last executing test programs: 1m40.884840679s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@global=@item_012={0x2, 0x1, 0x3, "77cc"}, @global=@item_012={0x2, 0x1, 0x4, ' \b'}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 1m38.778873635s ago: executing program 3 (id=10): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1m38.168030598s ago: executing program 3 (id=12): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2, 0x13c}) r1 = syz_io_uring_setup(0x38, &(0x7f0000000640)={0x0, 0xadde, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) close_range(r0, 0xffffffffffffffff, 0x0) 1m37.685745195s ago: executing program 3 (id=13): syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 1m36.969037308s ago: executing program 3 (id=15): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 1m35.950054942s ago: executing program 3 (id=17): r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0xfffffffe, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40040) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) readv(r1, &(0x7f0000000100)=[{&(0x7f0000002640)=""/4117, 0x1015}], 0x1) 1m35.067331476s ago: executing program 32 (id=17): r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0xfffffffe, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x40040) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) readv(r1, &(0x7f0000000100)=[{&(0x7f0000002640)=""/4117, 0x1015}], 0x1) 37.209762073s ago: executing program 2 (id=279): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4c, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2040}, 0x1}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) 35.947758524s ago: executing program 2 (id=288): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @multicast1}, 0x10) setresuid(0xee01, 0xee00, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) 35.483984224s ago: executing program 2 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='ocfs2_dlmfs\x00', 0x11, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) 35.191315291s ago: executing program 2 (id=294): mkdir(&(0x7f00000000c0)='./file1\x00', 0x154) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x6e) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f00000000c0)) 34.667202588s ago: executing program 2 (id=298): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec6, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46ec0800000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 33.303721856s ago: executing program 2 (id=304): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="012000000000000000006610000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7001e"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x44, r4, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_a, @from_mac=@device_b, {0x9}}, 0x1c, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40094) 32.462132951s ago: executing program 33 (id=304): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="012000000000000000006610000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7001e"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x44, r4, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_a, @from_mac=@device_b, {0x9}}, 0x1c, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40094) 13.530751998s ago: executing program 1 (id=399): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 13.057620214s ago: executing program 4 (id=401): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000080), 0xe) listen(r1, 0x9) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x1) 8.955214353s ago: executing program 4 (id=418): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1001, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) mmap(&(0x7f0000827000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r1, 0x53356000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x160d38}) 7.787746678s ago: executing program 5 (id=421): mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/132, 0x84) 7.473628003s ago: executing program 1 (id=423): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 7.40102864s ago: executing program 5 (id=424): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000000580)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.298492166s ago: executing program 6 (id=426): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x21}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.84941875s ago: executing program 4 (id=428): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x6) 6.41095852s ago: executing program 1 (id=430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 6.38798969s ago: executing program 4 (id=431): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x40000}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 6.19509985s ago: executing program 5 (id=434): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x32) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 6.056356972s ago: executing program 6 (id=435): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x100}}], 0x18}}], 0x1, 0x20004874) 5.981024009s ago: executing program 1 (id=437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x6}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5.561533782s ago: executing program 6 (id=439): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = inotify_init1(0x800) r2 = getpid() r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000240)={0x20000006}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x4}) 5.373591606s ago: executing program 5 (id=441): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file1\x00', 0x2008000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x2, 0xc40, &(0x7f0000002740)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 5.191536319s ago: executing program 1 (id=443): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) write$vga_arbiter(r1, 0x0, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) write$UHID_INPUT(r0, &(0x7f0000001240)={0x8, {"497b1d6dc1fcadafb4c9f2614ecbdc543d5463de7dae6ae5239e6042dfe95320f5a653e92d3a4d8a7cc493e4c935139ddfa4927ae83ed421a28626d4b647d34130cf0d077c83ea657cbca69e2da7329bbab73cab299afb0b60451f05ea7d39742e4a29bdfc9a451bc6849378c4e2de7509867acbe520138fe2afcbf768db1c2bfb99bd1f3200d92d4654bb30413269ec3d8852ddbf8b2370ff345ce10a9de8abdfcbb49b6bc375c6218dbdaae711b4cfca2370286245dd23a79714a51f43b695fa64bdd151411a2eff6d18bfc1ceaf57ced673f416a0a3d64dde8049ce123eee14d1c48fee17931f1f323bc9fd5333504341e79264435a6965a959f73b027a054d72f685ba6193cdbf7bd63acb1c3c782998e1515f57ed1817d04cfacc174e5808e6790acd6c7ecb827d433a99fd442e87c14e00fd0a2f8403f5fd504a13782a4ca944d52d8770437683b583bf498dcbeab107922728c1650bf9c87e38ad0b72c7bcb7ea3cbb73aba9e00a3ab29227bf27ed481ab5087f51c587755d701b5a2707f014727daee7c3cfbe0d8a02b0ce358dc9814505f4a36a20977138acc67707898d876f6beb0e689c393931758c22b672f227704de287fecf7ab49272f28d56d01218feec4ae278e7c86d40d474d23b83163a77222517b30202a080e8e57d9cac0f7d0a982f1149fed9e5c378c38743bbf551aba81929fbecfa4278a1046b23b34e6757a82f4ba3fc5584538c998004a45ff7b0c572031a11ea06f6e1cfb6400354e0a07463c3c2f6f4c728a587462c4d7e1221b157dd10f0a81d476635cf6984c06d4b50af340be539768c765d8a82fc01830acae47dc8c565ecdbc8df0ad646071ec98ed4d8752efd5b1749150248c72b9b3499a7a1974a0922ea2405b21c667ad775550292fb15596b3e9384b93acb9a6bfdb151cf8949f692c4d1d6f1ff049bd1fdc9ef5a2027c7369edfdf6232bec639b00a66f66fadbc3e24aeaf0151019baf230a93fd4d8262f27974506897dd4addfe1e00d9c428b3bfd51cf19fcdd541356d78fb535d08be33e2b252d2ba24feec3c95bc9f117d5abaf060606e660f6f90bd6f1ddf4b89aaa42a8956d436472477c99d8552f23a11faa396432e7b69623148f1dfa1038729aac7c4912684177748f641173911a1763d953ae3765bfe110d00384576fc422c711a9b998613aa6c53d28fab1999b53f30b28ef162d7f5f3873d6c5eb23c449ca0b8f80558346e28597d207cedef457af8282f986e0b2f403569a1177323148e43bce768333addb57bd480848796f113a9b6520cae05e30f7098842195450dff7a510d5fa1dcb00c2df9268b55651aef466f4ceb512aee75b1756c7d129f50b8f6f1b6d56e283e4ab6652b89e4c3d5f7c06395cf786f87f1bc5aac05c3a982353dc185eb262c9756873b611c6574f579f6e0a92a595c48ac6e5727a4243c4ab78c307d8317e05836e0de9ff61caec53e3c171c17aca449602263137ffe39bba752ce18697fb291a3d9536e0893a40527aa92ad422dd2939481e125526137ea863ab559c12731504fbdb61a624063f785a4131f06bd3a6212c4fb01da4e16ef3992bd4b0ff50737eca34cb06f78c4274a928287ae465b884ec8cde0e33fe3e30da29daf75c4bb894261e7c07e2763cc31d5a9f1b7d2b8fa4b00cc84b5906dd0679f1f14dc8fab07661a3a7d01ea5babf9db43311835e8e3ced5bbcdfe008363750690854e3418568aaa4a1d0d155da972a21bf669f2d5a315c00b68be85fa1c413653e74e09430af3ee6eac7c8f0d9f15fa0f9877ea2ac86953512bbc3c8c3b2c18d6bf0b5c1823825d78be1e14d2f889dc3bdf7ed4187c085aeb719d449e10b8b7b06884ae89ee265e4064ed4426ed7a7c6ec0b73754f3c611514fc1669c62380a5ce580fc52d180d1179dc564de92a4769b15c82837a1e10d2cd4f9adc90d9caf2e69f33d045ed9db618054cd8828e9dd29007a8a5e696834952c517200edd1125713ae325dd2d0450ae51af5e05a21a3dd8125d0c3cd97439a2c377b6a903d4c714377ca7c244d1e90779e4f45ad01192e1177b4849e8ea487982f3e2ef74bb1d348894ca4113c4cf538bbee46fd5b9e3628f35a63598bf44c62903129ebec2e8a842aa3d08a1eea4190ef55770dc5f8895f9654ec537a8b738f42c29c0d1967086e39539b36f5627adc8022567c829b64c111364b8ed4f8c9f6d1be648aef7b92104ea71263326d857456601a96d01b4d7fe0f4367bab810b462896c75c2a3c0259e6e4ceab7a01736eb5365c155918b3863fdc45fe3fd8f9bcc202af961ed5f31e2ca9816e81bfac22f0a772074ab3cc4516988664803defe17f8e88307bb8f593802c1c0243bca39ec0f578289864bf994181c6f154b26a5d4651df6695d6fc9ea95621138b4d5dfc6d9a72ef34516c7801b22d8fe949206ac5b43e7f3fbe653e067eeb7142db55f711f365788acd39818ee5d4f3d90a2cd9779fd153a0f94dacecafe4a6ba73b4ca8af4fd5bc1961f4156e29e1b8beb6ff6205d25dfade50c65ee415b536eb409757a9d6d96e85c9821a422376a0cb13078dc0385cc831220b3f5298cd5391f15d60b2e67d62d0b71fb03244b28233ed644fa507c5bcc24039b8924ff296a1a2d87d63635dc573ad47a4411ac37fecb2d2faa4272892e2fd8bee35700c85cb89617d094fa387259b472f3452589c86c304a678eb82bbffa1b51f4a087adc3c1a1dd25a67b02ade978adcad520e214950b65055c58b132f4494096945247c26c4f30c125e384dc30ecc5c7e1f80220b72256a937a80e9e63bb60b50610066a4bca74384edd285c69bfdfc965e854a5d707a76a12e1378be1e1e7b4ecb8a539e4ef46cf57f9f3f67d7a737cb07d7be9549feb45f4843ba832d9970cd307ec3a1b620d45650a26f9dcf6831a73dfeaf8f54d38b3a895b948bca4226d493374b602e9eb662301e16ab93a140d598218c98582a50735195305b88f9c9fd3ae6a1364cec599725e4254558399f0757779b5dda9704a73434f445fa90ecee048a29a78a8ad5101bef42592f0e9f52ee5d4c025ae67d6351eeab4046a021906a958f74ee186aa812489460c7afc462a1b332ecf08c973ec02a63fb0435f9298809ae48703c09b6271b1cae57b881ddc93921fbc28113270bb0259d04f196e484f79c1ccda12fe1c3ef2c26ba9d1f83c6b91435a2c4903c07f58e052fc3f0ce5682b104975c79ce23a799b4a7a22687bdd0c58a3413598aebd8fcaf31c24ca9ec308c946510c86b8e4b98c14aadb493962f0355a8628c283e44ae55e1afd0205e421c54dec5e2c19211f86813e3307423d0d7ee3db608a3876a1dab76527c4f1ff3d8b7e4f0c990590dae925f9e67e3def3a55825bee23bf510c2860bb72da4bc9e52ebe52230db80a2cabdd804d30054a5453caf184b0d6cd41064645e61381031ff4d5fcb9953d0c4cf525006d26652ecc96cd93dcd727ddf1ad4aa804204553854d5c56df00a9c959e0142a88703ed07e6612b6ad020deb9fe0a2a45ee01da4ef4ab6d4f8a62da92d5c0d42425f94d218e5f21741a1b747feeddebc9d727fe92e52e43751ef7ec32c4259ffc7152cc87cc01bae7b23f5946d6ee58b10b6bbc2a078a8d4025b7c329abfb6b8e305c2a0e3bfeb9cfb432ec6821d48745fe15a40cd3bffcfbe77a0ab41b4a43ee363ea5a8af9cdf456700e50ac006769f21fbfe876f16e2aaab8842b6d1f552be2d7416de8922b6a95011e40390cc3bd06b986292955b890a0542de64ae81ee4d5e5ba36c1db7bf706cca27152e950ffee97637a01563cb658a8b2b737fb405a5240969acda4767b04eeaf91110485c19f41d5cf423165932d4e3669314731e3987998bf0863f7cca15344f90eb98922f868b8e16bf70fbf07afc0011032d18b998cc6f26414f81daa2dc5175d32c6105c4908edc967c779c2c2c6408e0b67da02c78db318fd5baeab3ef22403dc86b9915f95c7ac03c3dc49dd95a65e53ea6da8ec494de25ca0b90773167e8b6a0fd0272b553b62b09afe9b17822089eec6196d9c4ceb83276748d27ff6f88c93b0e44bc8cb156ad36f949139ab87ecf77b8ad26efdcc401a32a4c3597614f5603b79f5809a4a362fe338f04de5d7cd4eb79e06401b765e84dce053243877cba9031ce6dbcadcfb0fc8da2320eec1f7d427840731d470f8e5329d41901e5392ef61671e443fd3254bf48315097f8a7a36fe6b40dd301025c48c53b6ec9f43919202a3bee4437eedc7b61bda595d71a5eb3ad753feb30c3436e99470de7c02085677b79e1b90e5e63911b1b3e739110d83333437c178d58497faa351e99fb7eed8b46bfb481b130074543aaf55084c0517070e29d030142ebeba71de57c8358700f7494dc59138979831995f341c44da99ac522fbcfd6d2155c7dba0525f810d67aa648bed857a3e685fb9385042233ae59378f9779148d68681eab886cd18f6d1828c408d319e45e8ee34ff3f8b10d3ac191f7fb7217d0a22ccde7c1e1468f415c217806180e9b25e539a58f3cf7a2b70e8e77fd13554d5c8041e4a31719ac25f3d1aa4c7194a616710dd56c6bc8b73e71a433f60b1286551b58a843349b9963ef30525c6065a65dd552ca7e4d2ea2cb076d889791a055969bebce77dcbb05af5eb296eb678b56371ec413c2296b4fd49b1caf834b55d895db515a062784b169244d2750d91ba06e92b27f18853d0fe1fbc4ce593072477f741f68df34e16058f390077e2b29b0b3d7ec1209f59d968588c91d614b7f54d8fb6dbc7244c7976a1aa089b38aac7d4e8ce899e6693ed8c7541ad2c19a09e789a170bf82a754500c19e25d78e3e3e4b9a63cbc74e2d2c6be03e2b798ada13fbe6a2f5a715be177ae37c414bd4f3842da42167f6fe3f9d56bb2e30b3cc4d03101aa725194eec5c0edc5433b04ae7a028455d9658f6b95d913de90f88a1935a65940bd336ccdab1ecaf6110c4d9aae8574889a6d76a0b17074eddfa45413d65df41bea850e05b9e942fcd5db3535515142143e2ddd53ec384827af35a4327719a950f2ed25a7628a35fb0d00f3708dba97ee0ca1e1fecf38214fd85b0a61db67f933de11491cbe56201c37a312911f5ec2d121c4feb64f40240668dfe2befe6d1f5d1eea09ca2612fe0102bac66f99e2e5e4169c2013659fda9d5e2ca130d2e5fcf8c20723e1d82c640e13cf6472da012ccd4c66000767b5c07cfc8f608a26cfd060b42228f84b52d63298cf10ac371ab2c7f022ac45a99b12735acfd494214d9f480c1ba55804d04011fba1d39468b6c70d4df765c722742a1544eab4192bd27a92f151d260eb02e14ca2a9cba3fd94353c90a13c2dcae5e05cee0c7e656b40b232705c5ecd3002cca655d5cc52aefc332dc169c205b870e7c164c2ee8a82bde19408e144e700122c19c1eba748e89d9aa7265f48ee6e910bea2f030c1606d2c5f0865fe68d883327619234bb6018393d4c0e5c5e67bf796d9d94cf34b2e6b5eaae9fa991b9bbeeaee69d54377e05258be360d103651a0aae1aa086062c483fce474e1cc3a4c4ceb417c4bef5bcd14188af67da8c60f1ca1828dc7d0fd6ca49854c362b9af177c0a960747aba8a4aea97bc72ce17b68ec0eb9f400a1a9ff110061074727763ed03b5b30d0e5a81017fda87e1e274d430dc246af4bd4bdd7bf25837bcc0aeca272e8e1c72cdde97fde578a74f6644a527a906d4043b577cd3abfe6497120d2da5791da461ab5bb6a84582c8b1d04048a2abc5bfa1829a9c93b", 0x1000}}, 0x1006) 5.148164504s ago: executing program 6 (id=444): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 4.54266454s ago: executing program 5 (id=448): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x20, 0xa, 0x7, {0x7, 0x0, '\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a00)={0x20, 0x11, 0x6, "2b9e7fe7fa36"}, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0xe0, 0x4, [0xff00]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "fee2"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x7403}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xa3}, 0x0, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x35, "e1ef0bd470a065821481cb7ca31322cf5541738314cf11007c3b5e21bbe13321e42895f8d83185d1f06c06edf411ef0a0f0fefc631"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x9}}) 4.451910594s ago: executing program 4 (id=450): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xce1, &(0x7f0000000100)={0x0, 0x8ddc, 0x10310, 0xfffffffe, 0x4a}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 4.228779772s ago: executing program 0 (id=451): sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.917476208s ago: executing program 0 (id=453): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) syz_usb_connect(0x3, 0x356, &(0x7f0000000600)=ANY=[@ANYBLOB="120101024941db20"], 0x0) connect$netrom(r0, 0x0, 0x0) 3.860129402s ago: executing program 6 (id=454): open(0x0, 0x2a0500, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$eJzs3c1vHGcdB/DvrNeuN1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeIit0LgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmftXXv9lthrBz6faDzPM8/L/OaZZ2a866w2wP+t6xfSfJgi1y+8sVzm11Zn22ursy/Uxe0kZbqRNLurFHeT4lEyV5YXfUv61lt8vHjtrc8er33ezTXrpao/tlO7IYbUXamXTNf9TQ9tOb7XXazU4eXFJDfq9aCJvfY1ULEctPP1Go5cZ4uV/TTfz3ULHDO9p1PRfW5uMZWcSDJZ/x6Q+u7QGF2Eh2NfdzkAAAB4Tn1676gjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdP/f3/Rb006nWmU/S+/3+it61OH0Nze6758FDjAAAAAAAAAIDR+PqTPMlyTvbynaL6m/+5KnM6X3SSL+X9PMhC7udiljOfpSzlfi4nmerraGJ5fmnp/uX1lqXhLa8MbXllVEcMAAAAAAAAAP+TfpnWxt//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOCiSse6qWk7X60yl0cxGWVaSfyaZOOp496EYtvHh6OMAAACAZzL5FG2+/CRPspyTvXynqF7zf6V6vTyZ93M3S1nMUtpZyM36NXT5qr+xtjrbXludvVMuZX6w3+//e19hTNQ9jFW5YXs+W9Vo5VYWqy0Xc6MK5mYa3X2fT8724umLq89HZUzF92p7jKxZD2u5s99v9y7CgRh8K6KxQ83WRnDJ+ojM1LGVLU91R6Co3qhJNo/ErmenOZCbqnodX9/T5TTW3/k5fQhjfqJel8fzm0Md8/1aH4lGqpG40pt95TWz80gk3/jrn96+3b777u1bDy4cn0Paxdg22zfPidm+kXjluR6J5j7rz1QjcWY9fz0/yk9yIdN5M/ezmJ9mPktZSKcun6/nc/lzaueRmhvIvblbJBP1eemes73ENJ0fVqn5nKvansxiitzLzSzk9erflVzOt3M1V3Ot7wyf2Tbu6tiqq76x+arvnem/DQ3+/DfrRHl3++3GXW5upyPebnYelO69vxzXU33j2p31j9drneq7Dmb6Ruml3uiMD+38ae6Nza/WiXIfv9rlOTFaU/VIlBdQ7ynRi+7l7kg0q2fR1nn+h07ZLu27nc7t+fe26X9lU/61el1Oq9Wv7Va7Z/ipOFjlfHkpk/WdZHB2lGUvr99l+so6G3O5Wzb4xC3bnanKiqJ3pf4496oJsPVKnah/h9va05Wq7JWhZbNV2dm+soHft3Iv7dwcwfgB8DT+8fZ6cionJlr/an3a+qT169bt1huTP3jhOy+8OpHxv49/tzkz9lrj1eIv+SQ/33j9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPL0HH3z47ny7vXB/eKKxfdFAopXNW3breVOiqL/QZ3+tjm9iMsnAlup7jkYeRmtzGFsSnV8kIx+f3pcIDq/zuzLR3DKjhiXmBrb8eWuHH+0zwmJv18UhJhoZ7U7HMnwCHOFNCRiJS0t33rv04IMPv7V4Z/6dhXcW7o5fvXpt5trV12cv3VpsL8x0fx51lMBh2HjoH3UkAAAAAAAAAAAAwF4N+2DAuRd3+9DInj7j4X8WAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfi+oU0H6bI5ZmLM2V+bXW2XS699EbNZpJGIyl+lhSPkrl0l0z1dVfkj4/SGbKfjxevvfXZ47XPN/pqdusnjXq9vZ1Lk6zUS6aTjNXrZzDQ341n7q/4T+8YygH7otPpzD1bfHAw/hsAAP//msX1EQ==") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7d, 0x9b, 0x4, 0x5, 0x3, 0x3, 0x2eef5e15, 0x25d, 0x38, 0x30b, 0x7, 0x9, 0x20, 0x1, 0x1, 0x87, 0x400}, [{0x6474e551, 0x1, 0xdc, 0x4, 0x6, 0x6, 0x7fffffff, 0x8}]}, 0x58) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee00) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.125775979s ago: executing program 0 (id=456): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/120, 0x78}], 0x1}, 0xfffffffd}], 0x1, 0x40000100, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.125287144s ago: executing program 7 (id=457): socket(0x10, 0x803, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x8000) 3.012855663s ago: executing program 6 (id=458): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x165942, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003f458, 0x700000000000000) truncate(&(0x7f0000000080)='./file1\x00', 0xd) 2.69914227s ago: executing program 7 (id=459): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x400, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x104) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 2.545619358s ago: executing program 0 (id=460): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)={0x64, r4, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x8}}, 0x20, 0x49, @random=0x3, @val, @val={0x2d, 0x1a, {0x10, 0x2, 0x0, 0x0, {0x1000, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xff, 0x2}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x64}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 2.287797227s ago: executing program 7 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e00000018000280040012"], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 2.204754532s ago: executing program 0 (id=462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24048800}, 0x800) 1.81760037s ago: executing program 7 (id=463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.810587109s ago: executing program 1 (id=464): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r0, &(0x7f00000002c0)="8156", 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) close(r0) 533.383297ms ago: executing program 5 (id=465): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 420.210021ms ago: executing program 7 (id=466): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x10, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x102, &(0x7f0000000840)=ANY=[], 0x0) 341.781906ms ago: executing program 0 (id=467): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1}, 0xa2) r1 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 85.389121ms ago: executing program 7 (id=468): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xd120}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 0s ago: executing program 4 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) pidfd_getfd(r3, r4, 0x0) kernel console output (not intermixed with test programs): netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.226765][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.235816][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.248506][ T5831] veth1_vlan: entered promiscuous mode [ 118.262766][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.270619][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.306428][ T3405] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.322159][ T3405] usb 4-1: config 0 has no interface number 0 [ 118.328481][ T3405] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.360704][ T3405] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.363531][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.371148][ T3405] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 118.381625][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.401134][ T3405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.404967][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.418754][ T3405] usb 4-1: config 0 descriptor?? [ 118.425752][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.439158][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.453933][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.464017][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.474830][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.484745][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.496913][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.511668][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.596345][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.610126][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.624442][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.636009][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.646362][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.658069][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.668309][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.679121][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.691048][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.737328][ T5831] veth0_macvtap: entered promiscuous mode [ 118.767739][ T5844] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.785152][ T5844] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.810609][ T5844] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.819937][ T5844] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.896452][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.950683][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.999087][ T5831] veth1_macvtap: entered promiscuous mode [ 119.238012][ T5935] loop1: detected capacity change from 0 to 40427 [ 119.251291][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.273837][ T3405] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 119.291209][ T5935] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7 [ 119.308090][ T5935] F2FS-fs (loop1): invalid crc value [ 119.317980][ T3405] hid_prodikeys: hid-prodikeys: failed to find output report [ 119.317980][ T3405] [ 119.349506][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.380053][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.410477][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.431582][ T5935] F2FS-fs (loop1): Start checkpoint disabled! [ 119.438821][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.467024][ T5935] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 119.479418][ T3405] usb 4-1: USB disconnect, device number 2 [ 119.501207][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.511127][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.539763][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.582408][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.630937][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.665403][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.696876][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.739538][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.769886][ T5939] fido_id[5939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 119.771119][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.836778][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.856873][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.888049][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.926927][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.955469][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.012019][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.041723][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.060288][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.075535][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.091558][ T71] kworker/u8:5: attempt to access beyond end of device [ 120.091558][ T71] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.154276][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.171026][ T71] CPU: 1 UID: 0 PID: 71 Comm: kworker/u8:5 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 120.171074][ T71] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.171098][ T71] Workqueue: writeback wb_workfn (flush-7:1) [ 120.171149][ T71] Call Trace: [ 120.171160][ T71] [ 120.171173][ T71] dump_stack_lvl+0x16c/0x1f0 [ 120.171232][ T71] f2fs_handle_critical_error+0x621/0x9f0 [ 120.171282][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.171325][ T71] ? __asan_memset+0x23/0x50 [ 120.171371][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.171423][ T71] f2fs_write_end_io+0x73d/0xac0 [ 120.171482][ T71] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 120.171561][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.171615][ T71] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 120.171667][ T71] bio_endio+0x6d2/0x810 [ 120.171709][ T71] submit_bio_noacct+0x56d/0x1ec0 [ 120.171770][ T71] __submit_merged_bio+0x33c/0x770 [ 120.171827][ T71] __submit_merged_write_cond+0x319/0x3f0 [ 120.171900][ T71] f2fs_write_cache_pages+0x2139/0x2680 [ 120.171989][ T71] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 120.172047][ T71] ? __lock_acquire+0x5ca/0x1ba0 [ 120.172117][ T71] ? __lock_acquire+0x5ca/0x1ba0 [ 120.172177][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.172219][ T71] ? __lock_acquire+0xaa4/0x1ba0 [ 120.172295][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.172343][ T71] ? do_raw_spin_lock+0x12c/0x2b0 [ 120.172401][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.172444][ T71] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 120.172497][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.172576][ T71] ? rcu_is_watching+0x12/0xc0 [ 120.172619][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.172662][ T71] ? trace_netif_rx_exit+0x17d/0x200 [ 120.172713][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.172760][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.172810][ T71] f2fs_write_data_pages+0x4ad/0xd90 [ 120.172887][ T71] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.172956][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.172997][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.173038][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.173080][ T71] ? __bfs+0x148/0x290 [ 120.173130][ T71] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.173189][ T71] do_writepages+0x1b5/0x820 [ 120.173247][ T71] ? __pfx_do_writepages+0x10/0x10 [ 120.173294][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.173337][ T71] ? __lock_acquire+0xaa4/0x1ba0 [ 120.173413][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.173456][ T71] ? reacquire_held_locks+0xcd/0x1f0 [ 120.173522][ T71] __writeback_single_inode+0x160/0xfb0 [ 120.173568][ T71] ? __pfx___writeback_single_inode+0x10/0x10 [ 120.173607][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.173648][ T71] ? do_raw_spin_unlock+0x172/0x230 [ 120.173687][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.173737][ T71] writeback_sb_inodes+0x601/0xf90 [ 120.173800][ T71] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 120.173839][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.173955][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.173998][ T71] ? rcu_is_watching+0x12/0xc0 [ 120.174040][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.174083][ T71] ? queue_io+0x3f6/0x520 [ 120.174121][ T71] wb_writeback+0x419/0xb70 [ 120.174172][ T71] ? __pfx_wb_writeback+0x10/0x10 [ 120.174224][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.174266][ T71] ? mark_held_locks+0x49/0x80 [ 120.174318][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.174318][ T71] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.174373][ T71] wb_workfn+0x14d/0xbe0 [ 120.174417][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.174458][ T71] ? try_to_wake_up+0x157/0x1680 [ 120.174502][ T71] ? __pfx_wb_workfn+0x10/0x10 [ 120.174546][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.174592][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.174639][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.174680][ T71] ? rcu_is_watching+0x12/0xc0 [ 120.174730][ T71] process_one_work+0x9cf/0x1b70 [ 120.174789][ T71] ? __pfx_process_one_work+0x10/0x10 [ 120.174828][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.174887][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.174929][ T71] ? assign_work+0x1a0/0x250 [ 120.174969][ T71] worker_thread+0x6c8/0xf10 [ 120.175018][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.175062][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.175103][ T71] ? __kthread_parkme+0x19e/0x250 [ 120.175153][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.175198][ T71] ? __pfx_worker_thread+0x10/0x10 [ 120.175237][ T71] kthread+0x3c5/0x780 [ 120.175272][ T71] ? __pfx_kthread+0x10/0x10 [ 120.175303][ T71] ? __pfx_kthread+0x10/0x10 [ 120.175335][ T71] ? __pfx_kthread+0x10/0x10 [ 120.175367][ T71] ? __pfx_kthread+0x10/0x10 [ 120.175398][ T71] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.175439][ T71] ? rcu_is_watching+0x12/0xc0 [ 120.175482][ T71] ? __pfx_kthread+0x10/0x10 [ 120.175517][ T71] ret_from_fork+0x48/0x80 [ 120.175551][ T71] ? __pfx_kthread+0x10/0x10 [ 120.175586][ T71] ret_from_fork_asm+0x1a/0x30 [ 120.175661][ T71] [ 120.187750][ T71] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 120.252177][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.750112][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.759246][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.138286][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.170508][ T5956] loop3: detected capacity change from 0 to 512 [ 121.172175][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.217642][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.256731][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.382480][ T5891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.411575][ T5956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.477609][ T5956] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.507860][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.536337][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.537903][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 121.601953][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.642753][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 121.657199][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.673998][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.716426][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.729269][ T5891] usb 1-1: config 0 descriptor?? [ 121.733509][ T5842] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 121.795123][ T5842] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 121.799253][ T5891] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 121.820372][ T5949] loop2: detected capacity change from 0 to 40427 [ 121.906103][ T5949] ======================================================= [ 121.906103][ T5949] WARNING: The mand mount option has been deprecated and [ 121.906103][ T5949] and is ignored by this kernel. Remove the mand [ 121.906103][ T5949] option from the mount to silence this warning. [ 121.906103][ T5949] ======================================================= [ 122.056898][ T5949] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 122.069448][ T5964] Zero length message leads to an empty skb [ 122.114060][ T5949] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 122.198477][ T5949] F2FS-fs (loop2): invalid crc value [ 122.316608][ T5966] loop5: detected capacity change from 0 to 4096 [ 122.371943][ T5966] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 122.528369][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.595352][ T5966] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 122.760551][ T5949] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 122.787732][ T5949] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.907572][ T5966] ntfs3(loop5): ino=1e, mi_enum_attr [ 122.947222][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.955964][ T5966] ntfs3(loop5): ino=1e, mi_enum_attr [ 122.982310][ T5933] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 123.156309][ T5933] usb 5-1: config 0 has no interfaces? [ 123.185991][ T5933] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 123.212256][ T5891] gspca_vc032x: reg_w err -71 [ 123.223869][ T5891] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 123.234438][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 123.245830][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.264718][ T5891] usb 1-1: USB disconnect, device number 2 [ 123.292746][ T5933] usb 5-1: Product: syz [ 123.307208][ T5933] usb 5-1: SerialNumber: syz [ 123.361088][ T5933] usb 5-1: config 0 descriptor?? [ 123.528855][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.668879][ T3405] usb 5-1: USB disconnect, device number 2 [ 123.765585][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.830851][ T5983] loop5: detected capacity change from 0 to 1024 [ 123.990939][ T5983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.150078][ T5983] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 124.192732][ T5983] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 124.332213][ T5983] EXT4-fs (loop5): This should not happen!! Data will be lost [ 124.332213][ T5983] [ 124.393633][ T5983] EXT4-fs (loop5): Total free blocks count 0 [ 124.443487][ T5983] EXT4-fs (loop5): Free/Dirty block details [ 124.473031][ T5983] EXT4-fs (loop5): free_blocks=68451041280 [ 124.495854][ T5983] EXT4-fs (loop5): dirty_blocks=80 [ 124.526250][ T5983] EXT4-fs (loop5): Block reservation details [ 124.545842][ T5989] loop0: detected capacity change from 0 to 4096 [ 124.565179][ T5983] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 124.605121][ T5990] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 124.649551][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 124.712617][ T5994] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.733626][ T71] bridge_slave_1: left allmulticast mode [ 124.739411][ T71] bridge_slave_1: left promiscuous mode [ 124.766316][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.814301][ T71] bridge_slave_0: left allmulticast mode [ 124.820012][ T71] bridge_slave_0: left promiscuous mode [ 124.839047][ T30] audit: type=1800 audit(1747241190.938:2): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 124.878033][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.099783][ T30] audit: type=1804 audit(1747241191.178:3): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.22" name="/newroot/1/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 125.245067][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.258937][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.272560][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.291505][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.299928][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.314140][ T30] audit: type=1800 audit(1747241191.208:4): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.22" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 126.052867][ T970] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 126.229127][ T970] usb 1-1: config 0 has no interfaces? [ 126.250932][ T970] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 126.298574][ T970] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 126.340825][ T970] usb 1-1: Product: syz [ 126.352607][ T970] usb 1-1: SerialNumber: syz [ 126.388474][ T970] usb 1-1: config 0 descriptor?? [ 126.672920][ T3405] usb 1-1: USB disconnect, device number 3 [ 127.110317][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.274693][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.380753][ T71] bond0 (unregistering): Released all slaves [ 127.404397][ T5843] Bluetooth: hci4: command tx timeout [ 127.542522][ T5891] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.764359][ T5891] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.774308][ T5891] usb 2-1: config 0 has no interface number 0 [ 127.784321][ T5891] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.821332][ T5891] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.887363][ T5891] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 127.952433][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.989949][ T5891] usb 2-1: config 0 descriptor?? [ 128.132221][ T5889] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 128.322191][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 128.341418][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.370694][ T5889] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 128.412957][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.556323][ T5889] usb 6-1: config 0 descriptor?? [ 128.653548][ T5889] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 128.737998][ T6055] loop4: detected capacity change from 0 to 40427 [ 128.759062][ T6055] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 128.767043][ T6055] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.780254][ T6055] F2FS-fs (loop4): invalid crc value [ 128.801435][ T5891] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 128.899692][ T5891] hid_prodikeys: hid-prodikeys: failed to find output report [ 128.899692][ T5891] [ 128.909436][ T6055] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 128.916739][ T6055] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 128.937223][ T5891] usb 2-1: USB disconnect, device number 2 [ 129.427345][ T6061] fido_id[6061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 129.484871][ T5843] Bluetooth: hci4: command tx timeout [ 129.857423][ T6055] F2FS-fs (loop4): Start checkpoint disabled! [ 130.107053][ T5889] gspca_vc032x: reg_w err -71 [ 130.111875][ T5889] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 130.262763][ T5889] usb 6-1: USB disconnect, device number 2 [ 130.355429][ T71] hsr_slave_0: left promiscuous mode [ 130.401114][ T71] hsr_slave_1: left promiscuous mode [ 130.435007][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.462403][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.479253][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.488439][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.606195][ T71] veth1_macvtap: left promiscuous mode [ 130.638418][ T71] veth0_macvtap: left promiscuous mode [ 130.644271][ T71] veth1_vlan: left promiscuous mode [ 130.659883][ T71] veth0_vlan: left promiscuous mode [ 131.342600][ T5889] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 131.558239][ T5843] Bluetooth: hci4: command tx timeout [ 131.563829][ T5889] usb 6-1: config 0 has no interfaces? [ 131.605956][ T5889] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 131.615496][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 131.624044][ T5889] usb 6-1: Product: syz [ 131.628299][ T5889] usb 6-1: SerialNumber: syz [ 131.638305][ T5889] usb 6-1: config 0 descriptor?? [ 131.928736][ T9] usb 6-1: USB disconnect, device number 3 [ 132.330402][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 132.541820][ T6102] loop2: detected capacity change from 0 to 4096 [ 132.588707][ T6102] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 133.235596][ T71] team0 (unregistering): Port device team_slave_1 removed [ 133.379381][ T71] team0 (unregistering): Port device team_slave_0 removed [ 133.606137][ T5921] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.632672][ T5843] Bluetooth: hci4: command tx timeout [ 133.806633][ T5921] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.820501][ T5921] usb 3-1: config 0 has no interface number 0 [ 133.830792][ T5921] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.844633][ T5921] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.858557][ T5921] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 133.870092][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.919885][ T5921] usb 3-1: config 0 descriptor?? [ 134.408640][ T5921] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 134.445135][ T6117] pimreg: entered allmulticast mode [ 134.448807][ T5921] hid_prodikeys: hid-prodikeys: failed to find output report [ 134.448807][ T5921] [ 134.474573][ T6120] loop1: detected capacity change from 0 to 1024 [ 134.482039][ T6120] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.573310][ T6120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.591442][ T6120] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.690146][ T5921] usb 3-1: USB disconnect, device number 2 [ 134.716953][ T6120] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.64: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 134.810651][ T6120] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.64: couldn't read orphan inode 11 (err -117) [ 134.875552][ T6120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.898597][ T6119] pimreg: left allmulticast mode [ 135.070319][ T6120] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:482: comm syz.1.64: Invalid block bitmap block 0 in block_group 0 [ 135.174563][ T6120] Quota error (device loop1): write_blk: dquota write failed [ 135.252187][ T6120] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 135.346924][ T6120] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.64: Failed to acquire dquot type 0 [ 135.566335][ T6000] chnl_net:caif_netlink_parms(): no params data found [ 135.642489][ T6120] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz.1.64: Invalid inode table block 8589934593 in block_group 0 [ 135.799444][ T6120] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 135.970041][ T6137] loop5: detected capacity change from 0 to 40427 [ 135.979187][ T6137] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 135.987045][ T6137] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 136.004838][ T6137] F2FS-fs (loop5): invalid crc value [ 136.203860][ T6137] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 136.210986][ T6137] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 136.229578][ T3443] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm kworker/u8:6: Invalid inode table block 8589934593 in block_group 0 [ 136.323000][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.894267][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.904863][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.944085][ T6000] bridge_slave_0: entered allmulticast mode [ 137.018535][ T6000] bridge_slave_0: entered promiscuous mode [ 137.065932][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.096498][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.129671][ T6000] bridge_slave_1: entered allmulticast mode [ 137.142395][ T6137] F2FS-fs (loop5): Start checkpoint disabled! [ 137.166232][ T3405] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.177431][ T6000] bridge_slave_1: entered promiscuous mode [ 137.360294][ T3405] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.387915][ T3405] usb 1-1: config 0 has no interface number 0 [ 137.415232][ T3405] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.441176][ T3405] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.456434][ T3405] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 137.466838][ T3405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.486232][ T3405] usb 1-1: config 0 descriptor?? [ 137.572211][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.575829][ T6000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.660329][ T6000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.935828][ T3405] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 137.958103][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 137.979335][ T3405] hid_prodikeys: hid-prodikeys: failed to find output report [ 137.979335][ T3405] [ 137.990990][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.018415][ T6000] team0: Port device team_slave_0 added [ 138.025175][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 138.067444][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.069178][ T6000] team0: Port device team_slave_1 added [ 138.132865][ T10] usb 2-1: config 0 descriptor?? [ 138.167378][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 138.228215][ T970] usb 1-1: USB disconnect, device number 4 [ 138.289349][ T6176] fido_id[6176]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 138.401665][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.422608][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.483241][ T6000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.563168][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.570206][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.632494][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 138.651415][ T6000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.797382][ T9] usb 3-1: config 0 has no interfaces? [ 138.808099][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 138.818343][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 138.835572][ T9] usb 3-1: Product: syz [ 138.840006][ T9] usb 3-1: SerialNumber: syz [ 138.872878][ T9] usb 3-1: config 0 descriptor?? [ 139.164356][ T6195] block nbd0: shutting down sockets [ 139.170007][ T9] usb 3-1: USB disconnect, device number 3 [ 139.267460][ T6000] hsr_slave_0: entered promiscuous mode [ 139.291786][ T6000] hsr_slave_1: entered promiscuous mode [ 139.653292][ T10] gspca_vc032x: reg_w err -71 [ 139.662411][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 139.721340][ T10] usb 2-1: USB disconnect, device number 3 [ 141.156758][ T6000] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 141.462770][ T6228] loop1: detected capacity change from 0 to 40427 [ 141.480458][ T6228] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 141.492202][ T6228] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 141.688190][ T6000] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 141.697608][ T6228] F2FS-fs (loop1): invalid crc value [ 141.879095][ T6000] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 141.935323][ T6228] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 141.944851][ T6228] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.042788][ T6000] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.077672][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.77'. [ 142.115068][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.77'. [ 142.451266][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.473506][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.933553][ T6228] F2FS-fs (loop1): Start checkpoint disabled! [ 143.148600][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.186574][ T6000] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.205867][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.213168][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.249796][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.257064][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.007513][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.518181][ T6000] veth0_vlan: entered promiscuous mode [ 144.551466][ T6000] veth1_vlan: entered promiscuous mode [ 144.610274][ T6000] veth0_macvtap: entered promiscuous mode [ 144.650389][ T6000] veth1_macvtap: entered promiscuous mode [ 144.689724][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.700859][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.717423][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.728296][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.750931][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.771874][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.782047][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.798615][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.812179][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.828731][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.851228][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.910704][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.924019][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.935014][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.945995][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.956113][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.966973][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.980459][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.991327][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.004057][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.014811][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.026893][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.061585][ T6000] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.071886][ T6000] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.081947][ T6000] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.105387][ T6000] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.241973][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.267652][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.307187][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.316505][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.538140][ T6319] input: syz0 as /devices/virtual/input/input6 [ 147.977811][ T5921] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 148.151968][ T5921] usb 2-1: config 0 has no interfaces? [ 148.174037][ T5921] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 148.197495][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 148.268522][ T5921] usb 2-1: Product: syz [ 148.292268][ T5921] usb 2-1: SerialNumber: syz [ 148.321708][ T5921] usb 2-1: config 0 descriptor?? [ 148.580636][ T6360] warning: `syz.2.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.633918][ T5921] usb 2-1: USB disconnect, device number 4 [ 148.640311][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 149.138598][ T6380] trusted_key: syz.6.103 sent an empty control message without MSG_MORE. [ 149.337644][ T6375] loop5: detected capacity change from 0 to 4096 [ 149.404430][ T6370] cgroup: fork rejected by pids controller in /syz2 [ 149.707924][ T5843] block nbd6: Receive control failed (result -107) [ 149.969540][ T6474] nbd6: detected capacity change from 0 to 2 [ 150.205942][ T6485] nbd6: detected capacity change from 2 to 67108884 [ 150.218453][ T5829] block nbd6: Dead connection, failed to find a fallback [ 150.272181][ T5829] block nbd6: shutting down sockets [ 150.288528][ T5829] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.348947][ T5829] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.383368][ T5829] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.437464][ T5829] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.491038][ T5829] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.515403][ T5933] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.547823][ T5829] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.591418][ T6499] loop0: detected capacity change from 0 to 256 [ 150.592296][ T5829] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.674107][ T5829] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.702114][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 150.715369][ T6499] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.742445][ T5829] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.792485][ T6499] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 150.801438][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 150.834034][ T5829] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.855637][ T5829] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.876902][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 150.891139][ T6499] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x062de574, utbl_chksum : 0xe619d30d) [ 150.898448][ T5829] Buffer I/O error on dev nbd6, logical block 0, async page read [ 150.959878][ T5933] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 150.972446][ T5829] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.998809][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.023641][ T5829] Buffer I/O error on dev nbd6, logical block 0, async page read [ 151.042528][ T5933] usb 2-1: Product: syz [ 151.066597][ T5829] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.079901][ T5933] usb 2-1: Manufacturer: syz [ 151.099135][ T5933] usb 2-1: SerialNumber: syz [ 151.121859][ T5829] Buffer I/O error on dev nbd6, logical block 0, async page read [ 151.153709][ T5933] usb 2-1: config 0 descriptor?? [ 151.169576][ T5829] ldm_validate_partition_table(): Disk read failed. [ 151.200274][ T5829] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.241896][ T5829] Buffer I/O error on dev nbd6, logical block 0, async page read [ 151.263890][ T5829] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.321632][ T5829] Buffer I/O error on dev nbd6, logical block 0, async page read [ 151.351775][ T5829] Dev nbd6: unable to read RDB block 0 [ 151.388934][ T5829] nbd6: unable to read partition table [ 151.398817][ T5843] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 151.415072][ T5933] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 151.483946][ T5829] ldm_validate_partition_table(): Disk read failed. [ 151.491219][ T5829] Dev nbd6: unable to read RDB block 0 [ 151.497501][ T5933] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 151.526633][ T970] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 151.526938][ T5829] nbd6: unable to read partition table [ 151.562200][ T5933] usb 2-1: USB disconnect, device number 5 [ 151.584424][ T970] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.252043][ T6509] fido_id[6509]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.411782][ T6523] loop1: detected capacity change from 0 to 128 [ 152.627951][ T6523] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.695058][ T6523] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.942368][ T5933] IPVS: starting estimator thread 0... [ 153.071841][ T6537] IPVS: using max 23 ests per chain, 55200 per kthread [ 153.238035][ T5840] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.643399][ T6546] loop5: detected capacity change from 0 to 40427 [ 154.657474][ T6546] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 154.718999][ T6546] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 155.059155][ T6576] loop2: detected capacity change from 0 to 1024 [ 155.065853][ T6546] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 155.088676][ T6576] EXT4-fs: Ignoring removed orlov option [ 155.101047][ T6546] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 155.123324][ T6576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.204965][ T6576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.320993][ T6584] overlayfs: failed to resolve './file2': -2 [ 155.698357][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.360634][ T6598] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.508608][ T6580] loop0: detected capacity change from 0 to 32768 [ 156.677537][ T6580] JBD2: Ignoring recovery information on journal [ 156.722540][ T5193] udevd[5193]: worker [5851] terminated by signal 33 (Unknown signal 33) [ 156.814910][ T5193] udevd[5193]: worker [5851] failed while handling '/devices/virtual/block/loop0' [ 156.905703][ T6580] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 157.134141][ T6615] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 157.141288][ T6615] overlayfs: failed to set xattr on upper [ 157.188168][ T6615] overlayfs: ...falling back to redirect_dir=nofollow. [ 157.218651][ T6615] overlayfs: ...falling back to index=off. [ 157.247670][ T6615] overlayfs: maximum fs stacking depth exceeded [ 157.479589][ T6618] evm: overlay not supported [ 157.527284][ T6621] 9pnet: p9_errstr2errno: server reported unknown error J»ÒT}é|»öï²&ñ›ù [ 157.577447][ T6624] loop6: detected capacity change from 0 to 512 [ 157.585411][ T5830] ocfs2: Unmounting device (7,0) on (node local) [ 157.735929][ T6624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.748775][ T6624] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.959179][ T6000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.352895][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 158.427091][ T6644] loop2: detected capacity change from 0 to 16 [ 158.542205][ T6644] erofs (device loop2): mounted with root inode @ nid 36. [ 158.898413][ T6656] syz_tun: entered allmulticast mode [ 158.928339][ T6655] syz_tun: left allmulticast mode [ 160.038620][ T6654] loop6: detected capacity change from 0 to 32768 [ 160.078194][ T6654] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.163 (6654) [ 160.167262][ T6654] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.196820][ T6654] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 160.245154][ T6654] BTRFS info (device loop6): using free-space-tree [ 161.080469][ T6000] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.111897][ T6715] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 161.554970][ T6719] loop1: detected capacity change from 0 to 4096 [ 161.631844][ T6719] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 162.104276][ T6723] loop2: detected capacity change from 0 to 40427 [ 162.113947][ T6723] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 162.115543][ T6725] loop6: detected capacity change from 0 to 128 [ 162.125313][ T6723] F2FS-fs (loop2): invalid crc value [ 162.221904][ T6719] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 162.255992][ T6723] F2FS-fs (loop2): Start checkpoint disabled! [ 162.297483][ T6723] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 162.504749][ T6725] syz.6.179: attempt to access beyond end of device [ 162.504749][ T6725] loop6: rw=1, sector=145, nr_sectors = 77 limit=128 [ 162.561173][ T6719] ntfs3(loop1): ino=1e, mi_enum_attr [ 162.600458][ T6719] ntfs3(loop1): ino=1e, mi_enum_attr [ 162.707218][ T36] kworker/u8:2: attempt to access beyond end of device [ 162.707218][ T36] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.782935][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 162.782987][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.783010][ T36] Workqueue: writeback wb_workfn (flush-7:2) [ 162.783065][ T36] Call Trace: [ 162.783076][ T36] [ 162.783089][ T36] dump_stack_lvl+0x16c/0x1f0 [ 162.783147][ T36] f2fs_handle_critical_error+0x621/0x9f0 [ 162.783198][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.783242][ T36] ? __asan_memset+0x23/0x50 [ 162.783286][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.783341][ T36] f2fs_write_end_io+0x73d/0xac0 [ 162.783398][ T36] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 162.783456][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.783509][ T36] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 162.783562][ T36] bio_endio+0x6d2/0x810 [ 162.783605][ T36] submit_bio_noacct+0x56d/0x1ec0 [ 162.783667][ T36] __submit_merged_bio+0x33c/0x770 [ 162.783733][ T36] __submit_merged_write_cond+0x319/0x3f0 [ 162.783799][ T36] f2fs_write_cache_pages+0x2139/0x2680 [ 162.783887][ T36] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 162.783953][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.783996][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.784039][ T36] ? find_held_lock+0x2b/0x80 [ 162.784085][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.784134][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.784177][ T36] ? do_raw_spin_unlock+0x172/0x230 [ 162.784234][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.784276][ T36] ? f2fs_available_free_memory+0x279/0xa30 [ 162.784397][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.784450][ T36] f2fs_write_data_pages+0x4ad/0xd90 [ 162.784520][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 162.784602][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 162.784666][ T36] do_writepages+0x1b5/0x820 [ 162.784742][ T36] ? __pfx_do_writepages+0x10/0x10 [ 162.784790][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.784833][ T36] ? __lock_acquire+0xaa4/0x1ba0 [ 162.784910][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.784953][ T36] ? reacquire_held_locks+0xcd/0x1f0 [ 162.785019][ T36] __writeback_single_inode+0x160/0xfb0 [ 162.785066][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 162.785106][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.785149][ T36] ? do_raw_spin_unlock+0x172/0x230 [ 162.785190][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.785240][ T36] writeback_sb_inodes+0x601/0xf90 [ 162.785305][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 162.785346][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.785389][ T36] ? find_held_lock+0x2b/0x80 [ 162.785497][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.785539][ T36] ? rcu_is_watching+0x12/0xc0 [ 162.785582][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.785626][ T36] ? queue_io+0x3f6/0x520 [ 162.785665][ T36] wb_writeback+0x419/0xb70 [ 162.785723][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 162.785777][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.785819][ T36] ? mark_held_locks+0x49/0x80 [ 162.785874][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 162.785929][ T36] wb_workfn+0x14d/0xbe0 [ 162.785976][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.786018][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 162.786070][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 162.786117][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.786165][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.786214][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.786256][ T36] ? rcu_is_watching+0x12/0xc0 [ 162.786308][ T36] process_one_work+0x9cf/0x1b70 [ 162.786372][ T36] ? __pfx_process_one_work+0x10/0x10 [ 162.786411][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.786466][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.786508][ T36] ? assign_work+0x1a0/0x250 [ 162.786549][ T36] worker_thread+0x6c8/0xf10 [ 162.786612][ T36] ? __pfx_worker_thread+0x10/0x10 [ 162.786651][ T36] kthread+0x3c5/0x780 [ 162.786687][ T36] ? __pfx_kthread+0x10/0x10 [ 162.786725][ T36] ? __pfx_kthread+0x10/0x10 [ 162.786757][ T36] ? __pfx_kthread+0x10/0x10 [ 162.786790][ T36] ? __pfx_kthread+0x10/0x10 [ 162.786821][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.786871][ T36] ? rcu_is_watching+0x12/0xc0 [ 162.786915][ T36] ? __pfx_kthread+0x10/0x10 [ 162.786951][ T36] ret_from_fork+0x48/0x80 [ 162.786985][ T36] ? __pfx_kthread+0x10/0x10 [ 162.787020][ T36] ret_from_fork_asm+0x1a/0x30 [ 162.787097][ T36] [ 162.788091][ T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 163.609976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 163.620950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 164.919190][ T30] audit: type=1800 audit(1747241231.018:5): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.194" name="bus" dev="tmpfs" ino=230 res=0 errno=0 [ 165.673878][ T6748] loop1: detected capacity change from 0 to 32768 [ 165.717106][ T6770] loop9: detected capacity change from 0 to 8 [ 165.779444][ T6770] Dev loop9: unable to read RDB block 8 [ 165.814424][ T6770] loop9: unable to read partition table [ 165.830103][ T6749] loop6: detected capacity change from 0 to 32768 [ 165.851950][ T30] audit: type=1800 audit(1747241231.958:6): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.189" name="file2" dev="loop1" ino=5 res=0 errno=0 [ 165.876221][ T6770] loop9: partition table beyond EOD, truncated [ 165.893220][ T6770] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 165.979432][ T6773] tipc: Started in network mode [ 166.009299][ T6749] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.021949][ T6773] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 166.137857][ T6773] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 166.230449][ T6773] tipc: Enabled bearer , priority 10 [ 166.412506][ T6749] XFS (loop6): Ending clean mount [ 166.460518][ T6749] XFS (loop6): Quotacheck needed: Please wait. [ 166.580987][ T6749] XFS (loop6): Quotacheck: Done. [ 166.612222][ T5890] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.788113][ T6801] syzkaller0: entered allmulticast mode [ 166.819369][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 166.857148][ T5890] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 166.879704][ T5890] usb 3-1: config 0 has no interface number 0 [ 166.901371][ T5890] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 166.926174][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.947634][ T5890] usb 3-1: Product: syz [ 166.958558][ T5890] usb 3-1: Manufacturer: syz [ 166.968987][ T5890] usb 3-1: SerialNumber: syz [ 166.989092][ T5890] usb 3-1: config 0 descriptor?? [ 167.014777][ T5890] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 167.226403][ T6000] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 167.314260][ T5933] tipc: Node number set to 1 [ 168.000259][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.206'. [ 168.119158][ T6822] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.128402][ T6822] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.137283][ T6822] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.146088][ T6822] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.194972][ T6822] vxlan0: entered promiscuous mode [ 168.365893][ T6827] loop1: detected capacity change from 0 to 4096 [ 168.578106][ T6824] loop6: detected capacity change from 0 to 40427 [ 168.588783][ T6824] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x7 [ 168.619179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 168.629065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 168.629109][ T5890] gspca_topro: reg_r err -71 [ 168.648114][ T5890] gspca_topro: Sensor soi763a [ 168.679617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 168.696264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 168.705466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 168.723382][ T6824] F2FS-fs (loop6): invalid crc value [ 168.837142][ T6824] F2FS-fs (loop6): Start checkpoint disabled! [ 168.857303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 168.862429][ T5890] usb 3-1: USB disconnect, device number 4 [ 168.884189][ T6824] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 169.346157][ T4242] kworker/u8:7: attempt to access beyond end of device [ 169.346157][ T4242] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.445226][ T4242] CPU: 1 UID: 0 PID: 4242 Comm: kworker/u8:7 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 169.445278][ T4242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.445302][ T4242] Workqueue: writeback wb_workfn (flush-7:6) [ 169.445355][ T4242] Call Trace: [ 169.445366][ T4242] [ 169.445379][ T4242] dump_stack_lvl+0x16c/0x1f0 [ 169.445438][ T4242] f2fs_handle_critical_error+0x621/0x9f0 [ 169.445488][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.445532][ T4242] ? __asan_memset+0x23/0x50 [ 169.445578][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.445633][ T4242] f2fs_write_end_io+0x73d/0xac0 [ 169.445691][ T4242] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 169.445750][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.445804][ T4242] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 169.445857][ T4242] bio_endio+0x6d2/0x810 [ 169.445899][ T4242] submit_bio_noacct+0x56d/0x1ec0 [ 169.445961][ T4242] __submit_merged_bio+0x33c/0x770 [ 169.446030][ T4242] __submit_merged_write_cond+0x319/0x3f0 [ 169.446097][ T4242] f2fs_write_cache_pages+0x2139/0x2680 [ 169.446187][ T4242] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 169.446254][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.446298][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.446341][ T4242] ? find_held_lock+0x2b/0x80 [ 169.446387][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.446435][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.446478][ T4242] ? do_raw_spin_unlock+0x172/0x230 [ 169.446535][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.446578][ T4242] ? f2fs_available_free_memory+0x279/0xa30 [ 169.446702][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.446754][ T4242] f2fs_write_data_pages+0x4ad/0xd90 [ 169.446824][ T4242] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 169.446907][ T4242] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 169.446976][ T4242] do_writepages+0x1b5/0x820 [ 169.447037][ T4242] ? __pfx_do_writepages+0x10/0x10 [ 169.447085][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.447128][ T4242] ? __lock_acquire+0xaa4/0x1ba0 [ 169.447206][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.447249][ T4242] ? reacquire_held_locks+0xcd/0x1f0 [ 169.447316][ T4242] __writeback_single_inode+0x160/0xfb0 [ 169.447363][ T4242] ? __pfx___writeback_single_inode+0x10/0x10 [ 169.447403][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.447446][ T4242] ? do_raw_spin_unlock+0x172/0x230 [ 169.447485][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.447536][ T4242] writeback_sb_inodes+0x601/0xf90 [ 169.447601][ T4242] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 169.447643][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.447686][ T4242] ? find_held_lock+0x2b/0x80 [ 169.447794][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.447837][ T4242] ? rcu_is_watching+0x12/0xc0 [ 169.447879][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.447922][ T4242] ? queue_io+0x3f6/0x520 [ 169.447962][ T4242] wb_writeback+0x419/0xb70 [ 169.448018][ T4242] ? __pfx_wb_writeback+0x10/0x10 [ 169.448072][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.448114][ T4242] ? mark_held_locks+0x49/0x80 [ 169.448170][ T4242] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.448225][ T4242] wb_workfn+0x14d/0xbe0 [ 169.448272][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.448315][ T4242] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 169.448368][ T4242] ? __pfx_wb_workfn+0x10/0x10 [ 169.448415][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.448463][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.448512][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.448554][ T4242] ? rcu_is_watching+0x12/0xc0 [ 169.448605][ T4242] process_one_work+0x9cf/0x1b70 [ 169.448666][ T4242] ? __pfx_process_one_work+0x10/0x10 [ 169.448706][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.448762][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.448804][ T4242] ? assign_work+0x1a0/0x250 [ 169.448846][ T4242] worker_thread+0x6c8/0xf10 [ 169.448909][ T4242] ? __pfx_worker_thread+0x10/0x10 [ 169.448949][ T4242] kthread+0x3c5/0x780 [ 169.448994][ T4242] ? __pfx_kthread+0x10/0x10 [ 169.449026][ T4242] ? __pfx_kthread+0x10/0x10 [ 169.449059][ T4242] ? __pfx_kthread+0x10/0x10 [ 169.449091][ T4242] ? __pfx_kthread+0x10/0x10 [ 169.449123][ T4242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.449166][ T4242] ? rcu_is_watching+0x12/0xc0 [ 169.449210][ T4242] ? __pfx_kthread+0x10/0x10 [ 169.449247][ T4242] ret_from_fork+0x48/0x80 [ 169.449282][ T4242] ? __pfx_kthread+0x10/0x10 [ 169.449317][ T4242] ret_from_fork_asm+0x1a/0x30 [ 169.449396][ T4242] [ 169.449409][ T4242] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 170.225453][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.212'. [ 172.015625][ T6896] loop5: detected capacity change from 0 to 1024 [ 172.141923][ T6896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.292380][ T6896] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.465009][ T6912] EXT4-fs (loop5): shut down requested (2) [ 172.699754][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.929929][ T6920] loop1: detected capacity change from 0 to 2048 [ 173.039964][ T6920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.960915][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.174761][ T6951] loop6: detected capacity change from 0 to 4096 [ 174.227850][ T6951] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 174.361179][ T6951] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 174.538737][ T6951] ntfs3(loop6): ino=1e, mi_enum_attr [ 174.558055][ T6951] ntfs3(loop6): ino=1e, mi_enum_attr [ 175.122626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 175.962691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 176.322196][ T5890] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 176.334772][ T5933] kernel read not supported for file /69/oom_adj (pid: 5933 comm: kworker/1:7) [ 176.482932][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 176.522248][ T5890] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.561219][ T5890] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.589604][ T5890] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.621699][ T5890] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.666344][ T5890] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.688960][ T6975] loop5: detected capacity change from 0 to 32768 [ 176.865854][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.890404][ T6975] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 177.111834][ T6975] XFS (loop5): Ending clean mount [ 177.119864][ T5890] usb 2-1: GET_CAPABILITIES returned 0 [ 177.142326][ T5890] usbtmc 2-1:16.0: can't read capabilities [ 177.367365][ T6987] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 177.394138][ T5891] usb 2-1: USB disconnect, device number 6 [ 177.425541][ T5844] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 177.565374][ T7009] loop6: detected capacity change from 0 to 2048 [ 177.581028][ T7009] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 177.589014][ T7009] UDF-fs: Scanning with blocksize 512 failed [ 177.682304][ T7009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.168327][ T7018] loop2: detected capacity change from 0 to 7 [ 178.186709][ T7018] Dev loop2: unable to read RDB block 7 [ 178.199420][ T7018] loop2: unable to read partition table [ 178.228582][ T7018] loop2: partition table beyond EOD, truncated [ 178.251995][ T7022] tipc: Failed to remove unknown binding: 66,1,1/0:1994522522/1994522524 [ 178.263254][ T7018] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.291796][ T7021] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 178.849954][ T7037] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 179.113508][ T7044] capability: warning: `syz.6.272' uses deprecated v2 capabilities in a way that may be insecure [ 179.430746][ T7049] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 179.636539][ T7002] loop4: detected capacity change from 0 to 40427 [ 179.689497][ T7002] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 179.700414][ T7002] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 179.753481][ T7002] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3fffff [ 179.764083][ T7002] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 179.796144][ T7002] F2FS-fs (loop4): invalid crc value [ 180.058779][ T7002] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.066157][ T7002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 181.104209][ T7037] team0: Device ipvlan1 failed to register rx_handler [ 183.432187][ T5933] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.600156][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 183.623127][ T5933] usb 2-1: config 0 has no interfaces? [ 183.645235][ T5933] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 183.691327][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 183.729670][ T5933] usb 2-1: Product: syz [ 183.754404][ T5933] usb 2-1: SerialNumber: syz [ 183.767678][ T5933] usb 2-1: config 0 descriptor?? [ 184.045832][ T3405] usb 2-1: USB disconnect, device number 7 [ 185.325833][ T7148] Bluetooth: MGMT ver 1.23 [ 185.361802][ T7158] loop6: detected capacity change from 0 to 64 [ 185.634242][ T5839] Bluetooth: hci6: command 0x1003 tx timeout [ 185.636594][ T5843] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 186.094907][ T4242] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.389184][ T4242] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.410539][ T7180] 9pnet_fd: Insufficient options for proto=fd [ 186.518203][ T7183] gretap0: entered promiscuous mode [ 186.599069][ T7183] vlan2: entered promiscuous mode [ 186.684482][ T4242] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.254701][ T4242] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.400697][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.432754][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.455111][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.467544][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.475584][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.503750][ T7210] loop5: detected capacity change from 0 to 512 [ 187.632931][ T7210] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.662513][ T7210] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 187.727618][ T7210] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 187.778728][ T7210] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 187.832222][ T7217] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 187.840346][ T7210] System zones: 0-2, 18-18, 34-34 [ 187.853345][ T7210] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1129: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 187.930657][ T7210] EXT4-fs (loop5): 1 truncate cleaned up [ 187.958691][ T7210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.182550][ T30] audit: type=1800 audit(1747241510.268:7): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.317" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 188.208847][ T7224] loop6: detected capacity change from 0 to 512 [ 188.234171][ T7224] EXT4-fs: Ignoring removed orlov option [ 188.310245][ T7217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.318567][ T30] audit: type=1800 audit(1747241510.348:8): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.317" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 188.339107][ T30] audit: type=1800 audit(1747241510.388:9): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.317" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 188.396779][ T7220] bond1: (slave ip6gretap1): making interface the new active one [ 188.406676][ T7220] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.407366][ T7224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.466793][ T7224] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.473097][ T7220] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.520719][ T7220] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 188.607412][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.630353][ T6051] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.674804][ T5890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.811186][ T6000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.833781][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.166934][ T7248] Invalid ELF header magic: != ELF [ 189.230130][ T7244] loop4: detected capacity change from 0 to 1024 [ 189.474676][ T4242] bridge_slave_1: left allmulticast mode [ 189.481523][ T4242] bridge_slave_1: left promiscuous mode [ 189.493714][ T6011] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.509247][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.556721][ T5839] Bluetooth: hci2: command tx timeout [ 189.603468][ T4242] bridge_slave_0: left allmulticast mode [ 189.609182][ T4242] bridge_slave_0: left promiscuous mode [ 189.672427][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.803765][ T7257] loop1: detected capacity change from 0 to 4096 [ 189.867586][ T7257] NILFS (loop1): invalid segment: Checksum error in segment payload [ 189.900397][ T7257] NILFS (loop1): trying rollback from an earlier position [ 189.972110][ T7257] NILFS (loop1): recovery complete [ 189.974435][ T5921] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 190.017217][ T7265] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.166559][ T5921] usb 6-1: config 0 has no interfaces? [ 190.193725][ T5921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 190.242799][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 190.253144][ T7257] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 190.264562][ T5921] usb 6-1: SerialNumber: syz [ 190.271347][ T7257] overlayfs: failed to get uuid (/file2, err=-95); falling back to uuid=null. [ 190.304378][ T5921] usb 6-1: config 0 descriptor?? [ 190.419861][ T30] audit: type=1800 audit(1747241512.528:10): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.326" name="file1" dev="loop4" ino=1 res=0 errno=0 [ 190.703395][ T6051] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.191710][ T4242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.214236][ T4242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.261216][ T4242] bond0 (unregistering): Released all slaves [ 191.387565][ T37] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.450202][ T7207] chnl_net:caif_netlink_parms(): no params data found [ 191.632397][ T5839] Bluetooth: hci2: command tx timeout [ 191.822621][ T6051] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.076397][ T7296] loop1: detected capacity change from 0 to 512 [ 192.143566][ T7296] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 192.211039][ T7296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 192.329713][ T7296] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.345: corrupted in-inode xattr: e_value size too large [ 192.375826][ T7304] loop4: detected capacity change from 0 to 2048 [ 192.422898][ T7296] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.345: couldn't read orphan inode 15 (err -117) [ 192.536460][ T7296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.595362][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.645699][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.655406][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.683330][ T7207] bridge_slave_0: entered allmulticast mode [ 192.703121][ T7207] bridge_slave_0: entered promiscuous mode [ 192.715569][ T30] audit: type=1326 audit(1747241514.808:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7258 comm="syz.5.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0778e969 code=0x7fc00000 [ 192.735664][ T7313] netlink: 'syz.6.347': attribute type 4 has an invalid length. [ 192.803598][ T9] usb 6-1: USB disconnect, device number 4 [ 192.818376][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.843761][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.851022][ T7207] bridge_slave_1: entered allmulticast mode [ 192.915571][ T7207] bridge_slave_1: entered promiscuous mode [ 192.916164][ T7316] netlink: 'syz.6.347': attribute type 4 has an invalid length. [ 192.951021][ T7315] netlink: 'syz.5.349': attribute type 10 has an invalid length. [ 192.963687][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.099420][ T7304] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.529236][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.581792][ T7315] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.595740][ T7315] bond0: (slave team0): Enslaving as an active interface with an up link [ 193.712218][ T5839] Bluetooth: hci2: command tx timeout [ 193.845225][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.070486][ T7340] loop5: detected capacity change from 0 to 128 [ 194.087196][ T37] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 194.087219][ T37] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.149162][ T7340] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 194.228416][ T7340] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.448184][ T4242] hsr_slave_0: left promiscuous mode [ 194.505286][ T4242] hsr_slave_1: left promiscuous mode [ 194.529709][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.560723][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.565352][ T5844] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.605790][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.641332][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.758816][ T4242] veth1_macvtap: left promiscuous mode [ 194.779420][ T4242] veth0_macvtap: left promiscuous mode [ 194.839810][ T4242] veth1_vlan: left promiscuous mode [ 194.855563][ T4242] veth0_vlan: left promiscuous mode [ 195.104269][ T3405] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 195.279553][ T6051] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.589030][ T7358] loop5: detected capacity change from 0 to 40427 [ 195.600172][ T7358] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3fffff [ 195.615433][ T3405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.626977][ T3405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 975, setting to 64 [ 195.641492][ T7358] F2FS-fs (loop5): invalid crc value [ 195.662492][ T3405] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 195.672456][ T3405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.688718][ T3405] usb 2-1: config 0 descriptor?? [ 195.705846][ T7353] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.792203][ T7358] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 195.803375][ T5839] Bluetooth: hci2: command tx timeout [ 195.858906][ T7358] F2FS-fs (loop5): access invalid blkaddr:2816 [ 195.867640][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.5.363 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 195.867687][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.867708][ T7358] Call Trace: [ 195.867723][ T7358] [ 195.867736][ T7358] dump_stack_lvl+0x16c/0x1f0 [ 195.867802][ T7358] __f2fs_is_valid_blkaddr+0x59d/0x1310 [ 195.867867][ T7358] ? f2fs_map_blocks+0x70e/0x46f0 [ 195.867920][ T7358] f2fs_is_valid_blkaddr+0xce/0x270 [ 195.867986][ T7358] f2fs_map_blocks+0x70e/0x46f0 [ 195.868075][ T7358] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 195.868129][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.868176][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.868219][ T7358] ? find_held_lock+0x2b/0x80 [ 195.868266][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.868320][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.868378][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.868436][ T7358] f2fs_mpage_readpages+0x6ad/0x1580 [ 195.868508][ T7358] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 195.868567][ T7358] ? cgroup_rstat_updated+0x2a/0xb20 [ 195.868650][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.868693][ T7358] ? __filemap_add_folio+0xb94/0x11d0 [ 195.868745][ T7358] f2fs_readahead+0x2a1/0x380 [ 195.868808][ T7358] ? __pfx_f2fs_readahead+0x10/0x10 [ 195.868866][ T7358] read_pages+0x1c4/0xc70 [ 195.868926][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.868977][ T7358] ? __pfx_read_pages+0x10/0x10 [ 195.869043][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.869086][ T7358] ? rcu_is_watching+0x12/0xc0 [ 195.869140][ T7358] page_cache_ra_unbounded+0x421/0x7d0 [ 195.869219][ T7358] page_cache_ra_order+0x9c8/0xd00 [ 195.869302][ T7358] page_cache_sync_ra+0x4b4/0x9c0 [ 195.869368][ T7358] page_cache_sync_readahead+0xb5/0xf0 [ 195.869407][ T7358] ? __pfx_page_cache_sync_readahead+0x10/0x10 [ 195.869454][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.869500][ T7358] ? __pfx___might_resched+0x10/0x10 [ 195.869562][ T7358] f2fs_readdir+0x4c9/0x9d0 [ 195.869616][ T7358] ? __pfx_f2fs_readdir+0x10/0x10 [ 195.869656][ T7358] ? fdget_pos+0x2a2/0x370 [ 195.869713][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.869760][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.869809][ T7358] ? down_read_killable+0x220/0x4b0 [ 195.869858][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.869901][ T7358] ? apparmor_file_permission+0x251/0x400 [ 195.869954][ T7358] iterate_dir+0x296/0xb40 [ 195.870008][ T7358] __x64_sys_getdents+0x14d/0x2c0 [ 195.870051][ T7358] ? __x64_sys_futex+0x1e9/0x4c0 [ 195.870104][ T7358] ? __pfx___x64_sys_getdents+0x10/0x10 [ 195.870150][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.870193][ T7358] ? xfd_validate_state+0x5d/0x180 [ 195.870229][ T7358] ? __pfx_filldir+0x10/0x10 [ 195.870274][ T7358] ? rcu_is_watching+0x12/0xc0 [ 195.870318][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.870375][ T7358] do_syscall_64+0xcd/0x260 [ 195.870437][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.870473][ T7358] RIP: 0033:0x7fba0778e969 [ 195.870501][ T7358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.870535][ T7358] RSP: 002b:00007fba08513038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 195.870569][ T7358] RAX: ffffffffffffffda RBX: 00007fba079b5fa0 RCX: 00007fba0778e969 [ 195.870593][ T7358] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000004 [ 195.870615][ T7358] RBP: 00007fba07810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 195.870638][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.870660][ T7358] R13: 0000000000000000 R14: 00007fba079b5fa0 R15: 00007ffc2e7382c8 [ 195.870710][ T7358] [ 196.315680][ T3405] usbhid 2-1:0.0: can't add hid device: -71 [ 196.321761][ T3405] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 196.335484][ T3405] usb 2-1: USB disconnect, device number 8 [ 196.433657][ T7358] F2FS-fs (loop5): access invalid blkaddr:2816 [ 196.440005][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.5.363 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 196.440055][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.440076][ T7358] Call Trace: [ 196.440087][ T7358] [ 196.440100][ T7358] dump_stack_lvl+0x16c/0x1f0 [ 196.440161][ T7358] __f2fs_is_valid_blkaddr+0x59d/0x1310 [ 196.440225][ T7358] ? f2fs_map_blocks+0x70e/0x46f0 [ 196.440278][ T7358] f2fs_is_valid_blkaddr+0xce/0x270 [ 196.440345][ T7358] f2fs_map_blocks+0x70e/0x46f0 [ 196.440434][ T7358] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 196.440488][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.440535][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.440578][ T7358] ? find_held_lock+0x2b/0x80 [ 196.440625][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.440678][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.440739][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.440782][ T7358] ? zero_user_segments.constprop.0+0x21e/0x2d0 [ 196.440840][ T7358] f2fs_mpage_readpages+0x6ad/0x1580 [ 196.440913][ T7358] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 196.440972][ T7358] ? cgroup_rstat_updated+0x2a/0xb20 [ 196.441062][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.441106][ T7358] ? __filemap_add_folio+0xb94/0x11d0 [ 196.441158][ T7358] f2fs_readahead+0x2a1/0x380 [ 196.441216][ T7358] ? __pfx_f2fs_readahead+0x10/0x10 [ 196.441275][ T7358] read_pages+0x1c4/0xc70 [ 196.441337][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.441389][ T7358] ? __pfx_read_pages+0x10/0x10 [ 196.441457][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.441501][ T7358] ? rcu_is_watching+0x12/0xc0 [ 196.441555][ T7358] page_cache_ra_unbounded+0x421/0x7d0 [ 196.441637][ T7358] page_cache_ra_order+0x9c8/0xd00 [ 196.441721][ T7358] page_cache_sync_ra+0x4b4/0x9c0 [ 196.441789][ T7358] page_cache_sync_readahead+0xb5/0xf0 [ 196.441829][ T7358] ? __pfx_page_cache_sync_readahead+0x10/0x10 [ 196.441877][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.441924][ T7358] ? __pfx___might_resched+0x10/0x10 [ 196.441987][ T7358] f2fs_readdir+0x4c9/0x9d0 [ 196.442048][ T7358] ? __pfx_f2fs_readdir+0x10/0x10 [ 196.442091][ T7358] ? fdget_pos+0x2a2/0x370 [ 196.442149][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.442197][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.442241][ T7358] ? down_read_killable+0x220/0x4b0 [ 196.442289][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.442335][ T7358] ? apparmor_file_permission+0x251/0x400 [ 196.442389][ T7358] iterate_dir+0x296/0xb40 [ 196.442444][ T7358] __x64_sys_getdents+0x14d/0x2c0 [ 196.442488][ T7358] ? __x64_sys_futex+0x1e9/0x4c0 [ 196.442541][ T7358] ? __pfx___x64_sys_getdents+0x10/0x10 [ 196.442586][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.442629][ T7358] ? xfd_validate_state+0x5d/0x180 [ 196.442666][ T7358] ? __pfx_filldir+0x10/0x10 [ 196.442711][ T7358] ? rcu_is_watching+0x12/0xc0 [ 196.442756][ T7358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.442813][ T7358] do_syscall_64+0xcd/0x260 [ 196.442876][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.442912][ T7358] RIP: 0033:0x7fba0778e969 [ 196.442940][ T7358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.442975][ T7358] RSP: 002b:00007fba08513038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 196.443016][ T7358] RAX: ffffffffffffffda RBX: 00007fba079b5fa0 RCX: 00007fba0778e969 [ 196.443040][ T7358] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000004 [ 196.443063][ T7358] RBP: 00007fba07810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 196.443085][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.443107][ T7358] R13: 0000000000000000 R14: 00007fba079b5fa0 R15: 00007ffc2e7382c8 [ 196.443158][ T7358] [ 196.819856][ T7358] syz.5.363: attempt to access beyond end of device [ 196.819856][ T7358] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 196.879208][ T5844] syz-executor: attempt to access beyond end of device [ 196.879208][ T5844] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.931872][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 196.931922][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.931943][ T5844] Call Trace: [ 196.931955][ T5844] [ 196.931968][ T5844] dump_stack_lvl+0x16c/0x1f0 [ 196.932029][ T5844] f2fs_handle_critical_error+0x621/0x9f0 [ 196.932082][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.932126][ T5844] ? __asan_memset+0x23/0x50 [ 196.932173][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.932230][ T5844] f2fs_write_end_io+0x73d/0xac0 [ 196.932288][ T5844] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 196.932353][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.932408][ T5844] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 196.932460][ T5844] bio_endio+0x6d2/0x810 [ 196.932504][ T5844] submit_bio_noacct+0x56d/0x1ec0 [ 196.932567][ T5844] __submit_merged_bio+0x33c/0x770 [ 196.932628][ T5844] __submit_merged_write_cond+0x319/0x3f0 [ 196.932697][ T5844] f2fs_write_cache_pages+0x2139/0x2680 [ 196.932797][ T5844] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 196.932855][ T5844] ? lock_acquire+0x179/0x350 [ 196.932921][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.932963][ T5844] ? lock_acquire+0x179/0x350 [ 196.933020][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.933063][ T5844] ? find_held_lock+0x2b/0x80 [ 196.933110][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.933177][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.933219][ T5844] ? __lock_acquire+0xaa4/0x1ba0 [ 196.933300][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.933342][ T5844] ? do_raw_spin_lock+0x12c/0x2b0 [ 196.933431][ T5844] ? check_preemption_disabled+0x24/0xe0 [ 196.933498][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.933551][ T5844] f2fs_write_data_pages+0x4ad/0xd90 [ 196.933623][ T5844] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 196.933681][ T5844] ? check_path.constprop.0+0x24/0x50 [ 196.933753][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.933804][ T5844] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 196.933868][ T5844] do_writepages+0x1b5/0x820 [ 196.933931][ T5844] ? __pfx_do_writepages+0x10/0x10 [ 196.933983][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.934028][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.934071][ T5844] ? do_raw_spin_lock+0x12c/0x2b0 [ 196.934107][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.934149][ T5844] ? find_held_lock+0x2b/0x80 [ 196.934196][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.934244][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.934286][ T5844] ? do_raw_spin_unlock+0x172/0x230 [ 196.934326][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.934378][ T5844] filemap_fdatawrite_wbc+0x104/0x160 [ 196.934435][ T5844] __filemap_fdatawrite_range+0xb2/0xf0 [ 196.934473][ T5844] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 196.934508][ T5844] ? check_path.constprop.0+0x24/0x50 [ 196.934626][ T5844] ? find_held_lock+0x2b/0x80 [ 196.934673][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.934716][ T5844] ? do_raw_spin_unlock+0x172/0x230 [ 196.934756][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.934812][ T5844] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 196.934876][ T5844] block_operations+0x2a3/0xfd0 [ 196.934909][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.934951][ T5844] ? stack_depot_save_flags+0x28/0xa50 [ 196.935019][ T5844] ? __pfx_block_operations+0x10/0x10 [ 196.935053][ T5844] ? kasan_save_stack+0x42/0x60 [ 196.935174][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.935216][ T5844] ? down_write+0x14d/0x200 [ 196.935250][ T5844] ? __pfx_down_write+0x10/0x10 [ 196.935287][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.935329][ T5844] ? rcu_is_watching+0x12/0xc0 [ 196.935380][ T5844] f2fs_write_checkpoint+0x2b8/0x45b0 [ 196.935425][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.935467][ T5844] ? kfree+0x2b6/0x4d0 [ 196.935508][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.935550][ T5844] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.935600][ T5844] ? f2fs_stop_gc_thread+0x79/0xd0 [ 196.935644][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.935701][ T5844] kill_f2fs_super+0x3c2/0x470 [ 196.935741][ T5844] ? __pfx_kill_f2fs_super+0x10/0x10 [ 196.935781][ T5844] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.935857][ T5844] deactivate_locked_super+0xc1/0x1a0 [ 196.935907][ T5844] deactivate_super+0xde/0x100 [ 196.935958][ T5844] cleanup_mnt+0x225/0x450 [ 196.936011][ T5844] task_work_run+0x150/0x240 [ 196.936053][ T5844] ? __pfx_task_work_run+0x10/0x10 [ 196.936090][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 196.936136][ T5844] ? __pfx___x64_sys_umount+0x10/0x10 [ 196.936202][ T5844] syscall_exit_to_user_mode+0x27b/0x2a0 [ 196.936261][ T5844] do_syscall_64+0xda/0x260 [ 196.936322][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.936358][ T5844] RIP: 0033:0x7fba0778fc97 [ 196.936386][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 196.936420][ T5844] RSP: 002b:00007ffc2e737558 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 196.936453][ T5844] RAX: 0000000000000000 RBX: 00007fba0781089d RCX: 00007fba0778fc97 [ 196.936476][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2e737610 [ 196.936498][ T5844] RBP: 00007ffc2e737610 R08: 0000000000000000 R09: 0000000000000000 [ 196.936520][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2e7386a0 [ 196.936542][ T5844] R13: 00007fba0781089d R14: 000000000002ff2b R15: 00007ffc2e7386e0 [ 196.936596][ T5844] [ 197.472030][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.493202][ T5844] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 197.584933][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.644158][ T5891] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 197.804360][ T5891] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.820164][ T5891] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 197.881082][ T5891] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.918791][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.948542][ T5891] usb 5-1: Product: syz [ 197.968352][ T5891] usb 5-1: Manufacturer: syz [ 197.982949][ T5891] usb 5-1: SerialNumber: syz [ 198.062405][ T7365] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 198.631299][ T4242] team0 (unregistering): Port device team_slave_1 removed [ 198.651373][ T7369] loop5: detected capacity change from 0 to 65536 [ 198.704165][ T7369] XFS (loop5): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 198.740444][ T4242] team0 (unregistering): Port device team_slave_0 removed [ 198.755881][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.813442][ T7369] XFS (loop5): Ending clean mount [ 198.842784][ T7369] XFS (loop5): EXPERIMENTAL online shrink feature enabled. Use at your own risk! [ 198.913386][ T5844] XFS (loop5): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 199.177059][ T7382] loop5: detected capacity change from 0 to 1024 [ 199.203440][ T7382] EXT4-fs: Ignoring removed nobh option [ 199.253086][ T7382] EXT4-fs: Ignoring removed bh option [ 199.309928][ T7382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.436951][ T7382] EXT4-fs warning (device loop5): ext4_rename_delete:3726: inode #12: comm syz.5.369: Deleting old file: nlink 2, error=-2 [ 199.631388][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.916221][ T37] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.156959][ T5891] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 200.312029][ T7398] syz.0.373 uses obsolete (PF_INET,SOCK_PACKET) [ 200.349826][ T7207] team0: Port device team_slave_0 added [ 200.385729][ T7207] team0: Port device team_slave_1 added [ 200.702320][ T5891] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 200.721248][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.741858][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.747439][ T5891] usb 5-1: USB disconnect, device number 3 [ 200.795474][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.855695][ T5891] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 200.881540][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.895414][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.932532][ T5933] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 201.000745][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.052262][ T37] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.102637][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 201.126440][ T5933] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 201.147621][ T5933] usb 6-1: config 179 has no interface number 0 [ 201.177589][ T5933] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 201.193009][ T7414] loop6: detected capacity change from 0 to 256 [ 201.214765][ T7414] exfat: Invalid uid '0x00000000ffffffff' [ 201.338155][ T5933] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 201.350797][ T5933] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.367429][ T5933] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 201.512545][ T5933] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 201.521764][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.544651][ T7408] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 201.735671][ T7207] hsr_slave_0: entered promiscuous mode [ 201.818527][ T5933] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input9 [ 201.876609][ T7207] hsr_slave_1: entered promiscuous mode [ 201.929191][ T7207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.060154][ T7207] Cannot create hsr debugfs directory [ 202.213016][ T37] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.394757][ T5891] usb 6-1: USB disconnect, device number 5 [ 202.394870][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 202.408996][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 202.417934][ T5891] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 202.437530][ T30] audit: type=1326 audit(1747241524.538:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7427 comm="syz.6.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e969 code=0x7fc00000 [ 202.490398][ T30] audit: type=1326 audit(1747241524.568:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7427 comm="syz.6.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bcb98e969 code=0x7fc00000 [ 202.552255][ T30] audit: type=1326 audit(1747241524.568:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7427 comm="syz.6.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcb98e969 code=0x7fc00000 [ 203.385439][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.444457][ T7207] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 203.626302][ T7207] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 203.696212][ T7207] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 203.778322][ T7426] loop1: detected capacity change from 0 to 40427 [ 203.789271][ T7207] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 203.833570][ T7426] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3fffff [ 203.881233][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.887735][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.916206][ T7426] F2FS-fs (loop1): invalid crc value [ 204.186208][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.297594][ T7207] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.357295][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.364580][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.375996][ T7426] F2FS-fs (loop1): Start checkpoint disabled! [ 204.378816][ T7446] loop6: detected capacity change from 0 to 32768 [ 204.421545][ T7446] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.389 (7446) [ 204.451363][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.458583][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.482987][ T7426] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 204.548685][ T7446] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 204.599282][ T7446] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 204.612672][ T6051] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.661335][ T7446] BTRFS info (device loop6): using free-space-tree [ 204.744108][ T7424] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x12d/0x1b0 [ 204.822251][ T7424] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 205.013545][ T7500] netlink: 572 bytes leftover after parsing attributes in process `syz.0.398'. [ 205.470620][ T37] kworker/u8:3: attempt to access beyond end of device [ 205.470620][ T37] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.523363][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:3 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 205.523419][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.523444][ T37] Workqueue: writeback wb_workfn (flush-7:1) [ 205.523498][ T37] Call Trace: [ 205.523509][ T37] [ 205.523523][ T37] dump_stack_lvl+0x16c/0x1f0 [ 205.523582][ T37] f2fs_handle_critical_error+0x621/0x9f0 [ 205.523634][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.523678][ T37] ? __asan_memset+0x23/0x50 [ 205.523725][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.523789][ T37] f2fs_write_end_io+0x73d/0xac0 [ 205.523849][ T37] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 205.523912][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.523968][ T37] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 205.524021][ T37] bio_endio+0x6d2/0x810 [ 205.524065][ T37] submit_bio_noacct+0x56d/0x1ec0 [ 205.524131][ T37] __submit_merged_bio+0x33c/0x770 [ 205.524194][ T37] __submit_merged_write_cond+0x319/0x3f0 [ 205.524261][ T37] f2fs_write_cache_pages+0x2139/0x2680 [ 205.524352][ T37] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 205.524420][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.524465][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.524508][ T37] ? find_held_lock+0x2b/0x80 [ 205.524556][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.524605][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.524648][ T37] ? do_raw_spin_unlock+0x172/0x230 [ 205.524709][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.524752][ T37] ? f2fs_available_free_memory+0x279/0xa30 [ 205.524887][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.524930][ T37] ? read_node_page+0x247/0x570 [ 205.524985][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.525038][ T37] f2fs_write_data_pages+0x4ad/0xd90 [ 205.525111][ T37] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 205.525184][ T37] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 205.525219][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.525273][ T37] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 205.525338][ T37] do_writepages+0x1b5/0x820 [ 205.525402][ T37] ? __pfx_do_writepages+0x10/0x10 [ 205.525449][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.525484][ T37] ? __lock_acquire+0xaa4/0x1ba0 [ 205.525553][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.525589][ T37] ? reacquire_held_locks+0xcd/0x1f0 [ 205.525649][ T37] __writeback_single_inode+0x160/0xfb0 [ 205.525691][ T37] ? __pfx___writeback_single_inode+0x10/0x10 [ 205.525726][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.525765][ T37] ? do_raw_spin_unlock+0x172/0x230 [ 205.525810][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.525856][ T37] writeback_sb_inodes+0x601/0xf90 [ 205.525918][ T37] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 205.526035][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.526079][ T37] ? rcu_is_watching+0x12/0xc0 [ 205.526122][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.526165][ T37] ? queue_io+0x3f6/0x520 [ 205.526206][ T37] wb_writeback+0x419/0xb70 [ 205.526261][ T37] ? __pfx_wb_writeback+0x10/0x10 [ 205.526318][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.526356][ T37] ? mark_held_locks+0x49/0x80 [ 205.526404][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.526456][ T37] wb_workfn+0x14d/0xbe0 [ 205.526501][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.526540][ T37] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 205.526589][ T37] ? __pfx_wb_workfn+0x10/0x10 [ 205.526631][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.526674][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.526720][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.526763][ T37] ? rcu_is_watching+0x12/0xc0 [ 205.526824][ T37] process_one_work+0x9cf/0x1b70 [ 205.526888][ T37] ? __pfx_process_one_work+0x10/0x10 [ 205.526930][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.526988][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.527030][ T37] ? assign_work+0x1a0/0x250 [ 205.527072][ T37] worker_thread+0x6c8/0xf10 [ 205.527126][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.527173][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.527216][ T37] ? __kthread_parkme+0x19e/0x250 [ 205.527267][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.527315][ T37] ? __pfx_worker_thread+0x10/0x10 [ 205.527356][ T37] kthread+0x3c5/0x780 [ 205.527393][ T37] ? __pfx_kthread+0x10/0x10 [ 205.527425][ T37] ? __pfx_kthread+0x10/0x10 [ 205.527458][ T37] ? __pfx_kthread+0x10/0x10 [ 205.527499][ T37] ? __pfx_kthread+0x10/0x10 [ 205.527531][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.527573][ T37] ? rcu_is_watching+0x12/0xc0 [ 205.527618][ T37] ? __pfx_kthread+0x10/0x10 [ 205.527656][ T37] ret_from_fork+0x48/0x80 [ 205.527691][ T37] ? __pfx_kthread+0x10/0x10 [ 205.527728][ T37] ret_from_fork_asm+0x1a/0x30 [ 205.527875][ T37] [ 205.528164][ T37] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 205.866157][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.927535][ T7207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.432279][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.720471][ T6000] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 207.163343][ T7545] process 'syz.5.407' launched './file0' with NULL argv: empty string added [ 207.437048][ T6025] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.596819][ T7207] veth0_vlan: entered promiscuous mode [ 207.654300][ T7207] veth1_vlan: entered promiscuous mode [ 207.776597][ T7207] veth0_macvtap: entered promiscuous mode [ 207.811480][ T7207] veth1_macvtap: entered promiscuous mode [ 207.863820][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.916849][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.934838][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.982169][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.017741][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.272108][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.282028][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.302183][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.322438][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.403522][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.418163][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.430586][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.441417][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.451720][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.463656][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.473863][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.572577][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.604097][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.722326][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.754266][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.791906][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.812124][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.878114][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.008622][ T7207] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.062276][ T7207] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.125506][ T7207] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.170120][ T7207] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.799160][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.953352][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.986527][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.761995][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.818613][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.463289][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 211.713648][ T7617] loop5: detected capacity change from 0 to 1024 [ 211.874506][ T7617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.995051][ T7617] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm +}[@: bg 0: block 88: padding at end of block bitmap is not set [ 212.097807][ T7617] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2847: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 212.572358][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.591650][ T970] Process accounting resumed [ 212.784335][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.502010][ T7664] loop5: detected capacity change from 0 to 2048 [ 213.707348][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.702553][ T5834] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 214.923205][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.935119][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.952304][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.000142][ T5834] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 215.046368][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.077122][ T5834] usb 6-1: config 0 descriptor?? [ 215.099769][ T7704] loop6: detected capacity change from 0 to 1024 [ 215.294190][ T7704] hfsplus: xattr searching failed [ 215.361395][ T7708] hfsplus: xattr searching failed [ 215.423848][ T7704] hfsplus: xattr searching failed [ 215.461551][ T7704] hfsplus: xattr searching failed [ 215.551732][ T5834] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 215.573270][ T7670] loop1: detected capacity change from 0 to 40427 [ 215.581700][ T5834] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 215.615361][ T7670] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3fffff [ 215.657145][ T5834] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 215.706862][ T7670] F2FS-fs (loop1): invalid crc value [ 216.136564][ T71] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.292169][ T7670] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 216.358596][ T5834] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 216.389923][ T5834] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 216.446380][ T5834] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 216.509786][ T5834] usb 6-1: USB disconnect, device number 6 [ 216.532671][ T30] audit: type=1800 audit(1747241538.618:15): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.443" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 216.656283][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.7.461'. [ 216.666461][ T7670] syz.1.443: attempt to access beyond end of device [ 216.666461][ T7670] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 216.693850][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.7.461'. [ 216.893411][ T5840] syz-executor: attempt to access beyond end of device [ 216.893411][ T5840] loop1: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 216.948990][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 216.949043][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.949065][ T5840] Call Trace: [ 216.949077][ T5840] [ 216.949090][ T5840] dump_stack_lvl+0x16c/0x1f0 [ 216.949152][ T5840] f2fs_handle_critical_error+0x621/0x9f0 [ 216.949201][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.949247][ T5840] ? __asan_memset+0x23/0x50 [ 216.949294][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.949350][ T5840] f2fs_write_end_io+0x73d/0xac0 [ 216.949408][ T5840] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 216.949469][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.949524][ T5840] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 216.949576][ T5840] bio_endio+0x6d2/0x810 [ 216.949619][ T5840] submit_bio_noacct+0x56d/0x1ec0 [ 216.949681][ T5840] __submit_merged_bio+0x33c/0x770 [ 216.949741][ T5840] __submit_merged_write_cond+0x319/0x3f0 [ 216.949814][ T5840] f2fs_write_cache_pages+0x2139/0x2680 [ 216.949905][ T5840] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 216.949963][ T5840] ? lock_acquire+0x179/0x350 [ 216.950028][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.950071][ T5840] ? lock_acquire+0x179/0x350 [ 216.950129][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.950172][ T5840] ? find_held_lock+0x2b/0x80 [ 216.950218][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.950281][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.950325][ T5840] ? __lock_acquire+0xaa4/0x1ba0 [ 216.950403][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.950447][ T5840] ? do_raw_spin_lock+0x12c/0x2b0 [ 216.950536][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.950587][ T5840] f2fs_write_data_pages+0x4ad/0xd90 [ 216.950658][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 216.950731][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.950779][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.950827][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 216.950891][ T5840] do_writepages+0x1b5/0x820 [ 216.950947][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.950994][ T5840] ? __pfx_do_writepages+0x10/0x10 [ 216.951045][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.951090][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.951133][ T5840] ? do_raw_spin_lock+0x12c/0x2b0 [ 216.951169][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.951211][ T5840] ? find_held_lock+0x2b/0x80 [ 216.951257][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.951305][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.951347][ T5840] ? do_raw_spin_unlock+0x172/0x230 [ 216.951387][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.951440][ T5840] filemap_fdatawrite_wbc+0x104/0x160 [ 216.951499][ T5840] __filemap_fdatawrite_range+0xb2/0xf0 [ 216.951537][ T5840] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 216.951634][ T5840] ? find_held_lock+0x2b/0x80 [ 216.951707][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.951752][ T5840] ? do_raw_spin_unlock+0x172/0x230 [ 216.951791][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.951849][ T5840] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 216.951908][ T5840] block_operations+0x2a3/0xfd0 [ 216.951945][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.951988][ T5840] ? stack_depot_save_flags+0x28/0xa50 [ 216.952055][ T5840] ? __pfx_block_operations+0x10/0x10 [ 216.952089][ T5840] ? kasan_save_stack+0x42/0x60 [ 216.952197][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.952239][ T5840] ? down_write+0x14d/0x200 [ 216.952274][ T5840] ? __pfx_down_write+0x10/0x10 [ 216.952313][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.952356][ T5840] ? rcu_is_watching+0x12/0xc0 [ 216.952407][ T5840] f2fs_write_checkpoint+0x2b8/0x45b0 [ 216.952450][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.952494][ T5840] ? kfree+0x2b6/0x4d0 [ 216.952536][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.952579][ T5840] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.952630][ T5840] ? f2fs_stop_gc_thread+0x79/0xd0 [ 216.952674][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.952729][ T5840] kill_f2fs_super+0x3c2/0x470 [ 216.952770][ T5840] ? __pfx_kill_f2fs_super+0x10/0x10 [ 216.952814][ T5840] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.952887][ T5840] deactivate_locked_super+0xc1/0x1a0 [ 216.952937][ T5840] deactivate_super+0xde/0x100 [ 216.952986][ T5840] cleanup_mnt+0x225/0x450 [ 216.953043][ T5840] task_work_run+0x150/0x240 [ 216.953085][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 216.953122][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 216.953168][ T5840] ? __pfx___x64_sys_umount+0x10/0x10 [ 216.953231][ T5840] syscall_exit_to_user_mode+0x27b/0x2a0 [ 216.953290][ T5840] do_syscall_64+0xda/0x260 [ 216.953350][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.953386][ T5840] RIP: 0033:0x7f8986b8fc97 [ 216.953415][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 216.953456][ T5840] RSP: 002b:00007fff199e8478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 216.953491][ T5840] RAX: 0000000000000000 RBX: 00007f8986c1089d RCX: 00007f8986b8fc97 [ 216.953514][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff199e8530 [ 216.953536][ T5840] RBP: 00007fff199e8530 R08: 0000000000000000 R09: 0000000000000000 [ 216.953559][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff199e95c0 [ 216.953582][ T5840] R13: 00007f8986c1089d R14: 0000000000034eae R15: 00007fff199e9600 [ 216.953631][ T5840] [ 217.554357][ T5840] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 217.568622][ T7721] loop6: detected capacity change from 0 to 32768 [ 217.578978][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 217.579028][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.579050][ T5840] Call Trace: [ 217.579062][ T5840] [ 217.579074][ T5840] dump_stack_lvl+0x16c/0x1f0 [ 217.579133][ T5840] f2fs_handle_critical_error+0x621/0x9f0 [ 217.579182][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.579226][ T5840] ? __asan_memset+0x23/0x50 [ 217.579271][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.579327][ T5840] f2fs_write_end_io+0x73d/0xac0 [ 217.579384][ T5840] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 217.579445][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.579499][ T5840] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 217.579551][ T5840] bio_endio+0x6d2/0x810 [ 217.579594][ T5840] submit_bio_noacct+0x56d/0x1ec0 [ 217.579654][ T5840] __submit_merged_bio+0x33c/0x770 [ 217.579712][ T5840] __submit_merged_write_cond+0x319/0x3f0 [ 217.579776][ T5840] f2fs_write_cache_pages+0x2139/0x2680 [ 217.579872][ T5840] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 217.579929][ T5840] ? lock_acquire+0x179/0x350 [ 217.579993][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.580035][ T5840] ? lock_acquire+0x179/0x350 [ 217.580091][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.580132][ T5840] ? find_held_lock+0x2b/0x80 [ 217.580176][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.580239][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.580281][ T5840] ? __lock_acquire+0xaa4/0x1ba0 [ 217.580358][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.580400][ T5840] ? do_raw_spin_lock+0x12c/0x2b0 [ 217.580491][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.580541][ T5840] f2fs_write_data_pages+0x4ad/0xd90 [ 217.580606][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 217.580677][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.580725][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.580768][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 217.580838][ T5840] do_writepages+0x1b5/0x820 [ 217.580894][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.580940][ T5840] ? __pfx_do_writepages+0x10/0x10 [ 217.580991][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.581036][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.581076][ T5840] ? do_raw_spin_lock+0x12c/0x2b0 [ 217.581112][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.581155][ T5840] ? find_held_lock+0x2b/0x80 [ 217.581201][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.581249][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.581291][ T5840] ? do_raw_spin_unlock+0x172/0x230 [ 217.581331][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.581383][ T5840] filemap_fdatawrite_wbc+0x104/0x160 [ 217.581439][ T5840] __filemap_fdatawrite_range+0xb2/0xf0 [ 217.581477][ T5840] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 217.581573][ T5840] ? find_held_lock+0x2b/0x80 [ 217.581618][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.581662][ T5840] ? do_raw_spin_unlock+0x172/0x230 [ 217.581701][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.581751][ T5840] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 217.581816][ T5840] block_operations+0x2a3/0xfd0 [ 217.581850][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.581893][ T5840] ? stack_depot_save_flags+0x28/0xa50 [ 217.581960][ T5840] ? __pfx_block_operations+0x10/0x10 [ 217.581994][ T5840] ? kasan_save_stack+0x42/0x60 [ 217.582107][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.582151][ T5840] ? down_write+0x14d/0x200 [ 217.582185][ T5840] ? __pfx_down_write+0x10/0x10 [ 217.582220][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.582263][ T5840] ? rcu_is_watching+0x12/0xc0 [ 217.582313][ T5840] f2fs_write_checkpoint+0x2b8/0x45b0 [ 217.582357][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.582400][ T5840] ? kfree+0x2b6/0x4d0 [ 217.582442][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.582485][ T5840] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.582537][ T5840] ? f2fs_stop_gc_thread+0x79/0xd0 [ 217.582581][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.582636][ T5840] kill_f2fs_super+0x3c2/0x470 [ 217.582675][ T5840] ? __pfx_kill_f2fs_super+0x10/0x10 [ 217.582711][ T5840] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.582785][ T5840] deactivate_locked_super+0xc1/0x1a0 [ 217.582843][ T5840] deactivate_super+0xde/0x100 [ 217.582892][ T5840] cleanup_mnt+0x225/0x450 [ 217.582946][ T5840] task_work_run+0x150/0x240 [ 217.582988][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 217.583025][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.583071][ T5840] ? __pfx___x64_sys_umount+0x10/0x10 [ 217.583136][ T5840] syscall_exit_to_user_mode+0x27b/0x2a0 [ 217.583194][ T5840] do_syscall_64+0xda/0x260 [ 217.583255][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.583291][ T5840] RIP: 0033:0x7f8986b8fc97 [ 217.583318][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 217.583354][ T5840] RSP: 002b:00007fff199e8478 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 217.583388][ T5840] RAX: 0000000000000000 RBX: 00007f8986c1089d RCX: 00007f8986b8fc97 [ 217.583413][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff199e8530 [ 217.583436][ T5840] RBP: 00007fff199e8530 R08: 0000000000000000 R09: 0000000000000000 [ 217.583459][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff199e95c0 [ 217.583482][ T5840] R13: 00007f8986c1089d R14: 0000000000034eae R15: 00007fff199e9600 [ 217.583532][ T5840] [ 218.211350][ T7744] Driver unsupported XDP return value 0 on prog (id 68) dev N/A, expect packet loss! [ 218.299397][ T5840] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 218.360328][ T7721] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 218.410664][ T4242] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.533086][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'. [ 218.591211][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'. [ 218.610923][ T30] audit: type=1800 audit(1747241540.708:16): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.458" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 218.787087][ T7721] [ 218.789469][ T7721] ====================================================== [ 218.796502][ T7721] WARNING: possible circular locking dependency detected [ 218.803534][ T7721] 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 Not tainted [ 218.810660][ T7721] ------------------------------------------------------ [ 218.817688][ T7721] syz.6.458/7721 is trying to acquire lock: [ 218.823590][ T7721] ffff88807aafcda0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa7/0x320 [ 218.835241][ T7721] [ 218.835241][ T7721] but task is already holding lock: [ 218.842618][ T7721] ffff88807aafce38 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0x9f/0x320 [ 218.853317][ T7721] [ 218.853317][ T7721] which lock already depends on the new lock. [ 218.853317][ T7721] [ 218.863732][ T7721] [ 218.863732][ T7721] the existing dependency chain (in reverse order) is: [ 218.872759][ T7721] [ 218.872759][ T7721] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}: [ 218.880641][ T7721] down_read+0x9b/0x480 [ 218.885342][ T7721] ocfs2_init_acl+0x2fc/0x7d0 [ 218.890553][ T7721] ocfs2_mknod+0xd5c/0x2540 [ 218.895609][ T7721] ocfs2_create+0x17c/0x460 [ 218.900664][ T7721] lookup_open.isra.0+0x11d3/0x1580 [ 218.906407][ T7721] path_openat+0x905/0x2d40 [ 218.911459][ T7721] do_filp_open+0x20b/0x470 [ 218.916513][ T7721] do_sys_openat2+0x11b/0x1d0 [ 218.921726][ T7721] __x64_sys_openat+0x174/0x210 [ 218.927112][ T7721] do_syscall_64+0xcd/0x260 [ 218.932171][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.938607][ T7721] [ 218.938607][ T7721] -> #3 (jbd2_handle){++++}-{0:0}: [ 218.945939][ T7721] start_this_handle+0x5ea/0x1410 [ 218.951500][ T7721] jbd2__journal_start+0x394/0x6a0 [ 218.957145][ T7721] jbd2_journal_start+0x29/0x40 [ 218.962538][ T7721] ocfs2_start_trans+0x3b9/0x970 [ 218.968028][ T7721] ocfs2_mknod+0xc19/0x2540 [ 218.973126][ T7721] ocfs2_create+0x17c/0x460 [ 218.978183][ T7721] lookup_open.isra.0+0x11d3/0x1580 [ 218.983925][ T7721] path_openat+0x905/0x2d40 [ 218.988975][ T7721] do_filp_open+0x20b/0x470 [ 218.994025][ T7721] do_sys_openat2+0x11b/0x1d0 [ 218.999234][ T7721] __x64_sys_openat+0x174/0x210 [ 219.004623][ T7721] do_syscall_64+0xcd/0x260 [ 219.009695][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.016127][ T7721] [ 219.016127][ T7721] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 219.024675][ T7721] down_read+0x9b/0x480 [ 219.029366][ T7721] ocfs2_start_trans+0x3ae/0x970 [ 219.034847][ T7721] ocfs2_mknod+0xc19/0x2540 [ 219.039906][ T7721] ocfs2_create+0x17c/0x460 [ 219.044961][ T7721] lookup_open.isra.0+0x11d3/0x1580 [ 219.050701][ T7721] path_openat+0x905/0x2d40 [ 219.055753][ T7721] do_filp_open+0x20b/0x470 [ 219.060816][ T7721] do_sys_openat2+0x11b/0x1d0 [ 219.066028][ T7721] __x64_sys_openat+0x174/0x210 [ 219.071416][ T7721] do_syscall_64+0xcd/0x260 [ 219.076473][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.082906][ T7721] [ 219.082906][ T7721] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 219.090424][ T7721] ocfs2_start_trans+0x29d/0x970 [ 219.095913][ T7721] ocfs2_setattr+0x11c3/0x2560 [ 219.101229][ T7721] notify_change+0x6a9/0x1230 [ 219.106452][ T7721] do_truncate+0x15b/0x220 [ 219.111439][ T7721] do_ftruncate+0x5a9/0x960 [ 219.116496][ T7721] do_sys_ftruncate+0x61/0xa0 [ 219.121720][ T7721] __x64_sys_ftruncate+0x58/0x80 [ 219.127218][ T7721] do_syscall_64+0xcd/0x260 [ 219.132289][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.138720][ T7721] [ 219.138720][ T7721] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}: [ 219.147534][ T7721] __lock_acquire+0x1173/0x1ba0 [ 219.152941][ T7721] lock_acquire+0x179/0x350 [ 219.158096][ T7721] down_write+0x92/0x200 [ 219.163663][ T7721] ocfs2_try_remove_refcount_tree+0xa7/0x320 [ 219.170195][ T7721] ocfs2_truncate_file+0xbba/0x17c0 [ 219.175949][ T7721] ocfs2_setattr+0x1594/0x2560 [ 219.181265][ T7721] notify_change+0x6a9/0x1230 [ 219.186492][ T7721] do_truncate+0x15b/0x220 [ 219.191462][ T7721] vfs_truncate+0x5d6/0x6e0 [ 219.196518][ T7721] __x64_sys_truncate+0x172/0x1e0 [ 219.202096][ T7721] do_syscall_64+0xcd/0x260 [ 219.207162][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.213610][ T7721] [ 219.213610][ T7721] other info that might help us debug this: [ 219.213610][ T7721] [ 219.223845][ T7721] Chain exists of: [ 219.223845][ T7721] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 219.223845][ T7721] [ 219.237888][ T7721] Possible unsafe locking scenario: [ 219.237888][ T7721] [ 219.245351][ T7721] CPU0 CPU1 [ 219.250720][ T7721] ---- ---- [ 219.256086][ T7721] lock(&oi->ip_xattr_sem); [ 219.260697][ T7721] lock(jbd2_handle); [ 219.267305][ T7721] lock(&oi->ip_xattr_sem); [ 219.274434][ T7721] lock(&ocfs2_file_ip_alloc_sem_key); [ 219.279995][ T7721] [ 219.279995][ T7721] *** DEADLOCK *** [ 219.279995][ T7721] [ 219.288141][ T7721] 3 locks held by syz.6.458/7721: [ 219.293169][ T7721] #0: ffff888057278420 (sb_writers#18){.+.+}-{0:0}, at: vfs_truncate+0x336/0x6e0 [ 219.302481][ T7721] #1: ffff88807aafd100 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: do_truncate+0x14a/0x220 [ 219.312926][ T7721] #2: ffff88807aafce38 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0x9f/0x320 [ 219.324041][ T7721] [ 219.324041][ T7721] stack backtrace: [ 219.329933][ T7721] CPU: 0 UID: 0 PID: 7721 Comm: syz.6.458 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 219.329975][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.329994][ T7721] Call Trace: [ 219.330005][ T7721] [ 219.330017][ T7721] dump_stack_lvl+0x116/0x1f0 [ 219.330070][ T7721] print_circular_bug+0x275/0x350 [ 219.330123][ T7721] check_noncircular+0x14c/0x170 [ 219.330179][ T7721] __lock_acquire+0x1173/0x1ba0 [ 219.330238][ T7721] lock_acquire+0x179/0x350 [ 219.330287][ T7721] ? ocfs2_try_remove_refcount_tree+0xa7/0x320 [ 219.330331][ T7721] ? __pfx___might_resched+0x10/0x10 [ 219.330380][ T7721] down_write+0x92/0x200 [ 219.330409][ T7721] ? ocfs2_try_remove_refcount_tree+0xa7/0x320 [ 219.330449][ T7721] ? __pfx_down_write+0x10/0x10 [ 219.330484][ T7721] ocfs2_try_remove_refcount_tree+0xa7/0x320 [ 219.330524][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.330565][ T7721] ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10 [ 219.330606][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.330647][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.330686][ T7721] ? up_write+0x1b2/0x520 [ 219.330715][ T7721] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 219.330770][ T7721] ocfs2_truncate_file+0xbba/0x17c0 [ 219.330826][ T7721] ? __pfx_ocfs2_truncate_file+0x10/0x10 [ 219.330872][ T7721] ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10 [ 219.330907][ T7721] ? inode_newsize_ok+0x13b/0x200 [ 219.330946][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.330985][ T7721] ? setattr_prepare+0x140/0x9a0 [ 219.331026][ T7721] ocfs2_setattr+0x1594/0x2560 [ 219.331079][ T7721] ? __pfx_ocfs2_setattr+0x10/0x10 [ 219.331126][ T7721] ? __pfx_timestamp_truncate+0x10/0x10 [ 219.331177][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.331217][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.331263][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.331302][ T7721] ? evm_inode_setattr+0x65/0x680 [ 219.331354][ T7721] ? __pfx_make_vfsgid+0x10/0x10 [ 219.331391][ T7721] ? __pfx_ocfs2_setattr+0x10/0x10 [ 219.331438][ T7721] ? notify_change+0x6a9/0x1230 [ 219.331474][ T7721] ? __pfx_ocfs2_setattr+0x10/0x10 [ 219.331520][ T7721] notify_change+0x6a9/0x1230 [ 219.331563][ T7721] do_truncate+0x15b/0x220 [ 219.331609][ T7721] ? __pfx_do_truncate+0x10/0x10 [ 219.331654][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.331715][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.331754][ T7721] ? mnt_get_write_access+0x20c/0x300 [ 219.331793][ T7721] vfs_truncate+0x5d6/0x6e0 [ 219.331843][ T7721] ? __pfx_vfs_truncate+0x10/0x10 [ 219.331889][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.331929][ T7721] ? putname+0x154/0x1a0 [ 219.331959][ T7721] __x64_sys_truncate+0x172/0x1e0 [ 219.332006][ T7721] ? __pfx___x64_sys_truncate+0x10/0x10 [ 219.332052][ T7721] ? rcu_is_watching+0x12/0xc0 [ 219.332095][ T7721] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.332142][ T7721] do_syscall_64+0xcd/0x260 [ 219.332195][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.332229][ T7721] RIP: 0033:0x7f8bcb98e969 [ 219.332253][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.332286][ T7721] RSP: 002b:00007f8bcc8b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 219.332316][ T7721] RAX: ffffffffffffffda RBX: 00007f8bcbbb5fa0 RCX: 00007f8bcb98e969 [ 219.332339][ T7721] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000200000000080 [ 219.332359][ T7721] RBP: 00007f8bcba10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 219.332379][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.332399][ T7721] R13: 0000000000000000 R14: 00007f8bcbbb5fa0 R15: 00007fffaa887b48 [ 219.332431][ T7721] [ 219.709743][ T7768] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 219.840709][ T7768] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 219.920704][ T6000] ocfs2: Unmounting device (7,6) on (node local) [ 220.424562][ T6025] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.542401][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.652256][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.762272][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.352664][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.883150][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 226.013258][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.122216][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.222367][ T37] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!