last executing test programs: 4m21.590585175s ago: executing program 2 (id=3): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0x8) 4m21.145849073s ago: executing program 2 (id=7): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) write(r4, &(0x7f0000002f40)="34343130302c34383030302c38383230302c393630303010", 0x18) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000000000)) read$FUSE(r4, 0x0, 0x0) 4m19.454131034s ago: executing program 2 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() timer_settime(0x0, 0x1, &(0x7f0000000300), 0x0) listen(0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r3, &(0x7f0000000040), 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) dup2(r4, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) 4m17.775030697s ago: executing program 2 (id=11): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x200}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5026, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r2, &(0x7f0000000000)=""/121, 0x79) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f00000003c0)=0x101, 0x4) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) process_vm_readv(0x0, &(0x7f0000000980), 0x0, &(0x7f0000000500), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) clock_gettime(0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x8030, 0xffffffff, {}, {0x0, 0xc, 0xf1, 0xa, 0x0, 0x1, "bf231e4b"}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000340)={0x5}) 4m0.879404405s ago: executing program 32 (id=11): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x200}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5026, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r2, &(0x7f0000000000)=""/121, 0x79) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f00000003c0)=0x101, 0x4) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) process_vm_readv(0x0, &(0x7f0000000980), 0x0, &(0x7f0000000500), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) clock_gettime(0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x8030, 0xffffffff, {}, {0x0, 0xc, 0xf1, 0xa, 0x0, 0x1, "bf231e4b"}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000340)={0x5}) 3m14.197899836s ago: executing program 1 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 3m11.687052509s ago: executing program 1 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) 3m10.616402669s ago: executing program 1 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {0x0}, 0x96000}) 3m9.537331264s ago: executing program 1 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) bind$inet(r3, 0x0, 0x41) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000a1ff00000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x4, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRESDEC=r4], 0x48) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x1010c0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000840), &(0x7f0000000140)=r8}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbb00bbbbbb0180c20000010800001c0066000007029078ac141426ac1414aa13049078ac1414230000"], 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) 3m8.266164264s ago: executing program 1 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() timer_settime(0x0, 0x1, &(0x7f0000000300), 0x0) listen(0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r3, &(0x7f0000000040)='add s', 0x5) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) dup2(r4, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) 3m5.96321259s ago: executing program 1 (id=82): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9a3ec624040008000300"/28], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(r1, 0x3, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) sendmmsg(0xffffffffffffffff, &(0x7f0000003240), 0x4000000000000e4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) linkat(r2, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1600) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x5, 0x84) 2m50.319513743s ago: executing program 33 (id=82): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9a3ec624040008000300"/28], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(r1, 0x3, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) sendmmsg(0xffffffffffffffff, &(0x7f0000003240), 0x4000000000000e4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) linkat(r2, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1600) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x5, 0x84) 47.565985204s ago: executing program 3 (id=447): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x5f, 0xe]}}, &(0x7f0000000480)=""/171, 0x29, 0xab, 0x1}, 0x28) 47.298172346s ago: executing program 3 (id=450): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="06000000080000000100003b0600000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 47.01847866s ago: executing program 3 (id=453): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r0, 0x40044591, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) 46.886439222s ago: executing program 3 (id=454): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0xc, &(0x7f0000000300), 0x2, 0x53a, &(0x7f00000011c0)="$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") mknodat(0xffffffffffffffff, 0x0, 0x81c0, 0x1000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 45.973639254s ago: executing program 3 (id=457): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") chdir(&(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2200002, 0x0) 44.635725513s ago: executing program 3 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 43.958119226s ago: executing program 34 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 12.334102129s ago: executing program 5 (id=572): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200010, &(0x7f0000000500)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noquota}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x1, 0x4c3, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000840)=0x6, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}, "001863714ab99043"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80, 0xc2) futimesat(r5, &(0x7f00000004c0)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d011f0005000d"], 0x34}}, 0x0) 11.020215124s ago: executing program 5 (id=575): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100000, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x4, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x152e, &(0x7f0000002080)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x121000) r6 = fcntl$dupfd(r4, 0x406, r4) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000003880)=""/4089, 0xa83}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000007c0)={0xede, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 8.147091958s ago: executing program 5 (id=577): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200010, &(0x7f0000000500)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noquota}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x1, 0x4c3, &(0x7f0000000f40)="$eJzs3M9vVNUeAPDvnWlLCzzax+OhIJgKGok/WlpQWbhA48KFJia6wGVtCyIDNbQmQBopxuDSkLhzYVyaGP8Ad26MujAmbjUxrgwJ0W4ormrunXvLdDotTGk72Pl8kumcc8+ZnnPuPWfm3HvmTgBtqz/9k0Rsj4hfIqK3Gl2cob/6NDc7PXprdno0ifn51/9Msnw3Z6dHi6zF67blkUOliNKHSRxPlpY7efHSmZFKZfx8FuuJwamz7w5OXrz09OmzI6fGT42fGz527OiRoeeeHX5mTdqZtuvm3vcn9u15+c1rr46euPbW91+m1dq9v5pe2447utWgQQ30p3vtr/lMfdpjTdT9/vf7V7WxpKN1NaE55YhID1dnNv57oxy3D15vfPpBSysHrKv0s2nL8skz88AmlkSrawC0RvFBn57/Fo8NmnrcF268ENGVh+dmp0fnFtrfEaV8e+c6lt8fESdm/v4sfUSz1yEAAFYhm9s8FbEl6ud/pdidPVfXOnbkayh9EfHfiNgZEf+LiF0R8f+ILO8DEfFg9cXzvXdZfn9dfOn8p3S9YZ3XSDr/e75m7jdX0/78qa+cx/6Ttb8zOXm6Mn443yeHonNLGh9aoYxvXvr54+XSaud/6SMtv5gL5hW43lF3gW5sZGpkrXbCjSsRezsatT9ZWAlIe8CeiNjb3L/eUQROP/HFvuUy3bn9K1iDdab5zyMerx7/mahrfyENrbA+OdgdlfHDg0WvWOqHn66+tlz599T+NXDjwEPVwO3jX5ejpqNVKuPnJ5sv4+qvHy17TrPa/t+VvJGtWf/4dnXbhZGpqfNDEV3JK1m8OKfLtg/ffu2FkameNF7kT/v/oYONx//O/DXp8U/3UtqJ90fEw/m2tO6PRMSBiDi4Qvu/e/HRd1ZofxJJtO74X4kYa/j+t9D/+5La9fpVBMpnvv16uRXzuzv+R2Mme6+tyt7/7qBBLYqURUn3sOsAAADgX6MUEdsjKQ1Uw/3bo1QaGKh+h39XbC1VJiannjw58d65seo9An3RWSqudPXWXA8dSmby/5jFLw/n14qL9CP5deNPyj1ZfGB0ojLW4rZDu9u2ePxHMf5Tf5RbXTtg3blfC9pX/fgvNcjTtUF1ATZWNv63rpzHuQBsTos//7sj+0UOoC04/4f21Wj8X66Lm//D5rR0/P/W4CfrgM3I/B/al/EP7cv4h7bUzO38cXy5pO6IaOZnAYqbBe669Ly2Mwtbuhvc4b/GgZhZ9yJWGSg3Siq+oLWepffEpTNd+ZYorWdLi9+mbJBUbrKzbYpAOmI2tlBf+QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADaHfwIAAP//jo/XvA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000840)=0x6, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d011f0005000d"], 0x34}}, 0x0) 7.474028849s ago: executing program 4 (id=579): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f00000005c0), 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) write$vga_arbiter(r1, &(0x7f0000000100)=@unlock_all, 0xb) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef) 6.642609861s ago: executing program 4 (id=581): syz_usb_connect(0x2, 0x8c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100371192440560819ac2c790102030109027a0001f80460f30904920402d6"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 6.461829486s ago: executing program 0 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x16) 6.298029468s ago: executing program 0 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6ac}, @chandef_params]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.101250403s ago: executing program 0 (id=584): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8d00) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0xfffffc79}, 0x58) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5.78698721s ago: executing program 5 (id=586): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000003c0)='.\x00', 0x28384bb, &(0x7f0000003780)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r5, @ANYRES8, @ANYRESOCT=0x0, @ANYBLOB="688968c7c329966da99249b32ed51913c99ee464790cd3ddeeeba0469c15712c28ed33f49eaf52b9a00430b80bcf83f540f3b98d880db3610d70ba23a4de2f1d425a2e0d8a9215c983fbd8ab0e0d59ec0ca60c74e4c9773f31dce80c2c859d342b677fe830ebe95c84ae74956acf5a04cb253e88fe594b9ef6bffefd7d068651f68cb061ae931129f421b95cded77736b3be21e60b07c3b5f795bc02071a80dab84220107c4befdc28a23d00c410570778c1dbe7598fe024da3a0ebdcc8b3358e7f8c8695b445290587d80c350d8b95970a2541c599f38c6a04a8242cedaa16da186495477b72f4092e7184c63556c9a65ff6584983b932282d43ce2be4ebc3169073be53046c33dccebb0a6e82ac4cf404b98b33a7e62f7401a2a3b7b18c95b83dd89703c32e8372cf03a6315cb9000cb00a2b0c660295826975c1996c980474545dee3970475dafc5792580170191a6a3dbc609ac7aa1303bfebf212734088800ea51558d9e4d0f3ed30d986fc75af6e96e30a68cf15600f9857ee27b8cb177f4c8a4e4fd3de6501267e13eb882370b0f673358079cf07511774f5f4f9b083e39505366da5644ff57c40943a3c761342e1dedd92f0af2f4b8906e0063eecd68eb11b02a1b3944a48b9a414d43393bed79d03e6f51ac4435a7c040e47a355462be46266046a987a4ddec494cbc67de61b98c0c8ae2ddfe2131642357d0dd6729631332651cf46e997e1b6793245b3ad25371bde80c8f7edbe8758e0ffd33e104b3a60515b344d09b16d95932bec7907b2d3706f809bf32f18e83a33249f7c45db21652845ed0dc5d03899ec27689bb117da00f6dd13364d44ae4fd83adc8c81a4d2058089313553a64d731ac82b860a2665721e212cb7d2bb9334cdeef7289d9ca28b82b9bb88b664405063bdaaad0c0b39da135b0335ecd6bb4a22f11aa666cadf03fec7964352032ac383024de5bc2af009e9ffe4e5962bde896d1ad770a17bc2c90fc87b4c33ddbf1f70b06142b7fccc39195bed518b0946b7221a5b85894b88feb27a0644b96413d8e2e6bfd908054dca6d6dc71f900f0ae0ccaf4ca035293ba83c149e0a078550160745d5144e3471198db531f32023a69f8205659d9aa5eda07722d2594f6b3e4ba8b8b82dafb29f57baf094fbed5334b0636ecd591a8efb28e726afdc851731349d88913ae14441a6fe64d90f90990c1b573ae39a05b853c0313ca0500238f5553703ffabcccc3c8640feeb28756ed088ef3391860ae7b0d6af500a63e3c3f6f649987ff8f39d3f5351e2e313af4dc159e72c3ef2f351ea1d7117d1dd314368134b920b3510a3873f9ec572a94712ee1dd5f643d666cbd00562c3e3b4d8835cb70f698f87df385fcc32dedddc5ccb34ae46287b78c204871a89ec395253b2885aa2aa3ecb357fbebd7e2c490e96d1d908ccdc9643bd9e0a833713d216150d4f9f1a082560e31707183a2dc3cd55918b301d4531aca2004f73bb40497c3cd9c8ba74b598237537a9d49692e715b3cb6f4d924b0eff589315055b24890e48cb18c87b2aebb374b24ec4d6150692ef9b5a66b2ab5f04d0137867f7ceaac2a77150854d9cee91bf3cd43240fa338e0f8a90d5540b410ff6062d8de1754bf4dae30364b4dbac9939dd5720564a433a7cccfd2a1be914c4d4150368983eefa8e4e8e6ae814fc8ef09ce52e0fa844e1e22e093414e271e8dd9e3a907c9cffac650958609e5007d4efdcc3eee278e7bb5706cb729a607912c2482c3e285ed6793409c1c976cf1d68783fcde9a768c2125290efcaa4cbd50a4961583bc85156f9c11c0945c0b1ac1536eada7f4821cf86841f396bdb9f278c7dca5e016e0b679f7ab15b1fbe17e88e9a86f3a69cfa892d5868390ead5d03b226ffd355c4e9dd6a17ac7a4523352251704a65e83732243191d52ace478c8cb20ddb05b8bd975200d173fb261ac87c0ae38422d051c29c2cbe54d11d28bb33a8837addd4b55125383f94dd5398e0d39f1c2965de77e757039480e9367d28135c72835053f470626c851ae019ab3ac23f60815bb02cc714e8042f0033de865e9cda85d8e841c9bd550561735cb444dd3eb591669ea06b5f87034201e753c77878736aea2ed3e31f25e78676301c225ff85ca63d515c4680117e102f603c4aae4cad96d1950b2476a53689122483c57f261481d552282f7beb7ae00de69534ff0281f3eb309b765d1d1ec9daba527487a58003b7112f5be92d5c3e0c3f8245cf74aee308ac35508fbe5870edd3395139b71a22dbab48897ab6c7253cf712eca95e2b50f299696453859276df1c7ec9e28ae37e5c896b89c42759fa270d0a6dd3362ae88b6e84566a5fea5ae08858823d7afc0e08173dd3d28074e689a68859c0c9285d79cb80c0883b80560d70f91bd35a97a77f9dc554d981564ac15b3465adcf40a817cb3d07733f6f2927651dad6f6a9097c9fce7e5029e5dbe7ec8ad6865dcaf187a44a5f52aad2533885d251e911c1648dcef837826c6f2b75917eead7e9d39acecc6d54b411e500c8b077528c99ed982c4e13d500658c33fcd271705be4cb44f2251ef27dbe0f4c3409c36ad09deef45d2cda98331b413da4c751acb8759edac31df7005d52d372df772fe9fbe47b46cccb0050772e24f484b829f0e5b7318626ea40c9f833bd2d06b0da8bef1e038f5d04abb28fae7a4cbd2babba6565045418fca94d3293ee8a509e514f2ec7dcd2e9f18591d83b2b813698dd55c34646adf53cd010b4dea2cef3bacebaaab31138e35a0fdb5022a10bb2444fd75dde125ad603d352755bb054160dc13b06c0ea36378699dc9242194303650104155f2d56e6c7e5e0d2d32232b0217b970f781f604f6f22c0cf8bf2e0e79f575486b039f66acd16fe5d4abd1e2c10442b0dcdf2e856d198dea23453d6030599dc3c5a424b26b06aaeab51bca468c717be44463ee2addc2bd3eaedf3306baa463bf257d39c974a6b0c8a9193a8a0a58976ac3d4002afd9e260027433d569e33cd9cec5bee95f1d7d48baca97b517cdf581e347ff4fdb486d3888afe2bd0c70032a7c183d414366bc1183609a18f76352f334bd653fc62bf168df0857ce4e49c3ae4679b50c5cad478e8dbdc3395f692df0f134e87368aac467bc2151f69d64e8994f8c69216179f15513a9490efd7931edff0c16f8236cbc6f95ebfb53c5e6b49f6e696f72ed20ccff8191e7c84b89ed25dcc51f0dd85aa52208d9228bcd18a617a4a1fdf6fc087b2a44889153b7f631158a302bb1f04723639772af6a33e05756dc01d8736509a110129826e64c55e070d3e563bedbf42ebbd8902ca490f29d9e1b0e38c686f83b7d7ebc402bb53dfb304cb3bb616b8f81ed78fabd093a1f8f60607fd80ece1c2d9671e875fb86e135c973bb5eea3773f27eae47fe9388883d5066af8bf174f93beaf697fc17c7cfdbd3c76a0c9a6e1dfeef2cc59e3edf49100a69d397295dbe2b4fbab37b36467d33be93c1c082d75dfdbfbcb1b248f2885a13a823bb0e5ea874bd9b794f58a678efd8b8531cc6250d2b80038ef6073aa834975304612ef4ccb9ef0383764bf21735e3674a3b586472b2a43bad121d6029dfb16b2272154aa86a5a01aba715469cd350cbb5dae0510ce3cb4ce593439707ce8ef39d8a01b4c39998be48c7c577f51b5d17c6380ffaffe634532cdc2a4b4e5af6cf003c4a86c0d5008efac2dcc50c8aad163b6e8835a8b80a09709d28ca0c9281e186a9262f818ede383618ea1a7e4a9d2e52682fdf67fbd0cbc5be78011fbe7223b507849ba2229dcf6aeb675aa0468197a49139ce9fcd25d8e9c867c10e0bce2a9a07a4e4d92a8981c06e3fe369c0bc48a9d647023f1e2ec4ee89e4198257018452ab209f55a5b88a5467c915e70a3d5ba8729657cbe0fd6c7d365bc8aaa26cf0f5955f2de11eafe19ea7ed6b8c9c6855b8432759e63599f75a51c494b5c67c5c1c579706ac003f62ffe771878e1ad1e65496dabf0f10277b52a1457a2f3623dd35d63b594261f77496f491bdc9f4ce9b0995ad6e71322e83b99b8dac2c958ac686392530c6ff67c53af428b4397336bbef0e15a42be3dddab18690f56b232e4f13316b90b0d3fd939bc3551efb211db10c38996e52e42650e7a04bca71d5279f06c5ce3881770e69f2ab0bcee28f91578773e279ca5dfa2dfb0f7c59f83e628fd06a1731091d4be219147da5bc3e5881e6fc723366c7a3833ecaa85f73ca203c21b8a46330d6901639e90fc54f4bcabde33de29492d354ff88e7ef51523870ece79ae69092b6d6956895fd2ba47d6ad7fd90037d2cd14b7480dc87377c97053cede2a1e68535ef4c73919741c874593d1d9f2ef5036bbdf01547d9fae1a2c2f4a162f58334ccaba0caaa48be6a08ee76fafbfc4885c265866a9d2e3af16147d2fc38897a286036b1f9058da4e10ffcd402df9d98e26b3b15d858555193eadf592e0459be0f85e48982c7cc2cc9bcefdd38928878747c20e327de5b5ced8a15ba3b0ded5c07eaa36e18ad1841e6cfecedd716bfcd1eb6ca3a451cf65928d85f9194d2faa34fcbebf4f0d8d488e4a6559dfe58a0bfea1427bc8041df8a373e1fde2b0d2bf3c244ffd99b29e427aa10f972a550980c5f00a155d4b2eb2f83c16f80c467d884b62fa3bfeaef429098d4cf157d2068865db88fc05dcf560c3672a804dea175dca8b5520ce2c0c0f0f739dfaf1234e5e104b4f9ddd557aa1998c9f9ace83d3e849abbf61257de5cc1041efe6b6738b9c063313829d62673f261d6f9e30b5a28de6734a4032d5808bbd65ab6001623926fafc1579103be9a426a5e6b192b99e5499922cd3afc49e0e36b64d133ef09c468ce3601372bc741fc62ec9a24ba654ec5d96bf1b6d7b89c2550bb251e4fe87b5e8f366e5d0aa55944d670957326fc4686cd867c052e6ed030cd5f934ea0a97725862da59d7b80ce40ab12f669cf6ae95093e7a7c280d560dbac54ef2b16c57b7dd7e995e77ae7f456fcd1afff38738919836d699300df80cdbf1519f6f4a7e1a2e1b05d9fce66493acffa64a080945272a3a99aa8d5da74134a8ef48e0050d5dba44b3991d68b1f34bb17750167b69815b794ca32c7e51dfa656386dce9cbd1d058efbb7ff94730aff9750ae5064ec84c773ac6a1bfd4511770cbadf7740fd855afb2a924e0b4908452dc96a4e2b80918a59e0ecb229aff62b7c49c89b85a8fe9b55612e281d543c1862e597296e48cf8357ad7cce27386ab0450639420b6aed3873ff15c5306f28e86988e2157d962a3bec6e8686397493b53d2459753c49529f1089b545e83bf641aadb8c252f96786ab6bb6276448ad98fc9bf6205e52e25dcdb3cacea1db314d66c10f2b39042282687b58ad949328da25e9be8716f841a7d04ea8afb0f739a9a61ea6aec8ee4a316dcda54d78a2ee2ee1259863f920543c86cb651ae9b464ac51696d1f9b2c439820a325d5babbb2c944b48a1a51ffc3f81559ea9fe4b214a1bcd5e44a44c14f8700fbaea56f3cd8c883c98a88056ed4260406fb237115e0888a19d08c98e9ec800b02bf8ce4a0a487bd328ba8d9c7990ecc9e7ce322cdb4982bb07085c7f7df29a5ac696ac1de9648df849ac0aa4fa5f0296ea4adf25566e781fd346eef499515082c421eb55cc1c9e83d98a445e94912651657eb26fddab499bfeb7131390e2e4bbf42979e3e672bc9ece0a7cb176136bdaca3e1efa544108496c0b185ac17bcc9be69a2863d0182098be05e14b462b1b9d6d86253edd8ff4bbb5ce5845d7e", @ANYRESDEC=0x0, @ANYRESHEX=r4, @ANYRES8, @ANYRESOCT=r4, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000)) r6 = syz_clone(0x36160a00, 0x0, 0xfc6c, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x10374a2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380906000300000008001b00000000001c0016801800018014000a0002000000000000000300322800000000"], 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000800)='./file1\x00', 0x1000080, &(0x7f0000000180)=ANY=[@ANYBLOB="0017b0615ea1def37e0058855f3cbcb7a66a0c69522e8e82a984cc8a80b6acf8061b28d6a835c49830f08c01afd4327410bb11e0fa68993217daaba5c6a5dfb2fb0038a5da43b38209017d4610ade811c43f3b8f28fdcadcebba31dab440f05639"], 0x12, 0x32b, &(0x7f0000000840)="$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") 4.886613926s ago: executing program 0 (id=587): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000100)=0x1b) 4.827641829s ago: executing program 5 (id=588): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="401106"], 0x0, 0x0}) 4.39651965s ago: executing program 5 (id=589): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') pread64(r0, &(0x7f0000001340)=""/102385, 0x18ff1, 0x12c) 4.384053893s ago: executing program 4 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0xfffc, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x800000, 0x7fffffffffffffff, 0xf, 0x0, 0x7}, {0x4, 0x401}, 0x5, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@empty, 0x0, 0x1, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.197688869s ago: executing program 4 (id=591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0xff, 0x9, 0x1, 0xfffd}, 0x20) setreuid(0x0, 0xee01) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r1, 0x400, 0x1) setresuid(0xee01, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa00000000000000000000000001000000000000000300000000d5000009000000000001000000000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000ffffffffffffffff00000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) 3.09449429s ago: executing program 6 (id=592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2010808, &(0x7f0000000340)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}, {@nombcache}, {@usrjquota}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r4, 0x400, 0x0) 2.869836319s ago: executing program 0 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.953239251s ago: executing program 4 (id=594): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000e40), 0x0, 0x4000880) socket$pptp(0x18, 0x1, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00'}) listen(0xffffffffffffffff, 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={0x18, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2a442, 0x190) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r3, 0x0) r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x610003d5) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x400000c0) readlink(&(0x7f0000000940)='./file0\x00', 0x0, 0x0) 1.763943058s ago: executing program 6 (id=595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x13000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000180)={0x1ff8, 0x0, 0x1}) 1.546929237s ago: executing program 0 (id=596): r0 = userfaultfd(0x80001) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000005800)={[{@discard_unit_section}, {@flush_merge, 0x0}, {@norecovery}, {@noacl}, {@inline_xattr}, {@jqfmt_vfsv0}, {@lazytime}, {@fsync_mode_strict}, {@norecovery}, {@four_active_logs}, {@barrier}, {@barrier}, {@memory_low}, {@discard}], [{@uid_eq}]}, 0xf7, 0x5548, &(0x7f0000000180)="$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") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0xc}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 1.202493879s ago: executing program 6 (id=597): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x40080) 365.940437ms ago: executing program 6 (id=598): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 208.809616ms ago: executing program 6 (id=599): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 40.463076ms ago: executing program 6 (id=600): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c0}, 0x4040805) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000003c0)='.\x00', 0x28384bb, &(0x7f0000003780)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r6, @ANYRES8, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX=r5, @ANYRES8, @ANYRESOCT=r5, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000)) r7 = syz_clone(0x36160a00, 0x0, 0xfc6c, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x10374a2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000800)='./file1\x00', 0x1000080, &(0x7f0000000180)=ANY=[@ANYBLOB="0017b0615ea1def37e0058855f3cbcb7a66a0c69522e8e82a984cc8a80b6acf8061b28d6a835c49830f08c01afd4327410bb11e0fa68993217daaba5c6a5dfb2fb0038a5da43b38209017d4610ade811c43f3b8f28fdcadcebba31dab440f05639"], 0x12, 0x32b, &(0x7f0000000840)="$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") 0s ago: executing program 4 (id=601): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) kernel console output (not intermixed with test programs): slave_0 [ 175.142132][ T6323] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 175.142132][ T6323] program syz.4.88 not setting count and/or reply_len properly [ 175.224298][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.322889][ T1388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.324174][ T1388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.338216][ T1388] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.498126][ T1406] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.504790][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 175.727282][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 176.767692][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 176.769789][ T32] usb 1-1: New USB device found: idVendor=0d46, idProduct=2011, bcdDevice=1.00 [ 176.776536][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 176.776629][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.776798][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.470470][ T32] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 177.470642][ T5926] ieee80211 phy13: Failed to add default virtual iface [ 177.500186][ T32] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 177.771420][ T6332] jffs2: notice: (6332) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 179.124102][ T5720] usb 1-1: USB disconnect, device number 2 [ 179.139512][ T5720] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 179.140132][ T5720] kobil_sct 1-1:1.0: device disconnected [ 179.243415][ T4930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.245686][ T4930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.264230][ T4930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.279428][ T4930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.280133][ T4930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.255471][ T6377] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 180.255471][ T6377] program syz.3.95 not setting count and/or reply_len properly [ 181.297364][ T5617] Bluetooth: hci4: command tx timeout [ 181.575211][ T6218] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.665561][ T6376] syz.3.95 (6376): drop_caches: 2 [ 181.773466][ T6218] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.066723][ T6218] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.389795][ T5617] Bluetooth: hci4: command tx timeout [ 185.318964][ T990] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.554414][ T5617] Bluetooth: hci4: command tx timeout [ 185.717446][ T990] usb 5-1: Using ep0 maxpacket: 8 [ 185.755698][ T990] usb 5-1: New USB device found: idVendor=0d46, idProduct=2011, bcdDevice=1.00 [ 185.776623][ T990] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 185.776656][ T990] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.776706][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.811027][ T990] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected [ 185.842320][ T990] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 185.960434][ T6218] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.148780][ T6397] jffs2: notice: (6397) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.153364][ T6412] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 186.153364][ T6412] program syz.3.99 not setting count and/or reply_len properly [ 186.459386][ T4930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.468890][ T4930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.484571][ T4930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.520432][ T4930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.544584][ T4930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.617597][ T4930] Bluetooth: hci4: command tx timeout [ 187.624105][ T990] usb 5-1: USB disconnect, device number 2 [ 187.653678][ T990] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 187.654321][ T990] kobil_sct 5-1:1.0: device disconnected [ 188.247922][ T32] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.497434][ T5720] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 188.649068][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 188.666569][ T6434] ecryptfs_get_tree: kern_path() failed [ 188.668982][ T5720] usb 1-1: New USB device found: idVendor=0d46, idProduct=2011, bcdDevice=1.00 [ 188.694673][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 188.694749][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.694909][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.710363][ T32] usb 4-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 188.789309][ T4930] Bluetooth: hci5: command tx timeout [ 189.020718][ T32] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.020764][ T32] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.020787][ T32] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.020815][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.020850][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.249320][ T6434] Reading sb failed; rc = [-2] [ 189.775447][ T5720] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 189.930576][ T32] usb 4-1: config 0 descriptor?? [ 189.967348][ T5720] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 189.973039][ T6437] jffs2: notice: (6437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 190.817498][ T4930] Bluetooth: hci5: command tx timeout [ 191.261112][ T6218] bridge_slave_1: left allmulticast mode [ 191.261142][ T6218] bridge_slave_1: left promiscuous mode [ 191.273395][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.291936][ T32] elan 0003:04F3:074D.0002: ignoring exceeding usage max [ 191.294491][ T32] elan 0003:04F3:074D.0002: unknown main item tag 0x0 [ 191.294524][ T32] elan 0003:04F3:074D.0002: unbalanced collection at end of report description [ 191.295526][ T32] elan 0003:04F3:074D.0002: Hid Parse failed [ 191.295630][ T32] elan 0003:04F3:074D.0002: probe with driver elan failed with error -22 [ 191.302593][ T32] usb 4-1: USB disconnect, device number 4 [ 191.361877][ T5744] usb 1-1: USB disconnect, device number 3 [ 191.402212][ T6218] bridge_slave_0: left allmulticast mode [ 191.402240][ T6218] bridge_slave_0: left promiscuous mode [ 191.402464][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.539141][ T5744] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 191.539811][ T5744] kobil_sct 1-1:1.0: device disconnected [ 192.561855][ T6447] syz.4.105 (6447): drop_caches: 2 [ 192.898139][ T4930] Bluetooth: hci5: command tx timeout [ 193.998459][ T5744] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 194.166617][ T5744] usb 5-1: Using ep0 maxpacket: 32 [ 194.175106][ T5744] usb 5-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 194.231015][ T5744] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.231088][ T5744] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.232390][ T5744] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 194.232531][ T5744] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 194.232586][ T5744] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.232658][ T5744] usb 5-1: config 1 interface 1 has no altsetting 0 [ 194.247710][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.247790][ T5744] usb 5-1: Product: syz [ 194.247807][ T5744] usb 5-1: Manufacturer: syz [ 194.247861][ T5744] usb 5-1: SerialNumber: syz [ 194.343227][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.343316][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.575083][ T6218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.627369][ T6218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.657656][ T6218] bond0 (unregistering): Released all slaves [ 194.977457][ T4930] Bluetooth: hci5: command tx timeout [ 195.049529][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.106'. [ 195.283909][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.318437][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.410849][ T6464] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 195.410879][ T6464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 195.410975][ T6464] vhci_hcd vhci_hcd.0: Device attached [ 195.441345][ T6464] vhci_hcd vhci_hcd.0: port 0 already used [ 195.449034][ T6471] vhci_hcd: connection closed [ 195.453161][ T13] vhci_hcd vhci_hcd.4: stop threads [ 195.453187][ T13] vhci_hcd vhci_hcd.4: release socket [ 195.453207][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 195.514022][ T6218] hsr_slave_0: left promiscuous mode [ 195.516635][ T6218] hsr_slave_1: left promiscuous mode [ 196.064872][ T6478] overlayfs: missing 'lowerdir' [ 197.279670][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.279745][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.411708][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.411731][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.516118][ T6218] veth1_macvtap: left promiscuous mode [ 197.516160][ T6218] veth0_macvtap: left promiscuous mode [ 197.516253][ T6218] veth1_vlan: left promiscuous mode [ 197.516320][ T6218] veth0_vlan: left promiscuous mode [ 197.563524][ T5744] usb 5-1: selecting invalid altsetting 0 [ 197.564313][ T5744] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 197.564757][ T5744] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 197.681032][ T5744] usb 5-1: USB disconnect, device number 3 [ 197.764530][ T6483] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 197.764530][ T6483] program syz.3.110 not setting count and/or reply_len properly [ 198.335478][ T6494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (474742790 ns). Using initial count to start timer. [ 200.711920][ T6514] program syz.4.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.247965][ T6218] team0 (unregistering): Port device team_slave_1 removed [ 203.320335][ T6218] team0 (unregistering): Port device team_slave_0 removed [ 203.540312][ T6523] syz.4.116 (6523): drop_caches: 2 [ 206.353614][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 206.668480][ T6538] overlayfs: overlapping lowerdir path [ 206.768586][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 206.770501][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 207.535936][ T6537] program syz.3.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.817487][ T6548] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 207.817487][ T6548] program syz.4.121 not setting count and/or reply_len properly [ 207.883572][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.902235][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.904081][ T6356] bridge_slave_0: entered allmulticast mode [ 207.980597][ T6356] bridge_slave_0: entered promiscuous mode [ 208.046564][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.046672][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.046840][ T6356] bridge_slave_1: entered allmulticast mode [ 208.072927][ T6356] bridge_slave_1: entered promiscuous mode [ 208.562203][ T6570] Zero length message leads to an empty skb [ 210.638586][ T6218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.694978][ T6578] syz.3.126 (6578): drop_caches: 2 [ 212.896294][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.989977][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'. [ 213.905294][ T6218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.942935][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.037476][ T6356] team0: Port device team_slave_0 added [ 214.233666][ T6218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.285472][ T6356] team0: Port device team_slave_1 added [ 214.343988][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.344005][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.344030][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.903144][ T6606] random: crng reseeded on system resumption [ 216.638295][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.638313][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.638342][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.359103][ T6218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.659092][ T6356] hsr_slave_0: entered promiscuous mode [ 218.662865][ T6356] hsr_slave_1: entered promiscuous mode [ 218.663577][ T6356] debugfs: 'hsr0' already exists in 'hsr' [ 218.663595][ T6356] Cannot create hsr debugfs directory [ 218.792394][ T6626] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 218.792394][ T6626] program syz.3.132 not setting count and/or reply_len properly [ 219.113242][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 219.622159][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.622880][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.623947][ T6417] bridge_slave_0: entered allmulticast mode [ 219.714916][ T6417] bridge_slave_0: entered promiscuous mode [ 219.816235][ T33] audit: type=1326 audit(1790393467.281:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.4.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bb1b9e159 code=0x0 [ 220.122459][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.122544][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.122637][ T6417] bridge_slave_1: entered allmulticast mode [ 220.126466][ T6417] bridge_slave_1: entered promiscuous mode [ 220.821500][ T6218] bridge_slave_1: left allmulticast mode [ 220.821550][ T6218] bridge_slave_1: left promiscuous mode [ 220.823272][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.886128][ T6218] bridge_slave_0: left allmulticast mode [ 220.886150][ T6218] bridge_slave_0: left promiscuous mode [ 220.886311][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.454773][ T6218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.283083][ T6218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.322230][ T6218] bond0 (unregistering): Released all slaves [ 225.682001][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.701092][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.114421][ T6417] team0: Port device team_slave_0 added [ 226.166619][ T6417] team0: Port device team_slave_1 added [ 226.278750][ T6681] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 226.278750][ T6681] program syz.0.136 not setting count and/or reply_len properly [ 227.533065][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.533084][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.533112][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.702674][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.702688][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.702706][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.093802][ T6693] ecryptfs_get_tree: kern_path() failed [ 229.132490][ T6693] Reading sb failed; rc = [-2] [ 229.354309][ T6417] hsr_slave_0: entered promiscuous mode [ 229.368613][ T6417] hsr_slave_1: entered promiscuous mode [ 229.370853][ T6417] debugfs: 'hsr0' already exists in 'hsr' [ 229.370872][ T6417] Cannot create hsr debugfs directory [ 229.573144][ T6218] hsr_slave_0: left promiscuous mode [ 229.575608][ T6218] hsr_slave_1: left promiscuous mode [ 229.576520][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.576541][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.634461][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.634486][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.668839][ T6699] nbd3: detected capacity change from 0 to 18 [ 229.669346][ T54] block nbd3: Receive control failed (result -107) [ 229.691429][ T28] block nbd3: Dead connection, failed to find a fallback [ 229.691467][ T28] block nbd3: shutting down sockets [ 229.691538][ T28] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.691627][ T28] Buffer I/O error on dev nbd3, logical block 0, async page read [ 229.735569][ T6699] nbd3: detected capacity change from 18 to 8589934592 [ 229.736968][ T6592] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.737002][ T6592] Buffer I/O error on dev nbd3, logical block 0, async page read [ 229.742813][ T6218] veth1_macvtap: left promiscuous mode [ 229.742914][ T6218] veth0_macvtap: left promiscuous mode [ 229.743197][ T6218] veth1_vlan: left promiscuous mode [ 229.743393][ T6218] veth0_vlan: left promiscuous mode [ 229.772505][ T28] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.772631][ T28] Buffer I/O error on dev nbd3, logical block 0, async page read [ 229.773104][ T28] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.773176][ T28] Buffer I/O error on dev nbd3, logical block 0, async page read [ 229.773455][ T28] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.773525][ T28] Buffer I/O error on dev nbd3, logical block 0, async page read [ 229.774509][ T28] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.776858][ T28] Buffer I/O error on dev nbd3, logical block 0, async page read [ 229.783640][ T28] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.783783][ T28] Buffer I/O error on dev nbd3, logical block 0, async page read [ 229.788193][ T28] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.788277][ T28] Buffer I/O error on dev nbd3, logical block 0, async page read [ 229.795096][ T5853] ldm_validate_partition_table(): Disk read failed. [ 229.795512][ T28] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.795596][ T28] Buffer I/O error on dev nbd3, logical block 0, async page read [ 229.796042][ T28] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.796107][ T28] Buffer I/O error on dev nbd3, logical block 0, async page read [ 229.798424][ T5853] Dev nbd3: unable to read RDB block 0 [ 229.808979][ T5853] nbd3: unable to read partition table [ 229.955817][ T5853] ldm_validate_partition_table(): Disk read failed. [ 229.956217][ T5853] Dev nbd3: unable to read RDB block 0 [ 229.970136][ T5853] nbd3: unable to read partition table [ 230.062089][ T5853] ldm_validate_partition_table(): Disk read failed. [ 230.062461][ T5853] Dev nbd3: unable to read RDB block 0 [ 230.062974][ T5853] nbd3: unable to read partition table [ 230.088839][ T5853] ldm_validate_partition_table(): Disk read failed. [ 230.089282][ T5853] Dev nbd3: unable to read RDB block 0 [ 230.089853][ T5853] nbd3: unable to read partition table [ 232.147903][ T6218] team0 (unregistering): Port device team_slave_1 removed [ 232.199740][ T6218] team0 (unregistering): Port device team_slave_0 removed [ 235.417729][ T6356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.448507][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.465347][ T6356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.491586][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.498086][ T6356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.056359][ T6730] overlayfs: missing 'lowerdir' [ 237.033089][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.054702][ T6356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.091428][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.137807][ T6356] kthread_run failed with err -4 [ 237.407310][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.409786][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.410875][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.411860][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.413006][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.549579][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 237.718700][ T9] usb 1-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 237.725648][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 237.725676][ T9] usb 1-1: config 0 has no interface number 0 [ 237.725717][ T9] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.772620][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 237.772651][ T9] usb 1-1: Product: syz [ 237.772666][ T9] usb 1-1: SerialNumber: syz [ 237.805543][ T9] usb 1-1: config 0 descriptor?? [ 237.832556][ T6417] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.834403][ T9] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 237.873621][ T6417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.884941][ T6417] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.916194][ T6417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.916856][ T6417] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.951893][ T6417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.964638][ T6417] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.985834][ T6417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.818285][ T6772] ecryptfs_get_tree: kern_path() failed [ 239.034869][ T6772] Reading sb failed; rc = [-2] [ 239.473768][ T54] Bluetooth: hci2: command tx timeout [ 239.561143][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 239.616836][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.936849][ T6417] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.974666][ T6779] caif0: tun_chr_ioctl cmd 1074025681 [ 239.976604][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.976712][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.040100][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.040202][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.252813][ T5720] usb 1-1: USB disconnect, device number 4 [ 240.988644][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 241.537844][ T54] Bluetooth: hci2: command tx timeout [ 242.684316][ T6865] 6±ÿ: renamed from team_slave_1 (while UP) [ 242.719316][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 242.772928][ T1019] bridge_slave_1: left allmulticast mode [ 242.772956][ T1019] bridge_slave_1: left promiscuous mode [ 242.773172][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.797901][ T1019] bridge_slave_0: left allmulticast mode [ 242.797930][ T1019] bridge_slave_0: left promiscuous mode [ 242.799368][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.062173][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.084368][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.096913][ T1019] bond0 (unregistering): Released all slaves [ 243.112345][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.112441][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.112600][ T6745] bridge_slave_0: entered allmulticast mode [ 243.114210][ T6745] bridge_slave_0: entered promiscuous mode [ 243.130894][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.133279][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.133715][ T6745] bridge_slave_1: entered allmulticast mode [ 243.164331][ T6745] bridge_slave_1: entered promiscuous mode [ 243.629556][ T54] Bluetooth: hci2: command tx timeout [ 245.344933][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.358700][ T1019] hsr_slave_0: left promiscuous mode [ 245.359280][ T1019] hsr_slave_1: left promiscuous mode [ 245.359929][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.360476][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.653356][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 245.692471][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 245.699340][ T54] Bluetooth: hci2: command tx timeout [ 246.172112][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.262285][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.266145][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.266787][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.288916][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.291258][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.499507][ T6745] team0: Port device team_slave_0 added [ 246.525018][ T6745] team0: Port device team_slave_1 added [ 246.713483][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.713502][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.713529][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.772527][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.772544][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.772570][ T6745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.408209][ T6745] hsr_slave_0: entered promiscuous mode [ 247.412634][ T6745] hsr_slave_1: entered promiscuous mode [ 247.431727][ T6745] debugfs: 'hsr0' already exists in 'hsr' [ 247.431751][ T6745] Cannot create hsr debugfs directory [ 247.486316][ T6970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.206'. [ 247.610440][ T6974] tipc: Can't bind to reserved service type 2 [ 247.684856][ T5275] 8021q: adding VLAN 0 to HW filter on device eth12 [ 247.911885][ T6991] Bluetooth: MGMT ver 1.23 [ 248.340038][ T5617] Bluetooth: hci4: command tx timeout [ 248.401876][ T7008] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 248.401900][ T7008] netlink: 44 bytes leftover after parsing attributes in process `syz.4.213'. [ 248.401917][ T7008] netlink: 'syz.4.213': attribute type 2 has an invalid length. [ 248.401930][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 249.545375][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 249.685016][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807eca4800: rx timeout, send abort [ 249.950798][ T7056] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 250.188267][ T7077] syz.3.229 uses obsolete (PF_INET,SOCK_PACKET) [ 250.281261][ T1019] bridge_slave_1: left allmulticast mode [ 250.281288][ T1019] bridge_slave_1: left promiscuous mode [ 250.281566][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.306551][ T1019] bridge_slave_0: left allmulticast mode [ 250.306578][ T1019] bridge_slave_0: left promiscuous mode [ 250.307373][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.417241][ T5617] Bluetooth: hci4: command tx timeout [ 250.492792][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.494984][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.496225][ T1019] bond0 (unregistering): Released all slaves [ 250.541151][ T7076] netlink: 'syz.0.228': attribute type 5 has an invalid length. [ 250.547280][ T7070] syzkaller0: entered promiscuous mode [ 250.547303][ T7070] syzkaller0: entered allmulticast mode [ 250.959838][ T1019] hsr_slave_0: left promiscuous mode [ 250.963451][ T1019] hsr_slave_1: left promiscuous mode [ 250.964399][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.970059][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.423088][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 251.451126][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 251.467213][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 251.652511][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.652699][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.652817][ T6930] bridge_slave_0: entered allmulticast mode [ 251.654696][ T6930] bridge_slave_0: entered promiscuous mode [ 251.703152][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.703278][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.703382][ T6930] bridge_slave_1: entered allmulticast mode [ 251.705965][ T6930] bridge_slave_1: entered promiscuous mode [ 251.954263][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.024735][ T7119] vlan2: entered promiscuous mode [ 252.025456][ T7119] bridge0: entered promiscuous mode [ 252.042862][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.444066][ T6930] team0: Port device team_slave_0 added [ 252.464041][ T6930] team0: Port device team_slave_1 added [ 252.486715][ T7130] iwpm_parse_nlmsg: Invalid attribute (msg type Add Mapping response ret = -34) [ 252.497376][ T5617] Bluetooth: hci4: command tx timeout [ 252.577007][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.577023][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.577048][ T6930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.626035][ T6745] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.649215][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.650168][ T6745] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.677766][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.681048][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.681063][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.681089][ T6930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.747502][ T6745] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.780869][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.783602][ T6745] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.962888][ T7152] netlink: 176 bytes leftover after parsing attributes in process `syz.0.246'. [ 254.578037][ T5617] Bluetooth: hci4: command tx timeout [ 255.520184][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.549116][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 255.712946][ T6930] hsr_slave_0: entered promiscuous mode [ 255.714000][ T6930] hsr_slave_1: entered promiscuous mode [ 255.715492][ T6930] debugfs: 'hsr0' already exists in 'hsr' [ 255.715510][ T6930] Cannot create hsr debugfs directory [ 255.779728][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779807][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.831696][ T1424] IPVS: starting estimator thread 0... [ 255.925690][ T7177] IPVS: using max 39 ests per chain, 93600 per kthread [ 256.229294][ T7185] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 256.304651][ T7185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.358536][ T7190] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.406738][ T7196] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 256.875924][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.076774][ T7221] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 257.252362][ T7221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.296009][ T7223] bond2: (slave geneve2): making interface the new active one [ 257.310041][ T7223] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 257.401419][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.478180][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.478289][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.506415][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.506568][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.707872][ T5720] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 257.858043][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 257.858847][ T5720] usb 1-1: New USB device found: idVendor=0e41, idProduct=4249, bcdDevice=0.40 [ 257.861230][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.861255][ T5720] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.868394][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.868419][ T5720] usb 1-1: Product: syz [ 257.868435][ T5720] usb 1-1: Manufacturer: syz [ 257.868449][ T5720] usb 1-1: SerialNumber: syz [ 258.173068][ T5720] usb 1-1: unit 6 not found! [ 258.325778][ T5720] usb 1-1: USB disconnect, device number 5 [ 258.470103][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.770041][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.254962][ T7190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.278823][ T6930] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 259.312203][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 259.329962][ T6930] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 259.365777][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 259.376092][ T6930] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 259.412909][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 259.428126][ T6930] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 259.525385][ T6930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 259.758749][ T6745] veth0_vlan: entered promiscuous mode [ 259.783703][ T7286] loop4: detected capacity change from 0 to 512 [ 259.836338][ T6745] veth1_vlan: entered promiscuous mode [ 259.921546][ T7286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.149955][ T6745] veth0_macvtap: entered promiscuous mode [ 260.171978][ T7286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.172115][ T7286] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.189193][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.237326][ T6745] veth1_macvtap: entered promiscuous mode [ 260.362952][ T6930] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.383592][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.383698][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.432995][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.434502][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.434626][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.490816][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.578290][ T1179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.578336][ T1179] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.578368][ T1179] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.578400][ T1179] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.715811][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.094774][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.094812][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.404796][ T6218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.404818][ T6218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.457691][ T7336] loop0: detected capacity change from 0 to 128 [ 262.533144][ T7336] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.561796][ T7336] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.750511][ T5610] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.897292][ T6930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.982261][ T27] hid-generic 0003:0005:C082.0003: hidraw0: USB HID v2.00 Device [syz0] on syz0 [ 263.263071][ T7353] fido_id[7353]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 264.074439][ T7385] loop0: detected capacity change from 0 to 256 [ 264.142931][ T7385] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 264.223477][ T6930] veth0_vlan: entered promiscuous mode [ 264.311277][ T7385] exFAT-fs (loop0): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 264.311307][ T7385] exFAT-fs (loop0): Filesystem has been set read-only [ 264.314172][ T6930] veth1_vlan: entered promiscuous mode [ 264.468188][ T7386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.545860][ T6930] veth0_macvtap: entered promiscuous mode [ 264.606162][ T6930] veth1_macvtap: entered promiscuous mode [ 264.628079][ T7390] loop4: detected capacity change from 0 to 40427 [ 264.647718][ T7390] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 264.647740][ T7390] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 264.679723][ T7390] F2FS-fs (loop4): invalid crc value [ 264.768658][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.795986][ T7390] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 264.796493][ T7398] loop5: detected capacity change from 0 to 128 [ 264.831444][ T7390] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 264.832007][ T7390] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 264.858612][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.938134][ T61] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.938425][ T7402] loop0: detected capacity change from 0 to 512 [ 264.938908][ T61] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.978697][ T7402] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 264.978735][ T7402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 265.022269][ T7398] FAT-fs (loop5): data area starts beyond volume (1024 > 255) [ 265.022298][ T7398] FAT-fs (loop5): Can't find a valid FAT filesystem [ 265.050577][ T5611] syz-executor: attempt to access beyond end of device [ 265.050577][ T5611] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.053236][ T7402] EXT4-fs (loop0): 1 truncate cleaned up [ 265.081081][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 265.081116][ T5611] Tainted: [L]=SOFTLOCKUP [ 265.081123][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.081144][ T5611] Call Trace: [ 265.081153][ T5611] [ 265.081167][ T5611] dump_stack_lvl+0xe8/0x150 [ 265.081214][ T5611] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 265.081249][ T5611] f2fs_write_end_bio+0xda7/0x11c0 [ 265.081296][ T5611] __submit_merged_bio+0x258/0x6a0 [ 265.081316][ T5611] ? rcu_is_watching+0x16/0xb0 [ 265.081354][ T5611] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 265.081393][ T5611] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 265.081450][ T5611] f2fs_write_data_pages+0x2a13/0x36e0 [ 265.081512][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 265.081535][ T5611] ? is_bpf_text_address+0x26/0x2b0 [ 265.081566][ T5611] ? arch_stack_walk+0xfb/0x150 [ 265.081618][ T5611] ? add_lock_to_list+0xc7/0x100 [ 265.081652][ T5611] ? lockdep_unlock+0x5c/0xd0 [ 265.081675][ T5611] ? __lock_acquire+0x1511/0x2de0 [ 265.081731][ T5611] ? do_raw_spin_lock+0x12b/0x2f0 [ 265.081765][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 265.081787][ T5611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 265.081815][ T5611] do_writepages+0x338/0x560 [ 265.081848][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 265.081874][ T5611] filemap_fdatawrite+0x1e9/0x2f0 [ 265.081903][ T5611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 265.081984][ T5611] ? do_raw_spin_unlock+0xf5/0x200 [ 265.082012][ T5611] f2fs_sync_dirty_inodes+0x471/0x970 [ 265.082058][ T5611] f2fs_write_checkpoint+0x860/0x24d0 [ 265.082126][ T5611] kill_f2fs_super+0x2dc/0x700 [ 265.082159][ T5611] ? rcu_do_enqueue+0x616/0x870 [ 265.082185][ T5611] ? lockdep_hardirqs_on+0x7b/0x110 [ 265.082210][ T5611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 265.082255][ T5611] ? __pfx_call_rcu+0x10/0x10 [ 265.082294][ T5611] ? shrinker_free+0x2a7/0x3b0 [ 265.082321][ T5611] deactivate_locked_super+0xbe/0x110 [ 265.082349][ T5611] cleanup_mnt+0x3d3/0x460 [ 265.082383][ T5611] task_work_run+0x1d9/0x260 [ 265.082415][ T5611] ? __pfx_task_work_run+0x10/0x10 [ 265.082453][ T5611] exit_to_user_mode_loop+0x204/0x770 [ 265.082482][ T5611] ? rcu_is_watching+0x16/0xb0 [ 265.082515][ T5611] do_syscall_64+0x328/0x520 [ 265.082547][ T5611] ? trace_irq_disable+0x3b/0x140 [ 265.082573][ T5611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.082593][ T5611] ? clear_bhb_loop+0x70/0xc0 [ 265.082617][ T5611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.082653][ T5611] RIP: 0033:0x7f6bb1b9f397 [ 265.082695][ T5611] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 265.082711][ T5611] RSP: 002b:00007ffea59b54e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 265.082731][ T5611] RAX: 0000000000000000 RBX: 00007f6bb1c344bb RCX: 00007f6bb1b9f397 [ 265.082744][ T5611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea59b55a0 [ 265.082755][ T5611] RBP: 00007ffea59b55a0 R08: 00007ffea59b65a0 R09: 00000000ffffffff [ 265.082768][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea59b6630 [ 265.082779][ T5611] R13: 00007f6bb1c344bb R14: 0000000000040a90 R15: 00007ffea59b6670 [ 265.082807][ T5611] [ 265.085307][ T5611] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 265.161580][ T7402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.211347][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.282158][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.160486][ T7411] loop3: detected capacity change from 0 to 128 [ 266.167636][ T7411] ======================================================= [ 266.167636][ T7411] WARNING: The mand mount option has been deprecated and [ 266.167636][ T7411] and is ignored by this kernel. Remove the mand [ 266.167636][ T7411] option from the mount to silence this warning. [ 266.167636][ T7411] ======================================================= [ 267.742709][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.890051][ T1388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.890074][ T1388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.092235][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 268.138570][ T7425] loop5: detected capacity change from 0 to 16 [ 268.141245][ T7423] vlan2: entered allmulticast mode [ 268.141265][ T7423] macsec0: entered allmulticast mode [ 268.141288][ T7423] veth1_macvtap: entered allmulticast mode [ 268.141735][ T7423] bridge0: port 3(vlan2) entered blocking state [ 268.143827][ T7423] bridge0: port 3(vlan2) entered disabled state [ 268.189131][ T7423] vlan2: entered promiscuous mode [ 268.189151][ T7423] macsec0: entered promiscuous mode [ 268.218948][ T6218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.218970][ T6218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.261672][ T7425] erofs (device loop5): mounted with root inode @ nid 36. [ 268.331073][ T7422] erofs (device loop5): compressed inode (nid 89) is invalid in a plain filesystem [ 270.853165][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.6.100'. [ 272.988224][ T7479] loop4: detected capacity change from 0 to 256 [ 273.071120][ T7479] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.071142][ T7479] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 273.113262][ T7479] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 273.121373][ T7479] exFAT-fs (loop4): failed to load alloc-bitmap [ 273.121423][ T7479] exFAT-fs (loop4): failed to recognize exfat type [ 273.381693][ T7454] loop0: detected capacity change from 0 to 40427 [ 273.546138][ T7486] syzkaller0: entered promiscuous mode [ 273.546617][ T7486] syzkaller0: entered allmulticast mode [ 273.649007][ T7454] F2FS-fs (loop0): build fault injection rate: 690 [ 273.684668][ T7454] F2FS-fs (loop0): invalid crc value [ 273.946930][ T7454] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 273.999422][ T7454] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 274.840604][ T7457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.289610][ T7495] loop3: detected capacity change from 0 to 40427 [ 276.361399][ T7495] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 276.361428][ T7495] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 276.409511][ T7495] F2FS-fs (loop3): invalid crc value [ 276.748198][ T7521] loop4: detected capacity change from 0 to 512 [ 276.751171][ T7521] EXT4-fs: Ignoring removed i_version option [ 276.751200][ T7521] EXT4-fs: Ignoring removed oldalloc option [ 276.856438][ T7495] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 276.935617][ T7495] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 276.935648][ T7495] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 277.014730][ T7521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.438211][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.059933][ T7535] loop4: detected capacity change from 0 to 40427 [ 279.082795][ T7535] F2FS-fs: heap/no_heap options were deprecated [ 279.084063][ T7535] F2FS-fs (loop4): build fault injection rate: 19 [ 279.084085][ T7535] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 279.087019][ T7535] F2FS-fs (loop4): invalid crc value [ 279.248817][ C0] F2FS-fs (loop4): inject read IO error in f2fs_cache_read_end_io of blk_update_request+0x57b/0xe50 [ 279.270285][ T7535] F2FS-fs (loop4): Failed to read root inode [ 279.738092][ T7548] loop3: detected capacity change from 0 to 512 [ 279.797184][ T7548] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 279.810304][ T7548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 279.810446][ T7548] System zones: 1-12 [ 279.810709][ T7548] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.324: bad orphan inode 131072 [ 279.810944][ T7548] loop3: lost filesystem error report for type 5 error -117 [ 279.829751][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 279.829778][ C0] EXT4-fs (loop3): initial error at time 1790393527: ext4_orphan_get:1429 [ 279.829803][ C0] EXT4-fs (loop3): last error at time 1790393527: ext4_orphan_get:1429 [ 279.886731][ T7548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.975567][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.095669][ T7557] loop3: detected capacity change from 0 to 2048 [ 280.149834][ T7557] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 280.149864][ T7557] loop3: partition table partially beyond EOD, truncated [ 280.150211][ T7557] loop3: p1 start 3405774849 is beyond EOD, truncated [ 280.150234][ T7557] loop3: p2 start 53543428 is beyond EOD, truncated [ 280.150253][ T7557] loop3: p3 start 4284289 is beyond EOD, truncated [ 280.210082][ T7557] loop3: p5 start 3405774849 is beyond EOD, truncated [ 280.210113][ T7557] loop3: p6 start 53543428 is beyond EOD, truncated [ 280.373904][ T5853] udevd[5853]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 281.009667][ T33] audit: type=1800 audit(1790393528.451:6): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.329" name="file2" dev="sda1" ino=2054 res=0 errno=0 [ 281.397277][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 281.552834][ T9] usb 5-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 281.554000][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.554035][ T9] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.554062][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.554096][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.609715][ T9] usb 5-1: config 0 descriptor?? [ 281.734548][ T7573] loop0: detected capacity change from 0 to 16 [ 282.979587][ T7601] loop3: detected capacity change from 0 to 256 [ 283.031836][ T7601] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.031855][ T7601] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 283.111826][ T7601] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 283.112738][ T7601] exFAT-fs (loop3): failed to load alloc-bitmap [ 283.112754][ T7601] exFAT-fs (loop3): failed to recognize exfat type [ 283.409886][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.340'. [ 284.511811][ T7609] batadv_slave_0: entered promiscuous mode [ 284.512347][ T7609] batadv_slave_0: left promiscuous mode [ 284.513256][ T7612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.619959][ T7612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.639186][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 284.639297][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 284.665331][ T9] usb 5-1: USB disconnect, device number 4 [ 285.203741][ T7616] loop6: detected capacity change from 0 to 40427 [ 285.317221][ T7616] F2FS-fs (loop6): invalid crc value [ 285.740182][ T7616] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 285.769472][ T7616] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 285.769512][ T7616] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 285.769584][ T7616] F2FS-fs (loop6): Start checkpoint disabled! [ 285.849292][ T7616] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 285.861869][ T7616] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 286.170612][ T7616] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 286.515786][ T7645] loop4: detected capacity change from 0 to 40427 [ 286.532683][ T7645] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 286.532712][ T7645] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 286.621681][ T7645] F2FS-fs (loop4): invalid crc value [ 286.969511][ T7637] loop5: detected capacity change from 0 to 40427 [ 286.969745][ T7666] loop3: detected capacity change from 0 to 16 [ 287.032711][ T7645] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 287.068556][ T7666] erofs (device loop3): invalid ishare xattr prefix id 0 [ 287.076243][ T7645] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 287.076281][ T7645] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 287.104817][ T7637] F2FS-fs (loop5): invalid crc value [ 287.465584][ T7637] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 287.492079][ T7637] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 287.890855][ T7701] loop6: detected capacity change from 0 to 512 [ 287.930683][ T7701] EXT4-fs (loop6): orphan cleanup on readonly fs [ 287.931256][ T7701] EXT4-fs error (device loop6): ext4_quota_enable:7260: inode #15: comm syz.6.352: iget: bad i_size value: 360287970189639690 [ 287.931490][ T7701] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.937444][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 287.937506][ C0] EXT4-fs (loop6): last error at time 1790393535: ext4_quota_enable:7260: inode 15 [ 287.942185][ T7701] EXT4-fs error (device loop6): ext4_quota_enable:7263: comm syz.6.352: Bad quota inode: 15, type: 2 [ 287.942259][ T7701] loop6: lost filesystem error report for type 5 error -117 [ 287.968996][ T7701] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 288.033538][ T7701] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 288.035569][ T7701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.087230][ T7701] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 288.090041][ T6745] syz-executor: attempt to access beyond end of device [ 288.090041][ T6745] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 288.151106][ T6745] CPU: 0 UID: 0 PID: 6745 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 288.151141][ T6745] Tainted: [L]=SOFTLOCKUP [ 288.151149][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.151165][ T6745] Call Trace: [ 288.151173][ T6745] [ 288.151183][ T6745] dump_stack_lvl+0xe8/0x150 [ 288.151221][ T6745] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 288.151252][ T6745] f2fs_write_end_bio+0xda7/0x11c0 [ 288.151300][ T6745] __submit_merged_bio+0x258/0x6a0 [ 288.151322][ T6745] ? rcu_is_watching+0x16/0xb0 [ 288.151360][ T6745] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 288.151399][ T6745] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 288.151460][ T6745] f2fs_write_data_pages+0x2a13/0x36e0 [ 288.151541][ T6745] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 288.151566][ T6745] ? is_bpf_text_address+0x26/0x2b0 [ 288.151613][ T6745] ? arch_stack_walk+0xfb/0x150 [ 288.151670][ T6745] ? add_lock_to_list+0xc7/0x100 [ 288.151704][ T6745] ? lockdep_unlock+0x5c/0xd0 [ 288.151727][ T6745] ? __lock_acquire+0x1511/0x2de0 [ 288.151781][ T6745] ? do_raw_spin_lock+0x12b/0x2f0 [ 288.151813][ T6745] ? do_raw_spin_unlock+0xf5/0x200 [ 288.151837][ T6745] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 288.151865][ T6745] do_writepages+0x338/0x560 [ 288.151900][ T6745] ? do_raw_spin_unlock+0xf5/0x200 [ 288.151927][ T6745] filemap_fdatawrite+0x1e9/0x2f0 [ 288.151955][ T6745] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 288.152027][ T6745] ? do_raw_spin_unlock+0xf5/0x200 [ 288.152055][ T6745] f2fs_sync_dirty_inodes+0x471/0x970 [ 288.152110][ T6745] f2fs_write_checkpoint+0x860/0x24d0 [ 288.152177][ T6745] kill_f2fs_super+0x2dc/0x700 [ 288.152208][ T6745] ? rcu_do_enqueue+0x616/0x870 [ 288.152235][ T6745] ? lockdep_hardirqs_on+0x7b/0x110 [ 288.152258][ T6745] ? __pfx_kill_f2fs_super+0x10/0x10 [ 288.152302][ T6745] ? __pfx_call_rcu+0x10/0x10 [ 288.152339][ T6745] ? shrinker_free+0x2a7/0x3b0 [ 288.152366][ T6745] deactivate_locked_super+0xbe/0x110 [ 288.152393][ T6745] cleanup_mnt+0x3d3/0x460 [ 288.152427][ T6745] task_work_run+0x1d9/0x260 [ 288.152458][ T6745] ? __pfx_task_work_run+0x10/0x10 [ 288.152495][ T6745] exit_to_user_mode_loop+0x204/0x770 [ 288.152524][ T6745] ? rcu_is_watching+0x16/0xb0 [ 288.152561][ T6745] do_syscall_64+0x328/0x520 [ 288.152583][ T6745] ? trace_irq_disable+0x3b/0x140 [ 288.152629][ T6745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.152651][ T6745] ? clear_bhb_loop+0x70/0xc0 [ 288.152679][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.152701][ T6745] RIP: 0033:0x7f08bfb9f397 [ 288.152722][ T6745] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 288.152740][ T6745] RSP: 002b:00007fffb6061218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 288.152764][ T6745] RAX: 0000000000000000 RBX: 00007f08bfc344bb RCX: 00007f08bfb9f397 [ 288.152778][ T6745] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb60612d0 [ 288.152792][ T6745] RBP: 00007fffb60612d0 R08: 00007fffb60622d0 R09: 00000000ffffffff [ 288.152807][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb6062360 [ 288.152821][ T6745] R13: 00007f08bfc344bb R14: 000000000004645b R15: 00007fffb60623a0 [ 288.152857][ T6745] [ 288.164346][ T6745] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 288.164477][ T6745] CPU: 0 UID: 0 PID: 6745 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 288.164506][ T6745] Tainted: [L]=SOFTLOCKUP [ 288.164514][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.164526][ T6745] Call Trace: [ 288.164534][ T6745] [ 288.164543][ T6745] dump_stack_lvl+0xe8/0x150 [ 288.164579][ T6745] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 288.164609][ T6745] f2fs_write_end_bio+0xda7/0x11c0 [ 288.164655][ T6745] __submit_merged_bio+0x258/0x6a0 [ 288.164710][ T6745] ? rcu_is_watching+0x16/0xb0 [ 288.164815][ T6745] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 288.164932][ T6745] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 288.165099][ T6745] f2fs_write_data_pages+0x2a13/0x36e0 [ 288.165287][ T6745] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 288.165351][ T6745] ? is_bpf_text_address+0x26/0x2b0 [ 288.165432][ T6745] ? arch_stack_walk+0xfb/0x150 [ 288.165604][ T6745] ? add_lock_to_list+0xc7/0x100 [ 288.165681][ T6745] ? lockdep_unlock+0x5c/0xd0 [ 288.165738][ T6745] ? __lock_acquire+0x1511/0x2de0 [ 288.165884][ T6745] ? do_raw_spin_lock+0x12b/0x2f0 [ 288.165974][ T6745] ? do_raw_spin_unlock+0xf5/0x200 [ 288.166039][ T6745] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 288.166124][ T6745] do_writepages+0x338/0x560 [ 288.166223][ T6745] ? do_raw_spin_unlock+0xf5/0x200 [ 288.166305][ T6745] filemap_fdatawrite+0x1e9/0x2f0 [ 288.166381][ T6745] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 288.166571][ T6745] ? do_raw_spin_unlock+0xf5/0x200 [ 288.166632][ T6745] f2fs_sync_dirty_inodes+0x471/0x970 [ 288.166756][ T6745] f2fs_write_checkpoint+0x860/0x24d0 [ 288.166930][ T6745] kill_f2fs_super+0x2dc/0x700 [ 288.167017][ T6745] ? rcu_do_enqueue+0x616/0x870 [ 288.167093][ T6745] ? lockdep_hardirqs_on+0x7b/0x110 [ 288.167158][ T6745] ? __pfx_kill_f2fs_super+0x10/0x10 [ 288.167278][ T6745] ? __pfx_call_rcu+0x10/0x10 [ 288.167378][ T6745] ? shrinker_free+0x2a7/0x3b0 [ 288.167447][ T6745] deactivate_locked_super+0xbe/0x110 [ 288.167531][ T6745] cleanup_mnt+0x3d3/0x460 [ 288.167622][ T6745] task_work_run+0x1d9/0x260 [ 288.167715][ T6745] ? __pfx_task_work_run+0x10/0x10 [ 288.167814][ T6745] exit_to_user_mode_loop+0x204/0x770 [ 288.167890][ T6745] ? rcu_is_watching+0x16/0xb0 [ 288.167985][ T6745] do_syscall_64+0x328/0x520 [ 288.168046][ T6745] ? trace_irq_disable+0x3b/0x140 [ 288.168122][ T6745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.168186][ T6745] ? clear_bhb_loop+0x70/0xc0 [ 288.168253][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.168315][ T6745] RIP: 0033:0x7f08bfb9f397 [ 288.168370][ T6745] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 288.168414][ T6745] RSP: 002b:00007fffb6061218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 288.168471][ T6745] RAX: 0000000000000000 RBX: 00007f08bfc344bb RCX: 00007f08bfb9f397 [ 288.168511][ T6745] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb60612d0 [ 288.168547][ T6745] RBP: 00007fffb60612d0 R08: 00007fffb60622d0 R09: 00000000ffffffff [ 288.168581][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb6062360 [ 288.168608][ T6745] R13: 00007f08bfc344bb R14: 000000000004645b R15: 00007fffb60623a0 [ 288.168696][ T6745] [ 288.253496][ T6745] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 288.830307][ T7701] EXT4-fs error (device loop6): ext4_quota_enable:7260: inode #15: comm syz.6.352: iget: bad i_size value: 360287970189639690 [ 288.847965][ T7701] EXT4-fs error (device loop6): ext4_quota_enable:7263: comm syz.6.352: Bad quota inode: 15, type: 2 [ 288.867501][ T7701] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 289.095622][ T6930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.452963][ T7712] loop4: detected capacity change from 0 to 1024 [ 289.470886][ T7712] EXT4-fs: quotafile must be on filesystem root [ 290.158617][ T7739] xfrm1: entered promiscuous mode [ 290.158640][ T7739] xfrm1: entered allmulticast mode [ 290.339925][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 290.489978][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 290.490717][ T10] usb 5-1: New USB device found: idVendor=28bd, idProduct=0071, bcdDevice=0.00 [ 290.492331][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.492358][ T10] usb 5-1: config 0 has no interface number 0 [ 290.494003][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.494034][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.494076][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.570480][ T10] usb 5-1: config 0 descriptor?? [ 290.815661][ T7748] loop6: detected capacity change from 0 to 256 [ 290.963246][ T7748] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 290.963307][ T7748] exFAT-fs (loop6): invalid boot region [ 290.963338][ T7748] exFAT-fs (loop6): failed to recognize exfat type [ 292.730571][ T10] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0004/input/input6 [ 292.970060][ T10] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0004/input/input7 [ 293.165664][ T10] uclogic 0003:28BD:0071.0004: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 293.214710][ T10] usb 5-1: USB disconnect, device number 5 [ 293.248579][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 293.397217][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 293.419448][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 293.419505][ T9] usb 1-1: New USB device found: idVendor=4752, idProduct=0011, bcdDevice=0.40 [ 293.422836][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.483429][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.483458][ T9] usb 1-1: Product: syz [ 293.483473][ T9] usb 1-1: Manufacturer: syz [ 293.483488][ T9] usb 1-1: SerialNumber: syz [ 293.684181][ T7776] fido_id[7776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 293.768792][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.772057][ T7782] loop6: detected capacity change from 0 to 512 [ 293.785936][ T7780] loop4: detected capacity change from 0 to 1024 [ 293.869415][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 293.874006][ T9] usb 1-1: USB disconnect, device number 6 [ 293.953498][ T7780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.023189][ T7787] syz.5.386 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 294.071713][ T7780] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 294.075284][ T7787] loop5: detected capacity change from 0 to 256 [ 294.102993][ T6486] udevd[6486]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.136692][ T7780] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 294.290366][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.304957][ T7808] loop6: detected capacity change from 0 to 256 [ 296.235056][ T7808] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 296.235132][ T7808] exFAT-fs (loop6): invalid boot region [ 296.235163][ T7808] exFAT-fs (loop6): failed to recognize exfat type [ 297.139346][ T7809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.255058][ T7818] loop0: detected capacity change from 0 to 512 [ 298.274722][ T7818] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 299.418925][ T5712] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 299.492153][ T7841] loop3: detected capacity change from 0 to 1024 [ 299.498038][ T7841] EXT4-fs: quotafile must be on filesystem root [ 299.568109][ T5712] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 299.569346][ T5712] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.569381][ T5712] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 299.569425][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.806411][ T33] audit: type=1326 audit(1790393547.301:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.3.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9938b97ed7 code=0x7ffc0000 [ 299.815667][ T33] audit: type=1326 audit(1790393547.311:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.3.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9938b3f4d9 code=0x7ffc0000 [ 299.815834][ T33] audit: type=1326 audit(1790393547.311:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.3.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9938b97ed7 code=0x7ffc0000 [ 299.815945][ T33] audit: type=1326 audit(1790393547.311:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.3.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9938b3f4d9 code=0x7ffc0000 [ 299.816062][ T33] audit: type=1326 audit(1790393547.311:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.3.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9938b97ed7 code=0x7ffc0000 [ 299.823745][ T33] audit: type=1326 audit(1790393547.311:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.3.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9938b3f4d9 code=0x7ffc0000 [ 299.824518][ T33] audit: type=1326 audit(1790393547.311:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.3.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9938b97ed7 code=0x7ffc0000 [ 299.826759][ T33] audit: type=1326 audit(1790393547.311:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.3.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9938b3f4d9 code=0x7ffc0000 [ 299.834135][ T33] audit: type=1326 audit(1790393547.331:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.3.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9938b97ed7 code=0x7ffc0000 [ 299.834187][ T33] audit: type=1326 audit(1790393547.331:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.3.401" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9938b3f4d9 code=0x7ffc0000 [ 300.074904][ T5712] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 300.102717][ T5712] usb 6-1: USB disconnect, device number 2 [ 300.627477][ T5712] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 300.777290][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 300.780337][ T5712] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 300.782406][ T5712] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 300.782431][ T5712] usb 1-1: config 0 has no interface number 0 [ 300.782470][ T5712] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 300.782495][ T5712] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 300.784710][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.784737][ T5712] usb 1-1: Product: syz [ 300.784754][ T5712] usb 1-1: Manufacturer: syz [ 300.784769][ T5712] usb 1-1: SerialNumber: syz [ 300.867692][ T5712] usb 1-1: config 0 descriptor?? [ 300.868724][ T7847] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 300.868883][ T7847] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 300.997620][ T7845] loop6: detected capacity change from 0 to 40427 [ 301.019266][ T7845] F2FS-fs (loop6): invalid crc value [ 301.083420][ T7847] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.083571][ T7847] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.289126][ T5712] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 301.289653][ T5712] asix 1-1:0.34: probe with driver asix failed with error -61 [ 301.333461][ T7845] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 301.366356][ T7845] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 301.366387][ T7845] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 301.366414][ T7845] F2FS-fs (loop6): Start checkpoint disabled! [ 301.858856][ T1388] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 302.375320][ T7845] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 302.384638][ T7845] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 303.376540][ T10] usb 1-1: USB disconnect, device number 7 [ 303.598094][ T7875] loop4: detected capacity change from 0 to 40427 [ 303.604275][ T7875] f2fs: Unknown parameter '0xffffffffffffffff' [ 303.724908][ T7876] loop5: detected capacity change from 0 to 512 [ 303.738904][ T7876] EXT4-fs (loop5): Test dummy encryption mode enabled [ 303.793197][ T7876] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.419: bg 0: block 7: invalid block bitmap [ 303.793235][ T7876] loop5: lost filesystem error report for type 5 error -117 [ 303.797139][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 303.797167][ C0] EXT4-fs (loop5): initial error at time 1790393551: ext4_validate_block_bitmap:436 [ 303.797193][ C0] EXT4-fs (loop5): last error at time 1790393551: ext4_validate_block_bitmap:436 [ 303.921456][ T7876] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 303.921535][ T7876] loop5: lost filesystem error report for type 5 error -117 [ 303.986957][ T7882] FAULT_INJECTION: forcing a failure. [ 303.986957][ T7882] name failslab, interval 1, probability 0, space 0, times 1 [ 304.004599][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz.0.424 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.004637][ T7882] Tainted: [L]=SOFTLOCKUP [ 304.004647][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 304.004666][ T7882] Call Trace: [ 304.004676][ T7882] [ 304.004687][ T7882] dump_stack_lvl+0xe8/0x150 [ 304.004728][ T7882] should_fail_ex+0x3eb/0x540 [ 304.004768][ T7882] should_failslab+0xa8/0x100 [ 304.004802][ T7882] ? __anon_vma_prepare+0x109/0x4a0 [ 304.004826][ T7882] kmem_cache_alloc_noprof+0x9c/0x600 [ 304.004852][ T7882] ? __anon_vma_prepare+0xbe/0x4a0 [ 304.004873][ T7882] ? kmem_cache_alloc_noprof+0x151/0x600 [ 304.004899][ T7882] ? __anon_vma_prepare+0x109/0x4a0 [ 304.004930][ T7882] __anon_vma_prepare+0x109/0x4a0 [ 304.004954][ T7882] ? vma_has_anon_rmap+0x95/0x270 [ 304.004990][ T7882] do_wp_page+0x2b23/0x4b60 [ 304.005045][ T7882] ? __pfx_do_wp_page+0x10/0x10 [ 304.005073][ T7882] ? do_raw_spin_lock+0x12b/0x2f0 [ 304.005098][ T7882] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 304.005135][ T7882] handle_mm_fault+0x15d7/0x3750 [ 304.005183][ T7882] ? handle_mm_fault+0xf1/0x3750 [ 304.005232][ T7882] ? __pfx_handle_mm_fault+0x10/0x10 [ 304.005292][ T7882] ? lock_mm_and_find_vma+0xa7/0x340 [ 304.005318][ T7882] do_user_addr_fault+0x7f6/0x1480 [ 304.005363][ T7882] exc_page_fault+0x6a/0xc0 [ 304.005395][ T7882] asm_exc_page_fault+0x26/0x30 [ 304.005418][ T7882] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 304.005453][ T7882] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 75 04 00 66 2e 0f 1f [ 304.005472][ T7882] RSP: 0018:ffffc9000346f788 EFLAGS: 00050202 [ 304.005494][ T7882] RAX: ffffffff84e34900 RBX: 0000000000000004 RCX: 0000000000000004 [ 304.005510][ T7882] RDX: 0000000000000000 RSI: ffffc9000346f860 RDI: 0000000000000000 [ 304.005524][ T7882] RBP: ffffc9000346faa0 R08: 0000000000000003 R09: 0000000000000004 [ 304.005539][ T7882] R10: dffffc0000000000 R11: fffff5200068df0c R12: 0000000000000004 [ 304.005554][ T7882] R13: 00007ffffffff000 R14: ffffc9000346f860 R15: 0000000000000000 [ 304.005591][ T7882] ? _copy_from_user+0x30/0xb0 [ 304.005624][ T7882] _copy_to_user+0x8a/0xb0 [ 304.005650][ T7882] do_ipv6_getsockopt+0xff4/0x2460 [ 304.005689][ T7882] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 304.005722][ T7882] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 304.005763][ T7882] ? finish_task_switch+0x40e/0xc60 [ 304.005797][ T7882] ? lockdep_hardirqs_on+0x7b/0x110 [ 304.005825][ T7882] ? rcu_is_watching+0x16/0xb0 [ 304.005859][ T7882] ? trace_sched_exit_tp+0x3a/0x130 [ 304.005894][ T7882] ? __schedule+0x1b5d/0x5c60 [ 304.005929][ T7882] ? rcu_is_watching+0x16/0xb0 [ 304.005970][ T7882] ipv6_getsockopt+0xbd/0x2c0 [ 304.006003][ T7882] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 304.006042][ T7882] rawv6_getsockopt+0x380/0x680 [ 304.006075][ T7882] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 304.006109][ T7882] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 304.006144][ T7882] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 304.006177][ T7882] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 304.006210][ T7882] do_sock_getsockopt+0x4aa/0x640 [ 304.006242][ T7882] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 304.006285][ T7882] ? __fget_files+0x3a2/0x420 [ 304.006310][ T7882] ? __fget_files+0x2a/0x420 [ 304.006346][ T7882] __x64_sys_getsockopt+0x1a4/0x240 [ 304.006382][ T7882] do_syscall_64+0x166/0x520 [ 304.006407][ T7882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.006431][ T7882] ? clear_bhb_loop+0x70/0xc0 [ 304.006459][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.006482][ T7882] RIP: 0033:0x7f021f79e159 [ 304.006502][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.006521][ T7882] RSP: 002b:00007f022071f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 304.006544][ T7882] RAX: ffffffffffffffda RBX: 00007f021fa25fa0 RCX: 00007f021f79e159 [ 304.006567][ T7882] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000003 [ 304.006581][ T7882] RBP: 00007f021f83506b R08: 0000000000000000 R09: 0000000000000000 [ 304.006595][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.006609][ T7882] R13: 00007f021fa26038 R14: 00007f021fa25fa0 R15: 00007ffdbaa2a948 [ 304.006646][ T7882] [ 304.903603][ T7876] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2933: inode #11: comm syz.5.419: corrupted xattr block 95: invalid header [ 304.903641][ T7876] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 305.062092][ T7876] EXT4-fs warning (device loop5): ext4_evict_inode:288: xattr delete (err -117) [ 305.062225][ T7876] EXT4-fs (loop5): 1 orphan inode deleted [ 305.136179][ T7876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.793518][ T7902] loop0: detected capacity change from 0 to 1024 [ 306.794701][ T7902] EXT4-fs: Ignoring removed i_version option [ 306.794727][ T7902] EXT4-fs: Ignoring removed orlov option [ 306.825032][ T7902] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 306.846852][ T7902] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 306.851024][ T7902] EXT4-fs (loop0): orphan cleanup on readonly fs [ 306.880811][ T6745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.890119][ T7902] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.430: Invalid inode table block 0 in block_group 0 [ 306.890226][ T7902] loop0: lost filesystem error report for type 5 error -117 [ 306.900688][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 306.900787][ C0] EXT4-fs (loop0): initial error at time 1790393554: __ext4_get_inode_loc:4916 [ 306.900862][ C0] EXT4-fs (loop0): last error at time 1790393554: __ext4_get_inode_loc:4916 [ 306.959291][ T7902] EXT4-fs (loop0): Remounting filesystem read-only [ 306.959321][ T7902] __quota_error: 428 callbacks suppressed [ 306.959336][ T7902] Quota error (device loop0): write_blk: dquota write failed [ 306.959457][ T7902] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 306.959585][ T7902] EXT4-fs (loop0): 1 truncate cleaned up [ 307.061604][ T7902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.095520][ T7902] EXT4-fs (loop0): shut down requested (2) [ 307.125972][ T7909] loop4: detected capacity change from 0 to 2048 [ 307.134532][ T7909] EXT4-fs: Ignoring removed orlov option [ 307.153026][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.246432][ T7909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.246534][ T7909] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.297644][ T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 307.451618][ T27] usb 6-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 307.452876][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.452901][ T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.455666][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.455692][ T27] usb 6-1: SerialNumber: syz [ 307.539367][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.742968][ T27] usb 6-1: 0:2 : does not exist [ 307.785001][ T7935] loop4: detected capacity change from 0 to 128 [ 307.803926][ T27] usb 6-1: USB disconnect, device number 3 [ 307.876828][ T7935] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.889476][ T7935] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.930880][ T5728] udevd[5728]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.214004][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.441'. [ 308.214979][ T7941] xfrm0: entered promiscuous mode [ 308.215002][ T7941] xfrm0: entered allmulticast mode [ 308.246578][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.441'. [ 308.720759][ T7951] loop5: detected capacity change from 0 to 256 [ 308.796844][ T7951] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 308.823456][ T7951] exFAT-fs (loop5): valid_size(562949953421322) is greater than size(10) [ 308.827338][ T33] audit: type=1800 audit(1790393556.321:445): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.446" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 309.155940][ T7961] bond1: entered promiscuous mode [ 309.155966][ T7961] bond1: entered allmulticast mode [ 309.356136][ T7966] FAULT_INJECTION: forcing a failure. [ 309.356136][ T7966] name failslab, interval 1, probability 0, space 0, times 0 [ 309.356175][ T7966] CPU: 0 UID: 0 PID: 7966 Comm: syz.0.452 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.356208][ T7966] Tainted: [L]=SOFTLOCKUP [ 309.356217][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 309.356231][ T7966] Call Trace: [ 309.356240][ T7966] [ 309.356250][ T7966] dump_stack_lvl+0xe8/0x150 [ 309.356291][ T7966] should_fail_ex+0x3eb/0x540 [ 309.356332][ T7966] should_failslab+0xa8/0x100 [ 309.356368][ T7966] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 309.356396][ T7966] ? __d_lookup+0x66/0x790 [ 309.356427][ T7966] ? __d_alloc+0x37/0x6f0 [ 309.356453][ T7966] ? __d_alloc+0x37/0x6f0 [ 309.356488][ T7966] __d_alloc+0x37/0x6f0 [ 309.356524][ T7966] d_alloc+0x4b/0x190 [ 309.356551][ T7966] ? lookup_one_qstr_excl+0xc4/0x360 [ 309.356584][ T7966] lookup_one_qstr_excl+0xd8/0x360 [ 309.356614][ T7966] ? lookup_noperm_common+0x245/0x430 [ 309.356647][ T7966] start_dirop+0x5c/0x90 [ 309.356674][ T7966] simple_start_creating+0xcc/0x110 [ 309.356710][ T7966] ? __pfx_simple_start_creating+0x10/0x10 [ 309.356743][ T7966] ? do_raw_spin_unlock+0xf5/0x200 [ 309.356767][ T7966] ? mntput+0x65/0xc0 [ 309.356809][ T7966] debugfs_start_creating+0xca/0x1b0 [ 309.356844][ T7966] __debugfs_create_file+0x6f/0x400 [ 309.356879][ T7966] debugfs_create_file_full+0x3f/0x60 [ 309.356914][ T7966] ref_tracker_dir_debugfs+0x197/0x360 [ 309.356938][ T7966] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 309.356994][ T7966] ? __kasan_kmalloc+0x93/0xb0 [ 309.357036][ T7966] ? __raw_spin_lock_init+0x45/0x100 [ 309.357064][ T7966] preinit_net+0x1ca/0x760 [ 309.357102][ T7966] copy_net_ns+0x2c3/0x770 [ 309.357138][ T7966] create_new_namespaces+0x3f0/0x6b0 [ 309.357170][ T7966] ? security_capable+0x7e/0x2c0 [ 309.357206][ T7966] unshare_nsproxy_namespaces+0x144/0x190 [ 309.357237][ T7966] ksys_unshare+0x53c/0x890 [ 309.357268][ T7966] ? __pfx_ksys_unshare+0x10/0x10 [ 309.357300][ T7966] ? rcu_is_watching+0x16/0xb0 [ 309.357340][ T7966] __x64_sys_unshare+0x38/0x50 [ 309.357369][ T7966] do_syscall_64+0x166/0x520 [ 309.357391][ T7966] ? trace_irq_disable+0x3b/0x140 [ 309.357417][ T7966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.357437][ T7966] ? clear_bhb_loop+0x70/0xc0 [ 309.357462][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.357482][ T7966] RIP: 0033:0x7f021f79e159 [ 309.357502][ T7966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.357520][ T7966] RSP: 002b:00007f022071f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 309.357543][ T7966] RAX: ffffffffffffffda RBX: 00007f021fa25fa0 RCX: 00007f021f79e159 [ 309.357557][ T7966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 309.357570][ T7966] RBP: 00007f021f83506b R08: 0000000000000000 R09: 0000000000000000 [ 309.357582][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.357593][ T7966] R13: 00007f021fa26038 R14: 00007f021fa25fa0 R15: 00007ffdbaa2a948 [ 309.357625][ T7966] [ 309.741537][ T7969] loop3: detected capacity change from 0 to 512 [ 309.858409][ T7969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.858536][ T7969] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.997578][ T7957] loop6: detected capacity change from 0 to 40427 [ 310.003591][ T7957] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 310.003620][ T7957] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 310.044365][ T7957] F2FS-fs (loop6): invalid crc value [ 310.168792][ T7957] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 310.210193][ T7957] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 310.210225][ T7957] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 310.349768][ T5622] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 310.377966][ T5622] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 310.399813][ T5622] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 310.401601][ T5622] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 310.402949][ T5622] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 310.418315][ T5622] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 310.418880][ T33] audit: type=1804 audit(1790393557.911:446): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.449" name="/newroot/28/file0/bus" dev="loop6" ino=10 res=1 errno=0 [ 310.429748][ T5622] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 310.434340][ T5622] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 310.493657][ T5622] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 310.509201][ T5611] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.527892][ T5622] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 310.768681][ T7989] loop4: detected capacity change from 0 to 512 [ 310.796033][ T7989] EXT4-fs (loop4): Test dummy encryption mode enabled [ 310.814671][ T7989] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.456: inode has both inline data and extents flags [ 310.814710][ T7989] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 310.817162][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 310.817186][ C0] EXT4-fs (loop4): initial error at time 1790393558: ext4_orphan_get:1403: inode 15 [ 310.817218][ C0] EXT4-fs (loop4): last error at time 1790393558: ext4_orphan_get:1403: inode 15 [ 310.827534][ T7989] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.456: couldn't read orphan inode 15 (err -117) [ 310.827639][ T7989] loop4: lost filesystem error report for type 5 error -117 [ 310.892041][ T7989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.082535][ T7989] fscrypt: AES-256-XTS using blk-crypto-fallback [ 311.161676][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.504690][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.760601][ T8001] FAULT_INJECTION: forcing a failure. [ 311.760601][ T8001] name failslab, interval 1, probability 0, space 0, times 0 [ 311.760639][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.4.464 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.760670][ T8001] Tainted: [L]=SOFTLOCKUP [ 311.760678][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.760691][ T8001] Call Trace: [ 311.760700][ T8001] [ 311.760710][ T8001] dump_stack_lvl+0xe8/0x150 [ 311.760749][ T8001] should_fail_ex+0x3eb/0x540 [ 311.760789][ T8001] should_failslab+0xa8/0x100 [ 311.760826][ T8001] __kvmalloc_node_noprof+0x171/0x820 [ 311.760859][ T8001] ? __kvmalloc_node_noprof+0x340/0x820 [ 311.760887][ T8001] ? bpf_check_cfg+0x1b5/0x4060 [ 311.760920][ T8001] ? bpf_check_cfg+0x1b5/0x4060 [ 311.760985][ T8001] bpf_check_cfg+0x1b5/0x4060 [ 311.761050][ T8001] ? kasan_quarantine_put+0xbb/0x1f0 [ 311.761081][ T8001] ? __pfx_bpf_check_cfg+0x10/0x10 [ 311.761119][ T8001] ? kfree+0x1c5/0x650 [ 311.761141][ T8001] ? bpf_prog_calc_tag+0x310/0x370 [ 311.761173][ T8001] ? vfree+0x426/0x490 [ 311.761200][ T8001] ? bpf_prog_calc_tag+0x310/0x370 [ 311.761241][ T8001] ? resolve_func_ptrs+0xc7b/0xe50 [ 311.761280][ T8001] ? check_and_resolve_insns+0x1e4b/0x22f0 [ 311.761326][ T8001] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 311.761364][ T8001] ? add_kfuncs+0x251/0x2e0 [ 311.761408][ T8001] bpf_check+0x2988/0x3380 [ 311.761461][ T8001] ? __pfx_bpf_check+0x10/0x10 [ 311.761498][ T8001] ? bpf_obj_name_cpy+0x194/0x1e0 [ 311.761529][ T8001] bpf_prog_load+0x14d1/0x1c20 [ 311.761577][ T8001] ? __pfx_bpf_prog_load+0x10/0x10 [ 311.761629][ T8001] ? __might_fault+0xaf/0x130 [ 311.761659][ T8001] __sys_bpf+0xd0d/0xd90 [ 311.761702][ T8001] ? __pfx___sys_bpf+0x10/0x10 [ 311.761740][ T8001] ? do_futex+0x3e7/0x4e0 [ 311.761795][ T8001] ? rcu_is_watching+0x16/0xb0 [ 311.761836][ T8001] __x64_sys_bpf+0xba/0xd0 [ 311.761870][ T8001] do_syscall_64+0x166/0x520 [ 311.761897][ T8001] ? trace_irq_disable+0x3b/0x140 [ 311.761927][ T8001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.761951][ T8001] ? clear_bhb_loop+0x70/0xc0 [ 311.761980][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.762003][ T8001] RIP: 0033:0x7f6bb1b9e159 [ 311.762025][ T8001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.762046][ T8001] RSP: 002b:00007f6bb2afe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.762071][ T8001] RAX: ffffffffffffffda RBX: 00007f6bb1e25fa0 RCX: 00007f6bb1b9e159 [ 311.762089][ T8001] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 311.762103][ T8001] RBP: 00007f6bb1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 311.762130][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.762145][ T8001] R13: 00007f6bb1e26038 R14: 00007f6bb1e25fa0 R15: 00007ffea59b6278 [ 311.762180][ T8001] [ 312.133396][ T1388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.412918][ T8016] loop5: detected capacity change from 0 to 512 [ 312.534033][ T1388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.704853][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.708437][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.911577][ T1388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.915805][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.949643][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.950341][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.247806][ T8032] loop6: detected capacity change from 0 to 128 [ 314.170460][ T1388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.520934][ T8041] loop0: detected capacity change from 0 to 40427 [ 314.540551][ T8041] F2FS-fs (loop0): build fault injection rate: 690 [ 314.543305][ T8041] F2FS-fs (loop0): invalid crc value [ 314.705836][ T8041] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 314.729268][ T8041] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 314.955629][ T8047] loop6: detected capacity change from 0 to 512 [ 314.969978][ T8047] EXT4-fs: Ignoring removed oldalloc option [ 315.012621][ T8047] EXT4-fs (loop6): orphan cleanup on readonly fs [ 315.012649][ T8047] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 315.014498][ T8033] syzkaller0: entered promiscuous mode [ 315.014524][ T8033] syzkaller0: entered allmulticast mode [ 315.555767][ T8047] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.476: attempt to clear invalid blocks 2 len 1 [ 315.555823][ T8047] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 315.557963][ C1] EXT4-fs (loop6): initial error at time 1790393563: ext4_clear_blocks:876: inode 13 [ 315.558011][ C1] EXT4-fs (loop6): last error at time 1790393563: ext4_clear_blocks:876: inode 13 [ 315.649831][ T8047] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 315.650386][ T8047] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.476: invalid indirect mapped block 1819239214 (level 0) [ 315.650423][ T8047] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 315.684021][ T8047] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.476: invalid indirect mapped block 1819239214 (level 1) [ 315.684063][ T8047] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 315.721517][ T8047] EXT4-fs (loop6): 1 truncate cleaned up [ 315.725025][ T8047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.829143][ T6930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.023609][ T5617] Bluetooth: hci3: command tx timeout [ 316.307022][ T8066] loop5: detected capacity change from 0 to 512 [ 316.310594][ T8066] EXT4-fs: Ignoring removed orlov option [ 316.313156][ T8066] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 48900)! [ 316.313249][ T8066] EXT4-fs (loop5): group descriptors corrupted! [ 316.363008][ T8068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.363028][ T8068] IPv6: NLM_F_CREATE should be set when creating new route [ 316.363074][ T8068] IPv6: NLM_F_CREATE should be set when creating new route [ 317.654006][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.097823][ T5617] Bluetooth: hci3: command tx timeout [ 318.764460][ T8071] loop5: detected capacity change from 0 to 131072 [ 318.770308][ T8071] F2FS-fs (loop5): invalid crc value [ 318.964487][ T8071] F2FS-fs (loop5): access invalid blkaddr:0 [ 318.964532][ T8071] CPU: 1 UID: 0 PID: 8071 Comm: syz.5.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.964563][ T8071] Tainted: [L]=SOFTLOCKUP [ 318.964573][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.964587][ T8071] Call Trace: [ 318.964596][ T8071] [ 318.964607][ T8071] dump_stack_lvl+0xe8/0x150 [ 318.964649][ T8071] __f2fs_is_valid_blkaddr+0xe76/0x1520 [ 318.964688][ T8071] sanity_check_extent_cache+0x15c/0x9e0 [ 318.964721][ T8071] ? set_nlink+0x5f/0x170 [ 318.964749][ T8071] f2fs_iget+0x36ff/0x5370 [ 318.964804][ T8071] f2fs_fill_super+0x544b/0x7c60 [ 318.964881][ T8071] get_tree_bdev_flags+0x430/0x4f0 [ 318.964913][ T8071] ? __pfx_f2fs_fill_super+0x10/0x10 [ 318.964942][ T8071] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 318.964985][ T8071] vfs_get_tree+0x92/0x2a0 [ 318.965019][ T8071] do_new_mount+0x319/0xdc0 [ 318.965050][ T8071] ? __pfx_do_new_mount+0x10/0x10 [ 318.965077][ T8071] ? ns_capable+0x84/0xe0 [ 318.965109][ T8071] ? path_mount+0x647/0x1050 [ 318.965138][ T8071] ? user_path_at+0xd4/0x160 [ 318.965168][ T8071] __se_sys_mount+0x31d/0x420 [ 318.965200][ T8071] ? __pfx___se_sys_mount+0x10/0x10 [ 318.965232][ T8071] ? __x64_sys_mount+0x20/0xc0 [ 318.965259][ T8071] do_syscall_64+0x166/0x520 [ 318.965284][ T8071] ? trace_irq_disable+0x3b/0x140 [ 318.965314][ T8071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.965337][ T8071] ? clear_bhb_loop+0x70/0xc0 [ 318.965365][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.965387][ T8071] RIP: 0033:0x7f08bfb9f3ca [ 318.965408][ T8071] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.965427][ T8071] RSP: 002b:00007f08c0ae9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.965452][ T8071] RAX: ffffffffffffffda RBX: 00007f08c0ae9ee0 RCX: 00007f08bfb9f3ca [ 318.965469][ T8071] RDX: 0000200000000380 RSI: 0000200000002500 RDI: 00007f08c0ae9ea0 [ 318.965486][ T8071] RBP: 0000200000000380 R08: 00007f08c0ae9ee0 R09: 0000000000000000 [ 318.965515][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000002500 [ 318.965531][ T8071] R13: 00007f08c0ae9ea0 R14: 00000000000105eb R15: 0000200000000280 [ 318.965568][ T8071] [ 319.083196][ T8071] loop5: lost filesystem error report for type 5 error -117 [ 319.083221][ T8071] F2FS-fs (loop5): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 319.083298][ T8071] loop5: lost filesystem error report for type 5 error -117 [ 319.083315][ T8071] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 319.083490][ T8071] F2FS-fs (loop5): Failed to read root inode [ 319.491421][ T8071] loop5: detected capacity change from 0 to 1024 [ 319.492207][ T8071] EXT4-fs: Ignoring removed bh option [ 319.540988][ T8071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.148669][ T6745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.177388][ T5617] Bluetooth: hci3: command tx timeout [ 320.856054][ T8100] loop5: detected capacity change from 0 to 256 [ 320.892875][ T8100] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 320.892905][ T8100] exFAT-fs (loop5): invalid boot region [ 320.892915][ T8100] exFAT-fs (loop5): failed to recognize exfat type [ 321.199691][ T8084] loop6: detected capacity change from 0 to 131072 [ 321.351018][ T8084] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 321.406529][ T8084] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 321.459113][ T8113] netlink: 64 bytes leftover after parsing attributes in process `syz.5.497'. [ 321.459144][ T8113] netlink: 120 bytes leftover after parsing attributes in process `syz.5.497'. [ 322.271123][ T5617] Bluetooth: hci3: command tx timeout [ 322.395110][ T8131] loop5: detected capacity change from 0 to 512 [ 322.415422][ T8131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 322.415554][ T8131] System zones: 1-12 [ 322.431246][ T8131] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.507: missing EA_INODE flag [ 322.431289][ T8131] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 322.447591][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 322.447624][ C0] EXT4-fs (loop5): initial error at time 1790393569: ext4_xattr_inode_iget:437: inode 12 [ 322.447659][ C0] EXT4-fs (loop5): last error at time 1790393569: ext4_xattr_inode_iget:437: inode 12 [ 322.502397][ T8131] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.507: error while reading EA inode 12 err=-117 [ 322.502434][ T8131] loop5: lost filesystem error report for type 5 error -117 [ 322.506286][ T8131] EXT4-fs (loop5): 1 orphan inode deleted [ 322.510647][ T8131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.409518][ T33] audit: type=1800 audit(1790393572.911:447): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.507" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 327.186729][ T6745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.651521][ T1388] vlan2: left promiscuous mode [ 327.651547][ T1388] macsec0: left promiscuous mode [ 327.652547][ T1388] bridge0: port 3(vlan2) entered disabled state [ 327.692985][ T1388] bridge_slave_1: left allmulticast mode [ 327.693017][ T1388] bridge_slave_1: left promiscuous mode [ 327.693258][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.746659][ T1388] bridge_slave_0: left allmulticast mode [ 327.746687][ T1388] bridge_slave_0: left promiscuous mode [ 327.746885][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.063261][ T8170] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.004921][ T1388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.006711][ T8159] loop4: detected capacity change from 0 to 40427 [ 329.037833][ T1388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.042096][ T8159] F2FS-fs (loop4): invalid crc value [ 329.079959][ T1388] bond0 (unregistering): Released all slaves [ 329.132551][ T1388] bond1 (unregistering): Released all slaves [ 329.315489][ T8159] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 329.367563][ T8159] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 329.367607][ T8159] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 329.367633][ T8159] F2FS-fs (loop4): Start checkpoint disabled! [ 329.456333][ T8159] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 329.474115][ T8159] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 330.280563][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.5.528'. [ 330.300644][ T8201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.478517][ T8188] syzkaller0: entered promiscuous mode [ 330.478552][ T8188] syzkaller0: entered allmulticast mode [ 330.583170][ T1406] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 330.583255][ T1406] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 330.583667][ T1406] bond1: active interface up! [ 331.708457][ T8230] loop5: detected capacity change from 0 to 512 [ 331.742415][ T8230] EXT4-fs (loop5): Test dummy encryption mode enabled [ 331.794792][ T8230] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.531: inode has both inline data and extents flags [ 331.794831][ T8230] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 331.809850][ T8230] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.531: couldn't read orphan inode 15 (err -117) [ 331.809940][ T8230] loop5: lost filesystem error report for type 5 error -117 [ 331.829316][ T8230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.945720][ T6745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.133164][ T8236] loop5: detected capacity change from 0 to 256 [ 332.134283][ T8236] vfat: Bad value for 'fmask' [ 335.269919][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 335.441114][ T1388] hsr_slave_0: left promiscuous mode [ 335.441990][ T1388] hsr_slave_1: left promiscuous mode [ 335.443083][ T1388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.443106][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.444916][ T1388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.444937][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.479328][ T8262] loop0: detected capacity change from 0 to 4096 [ 335.505049][ T8262] EXT4-fs: Ignoring removed oldalloc option [ 335.520283][ T1388] veth1_macvtap: left allmulticast mode [ 335.520323][ T1388] veth1_macvtap: left promiscuous mode [ 335.520355][ T1388] veth0_macvtap: left promiscuous mode [ 335.520525][ T1388] veth1_vlan: left promiscuous mode [ 335.520683][ T1388] veth0_vlan: left promiscuous mode [ 335.521451][ T8262] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 335.578183][ T8262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.716911][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.089468][ T8273] loop0: detected capacity change from 0 to 512 [ 336.136949][ T8273] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 336.146376][ T8273] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.544: corrupted in-inode xattr: e_value size too large [ 336.146415][ T8273] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 336.147126][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 336.147146][ C0] EXT4-fs (loop0): initial error at time 1790393583: ext4_iget_extra_inode:5210: inode 15 [ 336.147195][ C0] EXT4-fs (loop0): last error at time 1790393583: ext4_iget_extra_inode:5210: inode 15 [ 336.149247][ T8273] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.544: couldn't read orphan inode 15 (err -117) [ 336.149342][ T8273] loop0: lost filesystem error report for type 5 error -117 [ 336.241469][ T8273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.378254][ T1388] team0 (unregistering): Port device team_slave_1 removed [ 336.422604][ T1388] team0 (unregistering): Port device team_slave_0 removed [ 336.764162][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.950160][ T8286] loop5: detected capacity change from 0 to 4096 [ 336.966521][ T8286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 336.966544][ T8286] EXT4-fs (loop5): Test dummy encryption mode enabled [ 336.990415][ T8286] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 336.990545][ T8286] System zones: 0-5 [ 337.011984][ T8286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.115976][ T6745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.405442][ T8296] loop6: detected capacity change from 0 to 1024 [ 337.406447][ T8296] ext4: Unknown parameter 'fowner' [ 337.795812][ T8303] loop5: detected capacity change from 0 to 128 [ 338.969750][ T8312] loop4: detected capacity change from 0 to 512 [ 339.006878][ T8312] EXT4-fs: Ignoring removed oldalloc option [ 339.023948][ T8312] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 339.081638][ T8312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 339.081890][ T8312] EXT4-fs (loop4): orphan cleanup on readonly fs [ 339.081910][ T8312] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.557: bad orphan inode 267 [ 339.081946][ T8312] loop4: lost filesystem error report for type 5 error -117 [ 339.087169][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 339.087200][ C0] EXT4-fs (loop4): initial error at time 1790393586: ext4_orphan_get:1429 [ 339.087230][ C0] EXT4-fs (loop4): last error at time 1790393586: ext4_orphan_get:1429 [ 339.151653][ T8312] EXT4-fs (loop4): Remounting filesystem read-only [ 339.195562][ T8312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 339.671792][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.673483][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.673654][ T8021] bridge_slave_0: entered allmulticast mode [ 339.683165][ T8021] bridge_slave_0: entered promiscuous mode [ 339.695542][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.696361][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.696816][ T8021] bridge_slave_1: entered allmulticast mode [ 339.739984][ T8021] bridge_slave_1: entered promiscuous mode [ 339.768258][ T8327] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.557: dx entry: limit 0 != root limit 125 [ 339.768347][ T8327] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.557: Corrupt directory, running e2fsck is recommended [ 340.577209][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.609013][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.745703][ T8021] team0: Port device team_slave_0 added [ 340.757043][ T8021] team0: Port device team_slave_1 added [ 340.806638][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.806660][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.806690][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.855712][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.855732][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.855762][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.173378][ T8021] hsr_slave_0: entered promiscuous mode [ 341.184924][ T8021] hsr_slave_1: entered promiscuous mode [ 341.194804][ T8021] debugfs: 'hsr0' already exists in 'hsr' [ 341.194827][ T8021] Cannot create hsr debugfs directory [ 341.859698][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 342.696151][ T8346] loop5: detected capacity change from 0 to 512 [ 342.707039][ T8346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.722977][ T8346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e019, mo2=0002] [ 342.723119][ T8346] System zones: 1-12 [ 342.746861][ T8346] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.565: missing EA_INODE flag [ 342.746889][ T8346] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 342.747118][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 342.747139][ C0] EXT4-fs (loop5): initial error at time 1790393590: ext4_xattr_inode_iget:437: inode 12 [ 342.747172][ C0] EXT4-fs (loop5): last error at time 1790393590: ext4_xattr_inode_iget:437: inode 12 [ 342.749393][ T8346] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.565: error while reading EA inode 12 err=-117 [ 342.749486][ T8346] loop5: lost filesystem error report for type 5 error -117 [ 342.777666][ T8346] EXT4-fs (loop5): 1 orphan inode deleted [ 342.784660][ T8346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.916578][ T6745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.005805][ T8366] loop5: detected capacity change from 0 to 512 [ 344.015233][ T8366] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 344.047326][ T8366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 344.047467][ T8366] System zones: 1-12 [ 344.047816][ T8366] EXT4-fs error (device loop5): ext4_quota_enable:7256: comm syz.5.572: Bad quota inum: 2934046720, type: 1 [ 344.047848][ T8366] loop5: lost filesystem error report for type 5 error -117 [ 344.049928][ T8366] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 344.050434][ T8366] EXT4-fs (loop5): mount failed [ 344.059101][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 344.059126][ C1] EXT4-fs (loop5): initial error at time 1790393591: ext4_quota_enable:7256 [ 344.059152][ C1] EXT4-fs (loop5): last error at time 1790393591: ext4_quota_enable:7256 [ 344.325209][ T8021] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 344.406313][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.419936][ T8021] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 345.073145][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.074495][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz.5.572'. [ 345.123003][ T8021] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 345.223501][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.224416][ T8021] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 345.253010][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.391481][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 345.632880][ T8390] loop6: detected capacity change from 0 to 256 [ 345.645688][ T8390] exfat: Deprecated parameter 'namecase' [ 345.955452][ T8393] loop5: detected capacity change from 0 to 256 [ 346.752786][ T8393] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 346.752817][ T8393] exFAT-fs (loop5): invalid boot region [ 346.752827][ T8393] exFAT-fs (loop5): failed to recognize exfat type [ 347.403778][ T8390] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 348.386080][ T8403] loop5: detected capacity change from 0 to 512 [ 348.386809][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.425508][ T8403] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 348.480901][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.520010][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.520138][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.565846][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.565955][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.618718][ T8403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 348.622137][ T8403] System zones: 1-12 [ 348.643331][ T8403] EXT4-fs error (device loop5): ext4_quota_enable:7256: comm syz.5.577: Bad quota inum: 2934046720, type: 1 [ 348.643369][ T8403] loop5: lost filesystem error report for type 5 error -117 [ 348.647108][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 348.647133][ C0] EXT4-fs (loop5): initial error at time 1790393596: ext4_quota_enable:7256 [ 348.647159][ C0] EXT4-fs (loop5): last error at time 1790393596: ext4_quota_enable:7256 [ 348.687567][ T8403] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 348.688859][ T8403] EXT4-fs (loop5): mount failed [ 349.172900][ T8416] loop4: detected capacity change from 0 to 1024 [ 349.269585][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.577'. [ 349.291291][ T8416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.371221][ T8416] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 349.413549][ T8416] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 349.413588][ T8416] EXT4-fs (loop4): This should not happen!! Data will be lost [ 349.413588][ T8416] [ 349.413604][ T8416] EXT4-fs (loop4): Total free blocks count 0 [ 349.413619][ T8416] EXT4-fs (loop4): Free/Dirty block details [ 349.413661][ T8416] EXT4-fs (loop4): free_blocks=20480 [ 349.413694][ T8416] EXT4-fs (loop4): dirty_blocks=80 [ 349.413708][ T8416] EXT4-fs (loop4): Block reservation details [ 349.413720][ T8416] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 349.440693][ T8427] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28 [ 349.883791][ T8437] [ 350.077638][ T5743] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 350.244420][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 350.246810][ T5743] usb 5-1: not running at top speed; connect to a high speed hub [ 350.246849][ T5743] usb 5-1: New USB device found: idVendor=0856, idProduct=ac19, bcdDevice=79.2c [ 350.253974][ T5743] usb 5-1: config 248 has an invalid interface number: 146 but max is 0 [ 350.254051][ T5743] usb 5-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config [ 350.254091][ T5743] usb 5-1: config 248 has no interface number 0 [ 350.254202][ T5743] usb 5-1: config 248 interface 146 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 350.254285][ T5743] usb 5-1: config 248 interface 146 has no altsetting 0 [ 350.285665][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.285743][ T5743] usb 5-1: Product: syz [ 350.285783][ T5743] usb 5-1: Manufacturer: syz [ 350.285823][ T5743] usb 5-1: SerialNumber: syz [ 350.382542][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 350.564787][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.736507][ T8459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.265491][ T5743] ftdi_sio 5-1:248.146: FTDI USB Serial Device converter detected [ 351.276332][ T5743] ftdi_sio ttyUSB0: unknown device type: 0x792c [ 351.289096][ T5743] usb 5-1: USB disconnect, device number 6 [ 351.399931][ T5743] ftdi_sio 5-1:248.146: device disconnected [ 351.987610][ T5743] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 352.742370][ T5743] usb 1-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 352.743233][ T5743] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 352.743266][ T5743] usb 1-1: can't read configurations, error -71 [ 352.891741][ T6218] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.302119][ T6218] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.337182][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.343094][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.344473][ T8489] loop6: detected capacity change from 0 to 512 [ 353.344533][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.360349][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.362171][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.391179][ T8021] veth0_vlan: entered promiscuous mode [ 353.449039][ T8489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.482591][ T8489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e019, mo2=0002] [ 353.482724][ T8489] System zones: 1-12 [ 353.495792][ T8489] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.592: missing EA_INODE flag [ 353.495822][ T8489] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 353.497098][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 353.497120][ C1] EXT4-fs (loop6): initial error at time 1790393600: ext4_xattr_inode_iget:437: inode 12 [ 353.497154][ C1] EXT4-fs (loop6): last error at time 1790393600: ext4_xattr_inode_iget:437: inode 12 [ 353.499036][ T8489] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.592: error while reading EA inode 12 err=-117 [ 353.499068][ T8489] loop6: lost filesystem error report for type 5 error -117 [ 353.500400][ T8489] EXT4-fs (loop6): 1 orphan inode deleted [ 353.534267][ T8489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.642169][ T6218] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.671769][ T8021] veth1_vlan: entered promiscuous mode [ 353.686629][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 353.841243][ T6218] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.373076][ T8504] loop4: detected capacity change from 0 to 256 [ 354.377300][ T8504] vfat: Bad value for 'fmask' [ 354.495917][ T6930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.554265][ T8021] veth0_macvtap: entered promiscuous mode [ 354.568863][ T8021] veth1_macvtap: entered promiscuous mode [ 354.663684][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.722768][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.867637][ T1388] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.867690][ T1388] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.867729][ T1388] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.038541][ T1388] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.462577][ T54] Bluetooth: hci2: command tx timeout [ 355.749003][ T6218] bridge_slave_1: left allmulticast mode [ 355.749032][ T6218] bridge_slave_1: left promiscuous mode [ 355.749328][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.786435][ T6218] bridge_slave_0: left allmulticast mode [ 355.786465][ T6218] bridge_slave_0: left promiscuous mode [ 355.789277][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.276694][ T8516] loop0: detected capacity change from 0 to 40427 [ 356.299938][ T8516] ------------[ cut here ]------------ [ 356.299956][ T8516] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:3949:27 [ 356.299978][ T8516] shift exponent 4294967287 is too large for 64-bit type 'sector_t' (aka 'unsigned long long') SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 356.300004][ T8516] CPU: 0 UID: 0 PID: 8516 Comm: syz.0.596 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.300035][ T8516] Tainted: [L]=SOFTLOCKUP [ 356.300043][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 356.300058][ T8516] Call Trace: [ 356.300067][ T8516] [ 356.300077][ T8516] dump_stack_lvl+0xe8/0x150 [ 356.300119][ T8516] ubsan_epilogue+0xa/0x30 [ 356.300143][ T8516] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 356.300230][ T8516] ? bio_alloc_bioset+0x889/0xc60 [ 356.300290][ T8516] ? folio_unlock+0x101/0x160 [ 356.300322][ T8516] __f2fs_commit_super+0x43e/0x4d0 [ 356.300379][ T8516] sanity_check_area_boundary+0x7c5/0xe20 [ 356.300458][ T8516] f2fs_fill_super+0x1916/0x7c60 [ 356.300537][ T8516] get_tree_bdev_flags+0x430/0x4f0 [ 356.300571][ T8516] ? __pfx_f2fs_fill_super+0x10/0x10 [ 356.300602][ T8516] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 356.300644][ T8516] vfs_get_tree+0x92/0x2a0 [ 356.300679][ T8516] do_new_mount+0x319/0xdc0 [ 356.300710][ T8516] ? __pfx_do_new_mount+0x10/0x10 [ 356.300749][ T8516] ? ns_capable+0x84/0xe0 [ 356.300782][ T8516] ? path_mount+0x647/0x1050 [ 356.300810][ T8516] ? user_path_at+0xd4/0x160 [ 356.300840][ T8516] __se_sys_mount+0x31d/0x420 [ 356.300873][ T8516] ? __pfx___se_sys_mount+0x10/0x10 [ 356.300906][ T8516] ? __x64_sys_mount+0x20/0xc0 [ 356.300934][ T8516] do_syscall_64+0x166/0x520 [ 356.301009][ T8516] ? trace_irq_disable+0x3b/0x140 [ 356.301041][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.301064][ T8516] ? clear_bhb_loop+0x70/0xc0 [ 356.301092][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.301115][ T8516] RIP: 0033:0x7f021f79f3ca [ 356.301136][ T8516] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.301157][ T8516] RSP: 002b:00007f022071ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.301183][ T8516] RAX: ffffffffffffffda RBX: 00007f022071eee0 RCX: 00007f021f79f3ca [ 356.301200][ T8516] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f022071eea0 [ 356.301216][ T8516] RBP: 0000200000000040 R08: 00007f022071eee0 R09: 0000000000000000 [ 356.301232][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 356.301246][ T8516] R13: 00007f022071eea0 R14: 0000000000005548 R15: 0000200000005800 [ 356.301281][ T8516] [ 356.304373][ T8516] ---[ end trace ]--- [ 356.304406][ T8516] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 356.570821][ T8516] CPU: 0 UID: 0 PID: 8516 Comm: syz.0.596 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.581698][ T8516] Tainted: [L]=SOFTLOCKUP [ 356.586060][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 356.596141][ T8516] Call Trace: [ 356.599448][ T8516] [ 356.602399][ T8516] vpanic+0x26f/0x710 [ 356.606434][ T8516] panic+0xc5/0xd0 [ 356.610178][ T8516] ? __pfx_panic+0x10/0x10 [ 356.614628][ T8516] ? __pfx__printk+0x10/0x10 [ 356.619252][ T8516] check_panic_on_warn+0x89/0xb0 [ 356.624210][ T8516] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 356.630664][ T8516] ? bio_alloc_bioset+0x889/0xc60 [ 356.635734][ T8516] ? folio_unlock+0x101/0x160 [ 356.640436][ T8516] __f2fs_commit_super+0x43e/0x4d0 [ 356.645576][ T8516] sanity_check_area_boundary+0x7c5/0xe20 [ 356.651343][ T8516] f2fs_fill_super+0x1916/0x7c60 [ 356.656352][ T8516] get_tree_bdev_flags+0x430/0x4f0 [ 356.661504][ T8516] ? __pfx_f2fs_fill_super+0x10/0x10 [ 356.666815][ T8516] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 356.672481][ T8516] vfs_get_tree+0x92/0x2a0 [ 356.676924][ T8516] do_new_mount+0x319/0xdc0 [ 356.681461][ T8516] ? __pfx_do_new_mount+0x10/0x10 [ 356.686505][ T8516] ? ns_capable+0x84/0xe0 [ 356.690864][ T8516] ? path_mount+0x647/0x1050 [ 356.695499][ T8516] ? user_path_at+0xd4/0x160 [ 356.700113][ T8516] __se_sys_mount+0x31d/0x420 [ 356.704824][ T8516] ? __pfx___se_sys_mount+0x10/0x10 [ 356.710057][ T8516] ? __x64_sys_mount+0x20/0xc0 [ 356.714855][ T8516] do_syscall_64+0x166/0x520 [ 356.719465][ T8516] ? trace_irq_disable+0x3b/0x140 [ 356.724512][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.730593][ T8516] ? clear_bhb_loop+0x70/0xc0 [ 356.735311][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.741222][ T8516] RIP: 0033:0x7f021f79f3ca [ 356.745672][ T8516] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.765298][ T8516] RSP: 002b:00007f022071ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.773743][ T8516] RAX: ffffffffffffffda RBX: 00007f022071eee0 RCX: 00007f021f79f3ca [ 356.781747][ T8516] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007f022071eea0 [ 356.789742][ T8516] RBP: 0000200000000040 R08: 00007f022071eee0 R09: 0000000000000000 [ 356.797733][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 356.805727][ T8516] R13: 00007f022071eea0 R14: 0000000000005548 R15: 0000200000005800 [ 356.814083][ T8516] [ 356.817812][ T8516] Kernel Offset: disabled [ 356.822155][ T8516] Rebooting in 86400 seconds..