497177][ T9547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.597692][ T9701] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 548.899820][ T1095] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 549.127153][ T9547] hsr_slave_0: entered promiscuous mode [ 549.174192][ T9547] hsr_slave_1: entered promiscuous mode [ 549.238362][ T9547] debugfs: 'hsr0' already exists in 'hsr' [ 549.259454][ T9547] Cannot create hsr debugfs directory [ 549.402980][ T7180] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 549.440983][ T7180] ntfs3(loop6): ino=5, mi_enum_attr [ 549.463139][ T7180] ntfs3(loop6): ino=5, mi_enum_attr [ 549.494184][ T8398] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 549.631029][ T8398] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 549.638185][ T8398] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 549.824312][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1106'. [ 549.842661][ T9726] loop2: detected capacity change from 0 to 4096 [ 549.881064][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1106'. [ 549.942346][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1106'. [ 550.001052][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1106'. [ 550.420822][ T9730] loop3: detected capacity change from 0 to 40427 [ 550.467669][ T7185] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 550.475893][ T9730] F2FS-fs (loop3): Invalid log blocks per segment (1) [ 550.482997][ T9730] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 550.492456][ T9730] F2FS-fs (loop3): Image doesn't support compression [ 550.499413][ T9730] F2FS-fs (loop3): build fault injection rate: 690 [ 550.506375][ T9730] F2FS-fs (loop3): build fault injection type: 0x35f7 [ 550.517678][ T9730] F2FS-fs (loop3): invalid crc value [ 550.806541][ T9730] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 550.819519][ T9730] F2FS-fs (loop3): Start checkpoint disabled! [ 550.829144][ T9730] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 550.858030][ T9730] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 550.865430][ T9730] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 551.126051][ T9726] ntfs3(loop2): ino=1a, mi_enum_attr [ 551.156464][ T9726] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 551.378263][ T7140] kworker/u8:13: attempt to access beyond end of device [ 551.378263][ T7140] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 551.470900][ T7140] CPU: 0 UID: 0 PID: 7140 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.471064][ T7140] Tainted: [L]=SOFTLOCKUP [ 551.471112][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 551.471218][ T7140] Workqueue: writeback wb_workfn (flush-7:3) [ 551.471410][ T7140] Call Trace: [ 551.471461][ T7140] [ 551.471507][ T7140] __dump_stack+0x26/0x30 [ 551.471667][ T7140] dump_stack_lvl+0x14c/0x1c0 [ 551.471817][ T7140] dump_stack+0x1e/0x25 [ 551.471960][ T7140] f2fs_handle_critical_error+0xa6f/0xc20 [ 551.472134][ T7140] f2fs_stop_checkpoint+0x65/0x80 [ 551.472280][ T7140] f2fs_write_end_io+0x1013/0x2470 [ 551.472479][ T7140] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 551.472641][ T7140] bio_endio+0xf92/0x10e0 [ 551.472796][ T7140] submit_bio_noacct+0x533/0x28d0 [ 551.473002][ T7140] submit_bio+0x57a/0x620 [ 551.473158][ T7140] f2fs_submit_write_bio+0x115/0x2d0 [ 551.473346][ T7140] __submit_merged_bio+0x16f/0x6a0 [ 551.473534][ T7140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.473697][ T7140] __submit_merged_write_cond+0x44a/0x990 [ 551.473902][ T7140] f2fs_write_data_pages+0x4d18/0x57a0 [ 551.474180][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.474327][ T7140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.474477][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.474622][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.474758][ T7140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.474900][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.475047][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.475198][ T7140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.475352][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.475512][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.475674][ T7140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.475828][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.475977][ T7140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.476130][ T7140] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 551.476273][ T7140] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 551.476413][ T7140] do_writepages+0x3f2/0x860 [ 551.476585][ T7140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.476743][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.476886][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.477055][ T7140] __writeback_single_inode+0x101/0x1030 [ 551.477199][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.477349][ T7140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.477513][ T7140] writeback_sb_inodes+0xb2d/0x1f10 [ 551.477802][ T7140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.477982][ T7140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.478145][ T7140] wb_writeback+0x4d0/0xc00 [ 551.478345][ T7140] ? queue_io+0x481/0x790 [ 551.478539][ T7140] wb_workfn+0x397/0x1900 [ 551.478718][ T7140] ? kmsan_get_metadata+0xf1/0x160 [ 551.478891][ T7140] ? __pfx_wb_workfn+0x10/0x10 [ 551.479048][ T7140] process_scheduled_works+0xae7/0x1d60 [ 551.479294][ T7140] worker_thread+0x1741/0x1de0 [ 551.479479][ T7140] kthread+0x53f/0x600 [ 551.479635][ T7140] ? __pfx_worker_thread+0x10/0x10 [ 551.479781][ T7140] ? __pfx_kthread+0x10/0x10 [ 551.479928][ T7140] ret_from_fork+0x20f/0x910 [ 551.480064][ T7140] ? __switch_to+0x521/0x750 [ 551.480235][ T7140] ? __pfx_kthread+0x10/0x10 [ 551.480384][ T7140] ret_from_fork_asm+0x1a/0x30 [ 551.480578][ T7140] [ 551.896572][ T9547] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 551.905649][ T7140] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 552.122147][ T9547] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 552.333950][ T9547] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 552.462567][ T9547] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 552.954511][ T9760] loop2: detected capacity change from 0 to 512 [ 553.034124][ T9760] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 553.059835][ T9752] loop5: detected capacity change from 0 to 4096 [ 553.131121][ T9760] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1111: inode has both inline data and extents flags [ 553.151270][ T9760] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 553.174396][ T9760] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1111: couldn't read orphan inode 15 (err -117) [ 553.202191][ T9752] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 553.272760][ T9760] loop2: lost filesystem error report for type 5 error -117 [ 553.329747][ T9760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.193895][ T9547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.482809][ T9547] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.675607][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.683132][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.714889][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.748181][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.756082][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.211182][ T9767] loop6: detected capacity change from 0 to 4096 [ 555.829901][ T9774] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 556.110700][ T9771] loop2: detected capacity change from 0 to 32768 [ 556.145883][ T9771] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1113 (9771) [ 556.290869][ T9771] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 556.303561][ T9771] BTRFS info (device loop2): using sha256 checksum algorithm [ 556.731491][ T9771] BTRFS info (device loop2): enabling ssd optimizations [ 556.738753][ T9771] BTRFS info (device loop2): turning on async discard [ 556.745942][ T9771] BTRFS info (device loop2): enabling free space tree [ 557.179745][ T5773] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 557.379805][ T9799] loop3: detected capacity change from 0 to 512 [ 557.513609][ T9799] EXT4-fs: Ignoring removed mblk_io_submit option [ 557.622954][ T9799] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 557.683907][ T9799] EXT4-fs (loop3): blocks per group (256) and clusters per group (32768) inconsistent [ 558.982865][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1116'. [ 559.585373][ T9547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.281234][ T5834] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 560.490755][ T5834] usb 7-1: Using ep0 maxpacket: 16 [ 560.576354][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.644329][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.696633][ T5834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.768578][ T5834] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 560.860745][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.988646][ T5834] usb 7-1: config 0 descriptor?? [ 561.210931][ T9839] loop3: detected capacity change from 0 to 1024 [ 561.509870][ T29] audit: type=1800 audit(1770788771.839:71): pid=9839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1125" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 561.558160][ T9839] syz.3.1125: attempt to access beyond end of device [ 561.558160][ T9839] loop3: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 561.688300][ T5834] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 561.731267][ T9839] syz.3.1125: attempt to access beyond end of device [ 561.731267][ T9839] loop3: rw=8388608, sector=393216, nr_sectors = 6 limit=1024 [ 561.751719][ T5825] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 561.917831][ T5834] microsoft 0003:045E:07DA.0011: unsupported Resolution Multiplier 0 [ 561.972724][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 562.023771][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.081349][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.140719][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 562.175609][ T5834] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 562.248204][ T5825] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 562.270733][ T5834] microsoft 0003:045E:07DA.0011: no inputs found [ 562.277280][ T5834] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 562.312786][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.385892][ T5825] usb 3-1: config 0 descriptor?? [ 562.401344][ T5834] usb 7-1: USB disconnect, device number 7 [ 562.876310][ T9843] random: crng reseeded on system resumption [ 563.122816][ T5825] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 563.333032][ T9850] fido_id[9850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 563.424441][ T9547] veth0_vlan: entered promiscuous mode [ 563.505731][ T5825] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 563.577658][ T5825] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 563.647494][ T9547] veth1_vlan: entered promiscuous mode [ 563.771000][ T5825] usb 3-1: USB disconnect, device number 13 [ 563.781068][ T7561] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 563.840900][ T7561] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 563.937684][ T7561] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 564.021118][ T7561] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 564.349936][ T9547] veth0_macvtap: entered promiscuous mode [ 564.518125][ T9547] veth1_macvtap: entered promiscuous mode [ 564.856348][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.248610][ T9547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.432115][ T7185] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.460998][ T7185] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.509503][ T7185] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.554000][ T7147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.493887][ T9887] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1138'. [ 566.591889][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1138'. [ 566.594027][ T9891] netlink: 'syz.3.1139': attribute type 29 has an invalid length. [ 566.706663][ T9895] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1139'. [ 567.256990][ T9900] loop2: detected capacity change from 0 to 512 [ 567.268834][ T9893] netlink: 'syz.3.1139': attribute type 29 has an invalid length. [ 567.299642][ T9900] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 567.336734][ T795] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 567.418675][ T9900] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 567.539045][ T9900] EXT4-fs (loop2): 1 truncate cleaned up [ 567.551037][ T795] usb 7-1: Using ep0 maxpacket: 16 [ 567.626080][ T9900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.632426][ T795] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 567.718673][ T795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 567.798075][ T795] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 567.859750][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.157838][ T9900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.580291][ T9908] loop5: detected capacity change from 0 to 32768 [ 568.592939][ T9908] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1142 (9908) [ 568.611102][ T795] usb 7-1: Product: syz [ 568.615486][ T795] usb 7-1: Manufacturer: syz [ 568.620259][ T795] usb 7-1: SerialNumber: syz [ 568.631766][ T9908] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 568.642249][ T9908] BTRFS info (device loop5): using crc32c checksum algorithm [ 568.649909][ T9908] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 568.791433][ T795] usb 7-1: config 0 descriptor?? [ 568.824691][ T795] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 568.835737][ T795] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 568.901989][ T9908] BTRFS info (device loop5): rebuilding free space tree [ 568.964051][ T9908] BTRFS info (device loop5): disabling free space tree [ 568.974766][ T9908] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 568.985976][ T9908] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 569.043926][ T9908] BTRFS info (device loop5): enabling ssd optimizations [ 569.051561][ T9908] BTRFS info (device loop5): turning on async discard [ 569.058653][ T9908] BTRFS info (device loop5): enabling disk space caching [ 569.066146][ T9908] BTRFS info (device loop5): force clearing of disk cache [ 569.077821][ T9908] BTRFS info (device loop5): use zstd compression, level 3 [ 569.509640][ T795] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 569.663431][ T795] em28xx 7-1:0.0: Config register raw data: 0x9e [ 569.906907][ T7769] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 570.109431][ T795] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 570.149027][ T795] em28xx 7-1:0.0: No AC97 audio processor [ 570.301935][ T795] usb 7-1: USB disconnect, device number 8 [ 570.335651][ T795] em28xx 7-1:0.0: Disconnecting em28xx [ 570.405028][ T795] em28xx 7-1:0.0: Freeing device [ 570.606926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 571.191890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 572.947185][ T9958] loop3: detected capacity change from 0 to 40427 [ 572.955864][ T9958] F2FS-fs: heap/no_heap options were deprecated [ 573.009908][ T9958] F2FS-fs (loop3): build fault injection rate: 19 [ 573.016691][ T9958] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 573.036122][ T9958] F2FS-fs (loop3): invalid crc value [ 573.064788][ T9958] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80 [ 573.254957][ T9958] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0 [ 573.280423][ T9958] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 573.318500][ T9958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 573.372467][ T9958] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x702/0x19b0 [ 573.431841][ T9958] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x1102/0x2ff0 [ 573.445372][ T9958] F2FS-fs (loop3): inconsistent node block, node_type:3, nid:12, node_footer[nid:12,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 573.827098][ T9968] input: syz1 as /devices/virtual/input/input12 [ 575.291663][ T7184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.299654][ T7184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.780445][ T7184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.845698][ T7184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.445225][ T7140] bridge_slave_1: left allmulticast mode [ 576.463621][ T7140] bridge_slave_1: left promiscuous mode [ 576.482592][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.538158][ T7140] bridge_slave_0: left allmulticast mode [ 576.571224][ T7140] bridge_slave_0: left promiscuous mode [ 576.586276][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.252378][ T7140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.312707][ T7140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.347737][ T7140] bond0 (unregistering): Released all slaves [ 577.580839][ T7140] tipc: Left network mode [ 577.871349][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1164'. [ 577.966078][T10003] loop6: detected capacity change from 0 to 128 [ 578.090179][T10002] loop7: detected capacity change from 0 to 1024 [ 578.177660][ T7140] hsr_slave_0: left promiscuous mode [ 578.267219][T10002] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.361132][ T7140] hsr_slave_1: left promiscuous mode [ 578.368930][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.513723][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.274952][ T9547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.539347][ T5077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 579.552548][ T5077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 579.562404][ T5077] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 579.583696][ T5077] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 579.637855][ T5077] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 580.188505][ T7140] team0 (unregistering): Port device team_slave_1 removed [ 580.377141][ T5077] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 580.425567][ T7140] team0 (unregistering): Port device team_slave_0 removed [ 581.046640][T10031] loop5: detected capacity change from 0 to 8192 [ 581.128902][ T29] audit: type=1804 audit(1770788791.469:72): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1176" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="hugetlbfs" ino=21956 res=1 errno=0 [ 581.731149][ T5077] Bluetooth: hci0: command tx timeout [ 583.841019][ T5077] Bluetooth: hci0: command tx timeout [ 584.085492][T10067] loop5: detected capacity change from 0 to 32768 [ 584.184231][T10067] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 584.257423][T10073] loop6: detected capacity change from 0 to 2048 [ 584.285986][T10067] XFS (loop5): Ending clean mount [ 584.293449][T10067] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2c0, xfs_finobt block 0x10 [ 584.304978][T10067] XFS (loop5): Unmount and run xfs_repair [ 584.311076][T10067] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 584.318645][T10067] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 584.334302][T10067] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 584.345321][T10067] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 584.354534][T10067] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 584.363656][T10067] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 584.372843][T10067] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 584.381986][T10067] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 584.391101][T10067] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 584.400136][T10067] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x10 len 4 error 74 [ 584.411992][T10067] loop5: lost filesystem error report for type 5 error -117 [ 584.412520][T10067] XFS (loop5): Failed to initialize disk quotas, err -117. [ 584.438477][T10073] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 584.621601][T10088] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 584.689249][T10016] chnl_net:caif_netlink_parms(): no params data found [ 585.126858][ T7769] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 585.198611][ T7769] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 585.621680][T10088] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 585.685652][T10088] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 585.742200][ T5984] ===================================================== [ 585.749509][ T5984] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400 [ 585.753312][T10088] Remounting filesystem read-only [ 585.757158][ T5984] _copy_to_iter+0xef3/0x3400 [ 585.769111][ T5984] copy_page_to_iter+0x482/0x900 [ 585.774885][ T5984] filemap_read+0x1cd6/0x2300 [ 585.779726][ T5984] blkdev_read_iter+0x89f/0xb00 [ 585.788158][ T5984] vfs_read+0x8ec/0xf90 [ 585.792621][ T5984] ksys_read+0x1d9/0x470 [ 585.800698][ T5984] __x64_sys_read+0x97/0xf0 [ 585.805349][ T5984] x64_sys_call+0x311c/0x3ea0 [ 585.810198][ T5984] do_syscall_64+0x134/0xf80 [ 585.815527][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.821794][ T5984] [ 585.824183][ T5984] Uninit was stored to memory at: [ 585.829460][ T5984] _copy_to_iter+0x130f/0x3400 [ 585.834530][ T5984] copy_page_to_iter+0x482/0x900 [ 585.839626][ T5984] shmem_file_read_iter+0x904/0x1140 [ 585.845237][ T5984] lo_rw_aio+0x1164/0x14a0 [ 585.849839][ T5984] loop_process_work+0xf05/0x1ff0 [ 585.856398][ T5984] loop_rootcg_workfn+0x2b/0x40 [ 585.863520][ T5984] process_scheduled_works+0xae7/0x1d60 [ 585.870045][ T5984] worker_thread+0x1741/0x1de0 [ 585.875157][ T5984] kthread+0x53f/0x600 [ 585.879375][ T5984] ret_from_fork+0x20f/0x910 [ 585.880241][T10101] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 585.884242][ T5984] ret_from_fork_asm+0x1a/0x30 [ 585.884371][ T5984] [ 585.884394][ T5984] Uninit was stored to memory at: [ 585.884626][ T5984] copy_folio_from_iter_atomic+0xea0/0x38b0 [ 585.892311][T10101] team0: Device ipvlan2 failed to register rx_handler [ 585.896158][ T5984] generic_perform_write+0x8b7/0x1050 [ 585.922188][ T5984] shmem_file_write_iter+0x2b7/0x2f0 [ 585.927668][ T5984] lo_rw_aio+0x1164/0x14a0 [ 585.932458][ T5984] loop_process_work+0xf05/0x1ff0 [ 585.937618][ T5984] loop_workfn+0x3e/0x60 [ 585.942103][ T5984] process_scheduled_works+0xae7/0x1d60 [ 585.947939][ T5984] worker_thread+0x1741/0x1de0 [ 585.949791][ T8398] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 585.953000][ T5984] kthread+0x53f/0x600 [ 585.953119][ T5984] ret_from_fork+0x20f/0x910 [ 585.953217][ T5984] ret_from_fork_asm+0x1a/0x30 [ 585.953345][ T5984] [ 585.953368][ T5984] Uninit was stored to memory at: [ 585.953583][ T5984] xlog_write+0x1a75/0x20f0 [ 585.953705][ T5984] xlog_cil_push_work+0x3533/0x5030 [ 585.953806][ T5984] process_scheduled_works+0xae7/0x1d60 [ 586.000694][ T5077] Bluetooth: hci0: command tx timeout [ 586.005528][ T5984] worker_thread+0x1741/0x1de0 [ 586.015848][ T5984] kthread+0x53f/0x600 [ 586.020077][ T5984] ret_from_fork+0x20f/0x910 [ 586.025273][ T5984] ret_from_fork_asm+0x1a/0x30 [ 586.030232][ T5984] [ 586.032836][ T5984] Uninit was stored to memory at: [ 586.038130][ T5984] xfs_inode_item_format_attr_fork+0x6f1/0xa80 [ 586.044585][ T5984] xfs_inode_item_format+0x2024/0x2280 [ 586.050260][ T5984] xlog_cil_commit+0x17f8/0x4760 [ 586.055674][ T5984] __xfs_trans_commit+0x556/0xf20 [ 586.060968][ T5984] xfs_trans_roll+0xfd/0x600 [ 586.065770][ T5984] xfs_defer_trans_roll+0x106/0x520 [ 586.072550][ T5984] xfs_defer_finish_noroll+0xce3/0x1d80 [ 586.078247][ T5984] xfs_trans_commit+0x165/0x270 [ 586.084296][ T5984] xfs_attr_set+0x1da1/0x2030 [ 586.089125][ T5984] xfs_attr_change+0x408/0x5b0 [ 586.094169][ T5984] xfs_xattr_set+0x1d4/0x2f0 [ 586.098971][ T5984] __vfs_setxattr+0x742/0x840 [ 586.103934][ T5984] __vfs_setxattr_noperm+0x224/0xad0 [ 586.109367][ T5984] __vfs_setxattr_locked+0x1f8/0x510 [ 586.115014][ T5984] vfs_setxattr+0x276/0x690 [ 586.119713][ T5984] filename_setxattr+0x396/0xcb0 [ 586.124906][ T5984] path_setxattrat+0x702/0x800 [ 586.129835][ T5984] __x64_sys_lsetxattr+0x103/0x1c0 [ 586.135221][ T5984] x64_sys_call+0x168d/0x3ea0 [ 586.139993][ T5984] do_syscall_64+0x134/0xf80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 586.144795][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.151028][ T5984] [ 586.153417][ T5984] Uninit was created at: [ 586.157874][ T5984] __kmalloc_node_track_caller_noprof+0xb6e/0x1c70 [ 586.165649][ T5984] krealloc_node_align_noprof+0x478/0xf40 [ 586.173649][ T5984] xfs_broot_realloc+0x361/0x480 [ 586.178742][ T5984] xfs_bmap_broot_realloc+0x243/0x650 [ 586.185229][ T5984] xfs_bmap_extents_to_btree+0x1f8/0x1430 [ 586.191233][ T5984] xfs_bmap_add_extent_hole_real+0x2267/0x3040 [ 586.197548][ T5984] xfs_bmapi_allocate+0x48d2/0x4f50 [ 586.203204][ T5984] xfs_bmapi_write+0x10a9/0x26f0 [ 586.208338][ T5984] xfs_attr_rmtval_set_blk+0x171/0x390 [ 586.214248][ T5984] xfs_attr_set_iter+0x35f/0x7980 [ 586.219468][ T5984] xfs_attr_finish_item+0x16c/0x540 [ 586.225036][ T5984] xfs_defer_finish_one+0x528/0x13c0 [ 586.230467][ T5984] xfs_defer_finish_noroll+0x1064/0x1d80 [ 586.236480][ T5984] xfs_trans_commit+0x165/0x270 [ 586.241631][ T5984] xfs_attr_set+0x1da1/0x2030 [ 586.246448][ T5984] xfs_attr_change+0x408/0x5b0 [ 586.251602][ T5984] xfs_xattr_set+0x1d4/0x2f0 [ 586.256346][ T5984] __vfs_setxattr+0x742/0x840 [ 586.261362][ T5984] __vfs_setxattr_noperm+0x224/0xad0 [ 586.266848][ T5984] __vfs_setxattr_locked+0x1f8/0x510 [ 586.273679][ T5984] vfs_setxattr+0x276/0x690 [ 586.278317][ T5984] filename_setxattr+0x396/0xcb0 [ 586.284324][ T5984] path_setxattrat+0x702/0x800 [ 586.289260][ T5984] __x64_sys_lsetxattr+0x103/0x1c0 [ 586.294724][ T5984] x64_sys_call+0x168d/0x3ea0 [ 586.299619][ T5984] do_syscall_64+0x134/0xf80 [ 586.304574][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.310750][ T5984] [ 586.313154][ T5984] Bytes 884-887 of 4096 are uninitialized [ 586.319022][ T5984] Memory access of size 4096 starts at ffff88812ed38000 [ 586.326358][ T5984] Data copied to user address 00007f8b9900d000 [ 586.332796][ T5984] [ 586.335217][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 586.345979][ T5984] Tainted: [L]=SOFTLOCKUP [ 586.350446][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 586.360917][ T5984] ===================================================== [ 586.367986][ T5984] Disabling lock debugging due to kernel taint [ 587.750708][ T5984] Kernel panic - not syncing: kmsan.panic set ... [ 587.757274][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: udevd Tainted: G B L syzkaller #0 PREEMPT(full) [ 587.767878][ T5984] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 587.773513][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 587.783689][ T5984] Call Trace: [ 587.787057][ T5984] [ 587.790064][ T5984] __dump_stack+0x26/0x30 [ 587.794569][ T5984] dump_stack_lvl+0x50/0x1c0 [ 587.799329][ T5984] ? dump_stack+0x12/0x25 [ 587.803823][ T5984] dump_stack+0x1e/0x25 [ 587.808144][ T5984] vpanic+0x435/0xd40 [ 587.812329][ T5984] panic+0x15d/0x160 [ 587.816433][ T5984] kmsan_report+0x31a/0x320 [ 587.821090][ T5984] ? kmsan_internal_check_memory+0x166/0x240 [ 587.827269][ T5984] ? kmsan_copy_to_user+0xef/0x190 [ 587.832519][ T5984] ? _copy_to_iter+0xef3/0x3400 [ 587.837521][ T5984] ? copy_page_to_iter+0x482/0x900 [ 587.842817][ T5984] ? filemap_read+0x1cd6/0x2300 [ 587.847820][ T5984] ? blkdev_read_iter+0x89f/0xb00 [ 587.853031][ T5984] ? vfs_read+0x8ec/0xf90 [ 587.857543][ T5984] ? ksys_read+0x1d9/0x470 [ 587.862083][ T5984] ? __x64_sys_read+0x97/0xf0 [ 587.866899][ T5984] ? x64_sys_call+0x311c/0x3ea0 [ 587.871935][ T5984] ? do_syscall_64+0x134/0xf80 [ 587.876890][ T5984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.883131][ T5984] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 587.889419][ T5984] ? up_read+0x6a/0xf0 [ 587.893680][ T5984] ? kmsan_get_metadata+0xf1/0x160 [ 587.898957][ T5984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 587.904941][ T5984] ? raw_irqentry_exit_cond_resched+0x3f/0x80 [ 587.911201][ T5984] ? irqentry_exit+0x8f/0x6d0 [ 587.916070][ T5984] ? kmsan_get_metadata+0xf1/0x160 [ 587.921347][ T5984] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 587.927343][ T5984] kmsan_internal_check_memory+0x166/0x240 [ 587.933380][ T5984] kmsan_copy_to_user+0xef/0x190 [ 587.938477][ T5984] _copy_to_iter+0xef3/0x3400 [ 587.943308][ T5984] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 587.949287][ T5984] ? filemap_get_pages+0x398d/0x3cd0 [ 587.954778][ T5984] copy_page_to_iter+0x482/0x900 [ 587.959886][ T5984] ? kmsan_get_metadata+0xf1/0x160 [ 587.965194][ T5984] filemap_read+0x1cd6/0x2300 [ 587.970148][ T5984] blkdev_read_iter+0x89f/0xb00 [ 587.975208][ T5984] vfs_read+0x8ec/0xf90 [ 587.979553][ T5984] ? __pfx_blkdev_read_iter+0x10/0x10 [ 587.985137][ T5984] ksys_read+0x1d9/0x470 [ 587.989545][ T5984] __x64_sys_read+0x97/0xf0 [ 587.994196][ T5984] x64_sys_call+0x311c/0x3ea0 [ 587.999056][ T5984] do_syscall_64+0x134/0xf80 [ 588.003835][ T5984] ? clear_bhb_loop+0x50/0xa0 [ 588.008680][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.014730][ T5984] RIP: 0033:0x7f8b988a7407 [ 588.019347][ T5984] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 588.039111][ T5984] RSP: 002b:00007ffe6df098b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 588.047688][ T5984] RAX: ffffffffffffffda RBX: 00007f8b99067880 RCX: 00007f8b988a7407 [ 588.055802][ T5984] RDX: 0000000000040000 RSI: 00007f8b98fff000 RDI: 0000000000000009 [ 588.063919][ T5984] RBP: 000055ad7d895fc0 R08: 0000000000000000 R09: 0000000000000000 [ 588.072092][ T5984] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 588.080183][ T5984] R13: 0000000000000000 R14: 000055ad7d89b288 R15: 00007f8b9918e39c [ 588.088310][ T5984] [ 588.091878][ T5984] Kernel Offset: disabled [ 588.096251][ T5984] Rebooting in 86400 seconds..