last executing test programs: 1m15.884760819s ago: executing program 2 (id=179): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0x7e) 1m15.647885577s ago: executing program 2 (id=182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r0}, 0x18) r1 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000240)=[{0xfffc, 0x11, 0x0, 0x0}, {0x8, 0x20f5, 0x0, 0x0}], 0x2}) 1m15.44339025s ago: executing program 2 (id=186): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r1, r1, 0xa93, 0x0, 0x3fff}) 1m15.181055989s ago: executing program 2 (id=190): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000020240)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000000)=""/39, 0x27) 1m14.753649915s ago: executing program 2 (id=195): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@nodiscard}, {@compress_cache}, {@discard_unit_section}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@background_gc_on}, {@background_gc_on}, {@four_active_logs}, {@fsync_mode_posix}, {@block_mode}, {@data_flush}, {@heap}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x550f, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ftruncate(r0, 0x8) 1m14.157279405s ago: executing program 2 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x48e, 0x0, 0x100000001}]}) 1m13.42819042s ago: executing program 32 (id=199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x48e, 0x0, 0x100000001}]}) 4.491148049s ago: executing program 3 (id=802): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000010c0)='./file0\x00', 0x3804001, &(0x7f0000000000)=ANY=[], 0x1, 0x1a3, &(0x7f0000000480)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x6042, 0x0) read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x2020) 3.891558182s ago: executing program 3 (id=809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) clock_settime(0x17, &(0x7f0000000040)) 3.683486737s ago: executing program 3 (id=810): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.676447129s ago: executing program 1 (id=816): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrjquota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)={{0x10b, 0x96, 0xb, 0x37f, 0x35a, 0x6, 0x367, 0xd}}, 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 2.627376204s ago: executing program 3 (id=817): socket$kcm(0xa, 0x3, 0x73) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) 2.250202484s ago: executing program 0 (id=821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) 2.030019704s ago: executing program 0 (id=822): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x80000, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000380)={r1, r0, 0xf, 0x0, 0x0, 0x1c, 0x9a, 0x1, 0x70, 0x9, 0x2, 0x7, 'syz1\x00'}) 1.815867076s ago: executing program 0 (id=823): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 1.722165121s ago: executing program 0 (id=824): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@umask={'umask', 0x3d, 0xe}}, {@nobarrier}, {}, {@nls={'nls', 0x3d, 'macroman'}}, {@barrier}, {@uid}, {@umask={'umask', 0x3d, 0x8}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/49, 0x31) getdents(r0, 0xfffffffffffffffd, 0x58) 1.675796638s ago: executing program 1 (id=826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) 1.625334915s ago: executing program 4 (id=827): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.486194819s ago: executing program 5 (id=828): rt_sigprocmask(0x0, &(0x7f000078b000)={[0x10000]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) ppoll(0x0, 0x0, 0x0, &(0x7f0000000380), 0x8) 1.347742303s ago: executing program 0 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="06003400c5f3000008004a000bec0f001800490004ac0f0009ac0f0001ac0f0001ac0f"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 1.255939725s ago: executing program 5 (id=830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xa, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x2, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x8, 0x6e, 0x2, 0x81}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xb, 0x7b, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0x6c00, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) 1.107898378s ago: executing program 0 (id=831): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 1.031834882s ago: executing program 4 (id=832): r0 = socket$netlink(0x10, 0x3, 0x15) ftruncate(0xffffffffffffffff, 0xc17a) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x24008080) 946.703064ms ago: executing program 1 (id=833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 944.74669ms ago: executing program 5 (id=834): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r1, 0x2}, 0x8) 833.608874ms ago: executing program 4 (id=835): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000007c0)=r1, 0x4) 755.868898ms ago: executing program 1 (id=836): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r1, 0x4) 666.3854ms ago: executing program 4 (id=837): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) 632.915104ms ago: executing program 1 (id=838): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=ignore,iocharset=cp1255,utf8,unhide,longad,iocharset=cp1250,lastblock=00000000000000000000,iocharset=iso8859-6,adinicb,undelete,lastblock=00000000000000000011,gid=forget,uid=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0xc67, &(0x7f0000001dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 578.54818ms ago: executing program 5 (id=839): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 443.887197ms ago: executing program 4 (id=840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) 316.098588ms ago: executing program 5 (id=841): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) 217.874436ms ago: executing program 4 (id=842): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004080)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563ff0301fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed6922317a3cc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f00000004c0)={&(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x28, 0x4, 0x15ac02, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002080)="6d797d42fb74562ec642068eb410c60f8cdc42cf09864b1dd1d244ec3efdff103306a02bd120cd2c684eee7cd734914ad7ec2bdd4402eeab7a2972f1672f126c4b5f6c5ff748548170bdf1020c2c3d09186940feb185436981cd578c3a2bdc19c16209468100cc1d67247885420cbc0ea004f07283bc4a5cf8499ad5ef4df93b2fa2eb26895ed9260cc61afbc766adadf7809b3a8f76d9f835acae2dac8abc42896374a6a82a8894552441bd0202daa10048b49d3bc74bba1e5258ab8ac5169facb96d9f68705a7709f6d9a66a9988c13d13a2b8b34d9f234e1c5fae79e4cb76ff3102184ed9032d2402087dcb3eff6bfac7bc4d2fdc9ea25f5289d52ed75ffcd83a2781eb4a23fdd078d1e53495305e3ed5bb4e060e89d6eb2b13586f7f5df32e34390d70f074b4f92c4624312698d86578f3d951021db151806fc314c98d819604d8d9572efc7dd71c0d1a9176ffbd48361908e927e03caa4c1ccc805fe755e616d983442660299e9dd34e5612eff964a45d613a832a0ef8e4410fcdb0313712795b369c08f907c91a4f20e5c18ff903e0ee410d77bc076f49debfd6e411104cace38e0318023527d1c54cec66790638c9ee70c29de0406b3483ca1663245edcda56dc9612e93f40f19cbde5cabb8816d7b75a266e404a8e5364d43c08cf5cc645b533c4b6fe349819c5374fac7a923a7a803ab138c873aee3718921043a60a0ce84df8b991dfa525f0955acbc866182f2409d032981ad824f037ef068501f955898c4500049f0b30014832e3b668f5873305ebd1e094f244caa90610be83a5f674decf451a82d9edca6664da89cad8dc212943828570fb365b41993f89c6d36c579157c4055a77eb1dad1dc466e743129e5e3098f4432fbe289111e102223ff04d02e8108b0925ce76118445efa09233e579f398ab373303c0bb64ff82ddb597040e58a61f82cc56161eaec13ed297a8daa9514468283037e5d0077c9803b69421070718fba4865e4b9c6d7d272c562cc4dd998e16fe288dac68b0bdf05eb2a02fd40b900944d10a94f2b3be9b6c6dc628044aa9eaf34e0474771c10bef03f6af2029643acc1e97efa0748cfca63aa9546bbfa6d7533c4dab0b931ac35b331aef91a80d5ea08ba35cf66e1779298d3338114c12f024970d12af8d67f9b165c15a8b7e37c14c2d512dca76cf6077e2011bb47cc993f3088027b2d53daca574e8b443fddf5c252788854be8aec357db43f2147f23061641d2910a4a503a3a9ca86b3656d37d443e5e4207bb38b6e8879bf3de21309eb90113ccaa75e1d1e0900efc17aecd35078b8f3d579d2d4fb576127278290d6a9ea379e22dcc4ad369d3405311efbc74702020d6cdb31267c2e4dfc6a34bf39c9db32da7f387760909843fbd02e9e291e838fcd8faac4c9ad909cc19440bb775070496ef69250f4cf90372c0f1835dacd4d605a69334d73b1228cce41fe3c6457a37531bbab6d8b15a8214ff3002d29016932de969f05ed64b720ad249b8164ea82fde08303277e7d5f0d3e86bd6021024bdb1d24afe3ae28cece041943db60034fa11c3b6ec7b09c117b086fa4016e68e46678a7c5e91c40d2866295247276109a8778b043b51ffe3ec33dbb665806cf6ca41e7143885b6ca920fd8caf475ddcc698a09d368c721f048efe9e0d372d9cc58deba32f81e7e7f6d53209050d72545bbf04356ea95c9bcec3b8b87f56963111c5454b30a12b8479afc26361a7e00a66c03aae8ebc3348ac2e9b0f52453a32efa9b8ec038e671122dc2965d3b7395051974088f4aa47a76327a0dffce6db0a2cd65e2da5539fd7673911d5605cadf30d85563a60afd58767b6adc549173818de01b0de192894a76bc4e62d8c9e341729e6ef37574cf63c27674081202b8ab9cb9d92d346b1c2dadb253532c1674b2440504f8430c0a2ae5829b016af877831ecce9b13743e821436a6c1c46a1176922dbf2721d9722edf72817f8d15fa5c7ecad046df91bb57b8d16244527c855a40403ddf1757c31361c8bec9b5796547fa2c93e03f264a366a96666e24d7f908f6fa4c3f26722961e70adfc4ccd413c2c05adeda400de500babfb80a4e4ae5e9e04444c55f006337c0a98c33f04ae0a6620a1acbc26b5c7d125c30ca542c64604a109c6022029da452a717b219456cca6bc9959f088a5f2360c390b531baf92ae2429a2d0b6c7a20c137a3a0050ae2216b871c03c56410d28472d1035bb870f94589b93ceb57a504bba5acb7a6f77699fc10ea96d8e8fb913ca78c0af33a8435344b71531207344d78ac349894aab972c1b471d52b266bbe4313ef2ba71e7a4680ff442a358699c1e18322dfd50c55b637b6e6d5f02fa61b0e8ae4ef7cbb6359f70028a6b60fe901b2ad97a62b5d527efaf5ebe23fccd80d80e02eabb1be14d40faac8a56b4785fe47c8ff4ac4ad7fcef2134b1ec599074dd45d2b7a5c45845787e0490d9d7db95b58b18f14ae6ccc39623ba0fdf64c8d027f1e7652cc90e82732d4292f4ab0f959a44ff906484fcf83e222088345541ba2b1c50b63711d8adb63c8556452c142de8a06f4b28a86f629cc1dc713dcddcfebc8b1420a603fb970ddaedfc82250637327beb5c0ad04947477bc9aec0914cd78cbf5060e4ef7806b3443c85dbe79b8e87807b1a8d141583998c412d89c23dca4aa16af321dead51a12a73be98bd8ebb4d58b3ccd2d67ec936f2596afff2ba4166015aa4cc6c433acf33df30e3d40a0d6468944a07d1f9eba1bb9eb03dbfb42ba790dc1e7f66ad1834fad94440bffe3879509120b6a5cd1890281bf0f4c2d1be00fbe6b2d09ebdf594110f2bda035262d4830dbe64aa3152612df991a6fe1d035e0b301cf527d74140c85ad79acc001fd2ddb3f283c21e8d253c6c4685584f753e01aae2dee4158c68e2e612f056eb602ad8199d84784e05b363292956247d1fd8e4201330d6060d66e10e316143015908554e5325550d61b8af87a92237edd75cf687919ed0164de95042cbcfe96b9102fe3b71f43bbb1fc24d9d2d0d81dad29ac18cce353ca7c4a7c32e12e451654addc5dc6a44d001c40913eaaf14dacab7037a68e9875ae51321d1852820794206fcc1cdd51443d5e3fcd1dc4dbf728d1ed8dc29437db0154c2f59d1d0d0b0048cb56ad965682afeda337b172cf6a77be36ab8424b919e493628846bbf485d5fefd73228e40295fa2070027f6f2ed565024b82d1058a1be0d0c364b765f2a58f382e378692d1ca4fc7f09f867ed4684dd82dd4c76e0e640f5f87d1c6c2fafdb733f1cef6572cb5e104ae9c94d26c81cbc9a5fd8fbe61ddbdc683b7f4030132b932abf0d66afafc9a9d3121f0ed962a14294bf0ba7b1d33d7808efa427b5531cd881b5c87ec159bc9557009d9762010a497ad52b57283cde9715b48a3e35a22aec3730a0cb476a59f438684346ce0c14f22d5f1e5826d3f670e9ef60f6dd51a11fd32eed673b9d0a12d8eeb8046b96c51cfc54c21b2c48c4a89273963b8345b01159f53f6b6589333afd871875b930d7a4e2e1f5dfb44157ca004a739b0e98562c83b1d8414220f677f2882ef6ab1039fc5f132d7f55046d0c9545033624338e2ca6bdfcdd9d78306818c6214f524a7d036c80b5506f97fe383c1cae3c73dd2a0c628bff47d13dc7d9f88a3c1bb84ccbcb82fd881c6f5e9aa7516bec86fd6bee49f4db3bbf468922f1ef37c499b011e36173edc0ccb92d13dda668cf88bb99649e606fee23d3d3bc1fcbdfb40c7d4a4a60b89c63e65d02a283137561ccacd0c71cf70c6f039ebd1d29cd58571fa07d74187a7931d3d8b7db3062594b696b0e11a587724440bd77aa01fbe26a031a4c3f16ef3ba7f7544d01e8b7dd0b74f3025fe54cd01be16ee80ab0cd7c56671390f2e9bd62b212cf3ff58da7207846bacf85858130a89a2cb45da85b3ee574e8bb43c6642a3060b6f07228951aeab0fe4f4099b86bf07ec39262acca7319df3d5d057baa794234b89eccf36da5d32e4a5283386a0a271be30f75917ffd9f6d96eb8b50a7f6a0b861c5d12a624f3630a18e3bc94eb58bc835cef0a1b77952df6443cc12f221fb8460f4862f382abe13b409056644ec46fde96e1992e79ec0acdf3066f77bbcd6cf1a24d9b49ce70bd3bc58cd898da801d6b1ab12fd7cecc29894b98d616ccff855116a8985653ca88722dc00aed777dfe1839251be42716824dc0c40b6548319f613faffb2f1900a1f563724b0dcb7aa694110d268e945747d860d4bcaba7837342e3d7f207547ba8c093e8d2a1a5e3e098d19343de5fa773642cfb1a2e49f98df7e13254787cc35b2d689db16e551917c0db1034b175d1f4647c35c4cfe8a871cc7983b052050be9d24ed6e6f70d9d4b7cdebc9ba7a761b8c5f2207761a6fe9db5d4ac975dbe398ae05ed180f028037f2d9684dd3b28135e150db8a8adc6c34d0cca2cb95e6babf8702f26062d0ff0f88fc915caee5597a006e211c61f6fa4ca685e79655af85cb3489f94cd9836af4b80cd20ed23ed8f3f4107814407715b471354c5274595963b00482f3723ca88f4eee346c78bd29d65899163d848c9844991e976ff817120a13ce40aab11632b6fdd9d00acb82a5ac7769a0a7ed5d30ae077bf393f5de5b12114e4d1a32c7297bc5e14b673c78cc675b097d56f7a35c3206b1584996972153e2446465492528e0565718252139e1cf500f05a0ca529d58f5b91fa9bb2822c21248a7a8a92d0a7be5f4d249087176c7c23e27d72bd232fca3f7b36970daf2ccd64be4a798a6c30a068fbae324b4c158715949b37c3942f0eee35b90d2fe9d322420917532f6dceaf8633f4f9618f099ece4186e1adc1323b827c984ba54c887b462e169867c2e063fb60b7906434ef362200559e4d02413667dde0c6111750995824c316305f2ddfa3035ee09fdbc28c7f3c095f5a4382ce033746394a37b4d8a61ae8c7270d3863df7382a4786d7bed9543538166dfd01d122a384a7a3de7958c0272a35856f175fa29ee100d2a0f3a6dacbbe8702cf7e8d307ac0cc7921539a371a1c2e7f834db5a903069c07ff562fee851ac9cc3f2f045146db26b13401258733c67d820d06aa068b789300ac90481f84725311544e9a2363f2ce502c02c100bb41e18a103c79bd2bf14f6b52290fa60d978c284f927829b5027ae0ea842efb3450a8ddcabf0eaff6a6a8300de389e78cee73bd8de9a2809e346ff6c79dceca4277eee4b0dae1a3e1740f306044d6e67a5783e665f9637a8f8154f9ebecf95f48146c750826fccebbb1bef247666a710cd71dcf3ac3aa9d0bccb4c4ad432bba642366e4a3b12981901358ee1d7babbb7e10737cbd8a1c159d8dd9dd521c48d2911ebb8162b51ea32185c37097c299c0e477914b49d04ca00000000a3660f829ce4dfb2f821e6cb19ce37df64f79eca0649ea8c6b41c6c5d08fb1dae021314609946310c833d08d46c026ddc5dbb7ac62f1123be2004729daa8156ee12bdde9529c7498c8d1a3fd59aa07b9ab7870c4e57b2f54dcc26edd206b28870cf346d741b46bcb508a5f9805ed63c6cb03a9334abfea33626b0681e59b1cecb02202c3190260b8e2963ee84d9a6b5e6be99cbf6a17e4a11e154c2a50d625ef1fd4690cb8e030e46e07c891e6db43626525d464302c44dbf65f71a485f9ea05c347b870bf63fddeaaa2336d9eca1d4c56e8a2734287f0f8a185bd8e3165a681175d1ee9d24f48c9182fd40179ea3d128c0b43c4e2c85eeefa4c932fcaf9297488a3d44e602477d94193410728a0ef0f6730e64b8cfb3e2235c6241d1252196f943d9eb9b2ce70f8c5cf21394875081f56ceb6749a8bfa43e0e545fbc6903b63c55b67ba1e064a682d58fb7117eab5407d1c998aa53a0ca190b0a4aaaa657299cee41be166a7622789b81cff0e892ba87c6ff22f29ed512ebe40cf7306b7597607de5c1c6fb2980a03cc0c6f396ecc27b6b5a3fb0a3f3375fccc397527797f6d1e98f9a873882f85a4e5b11eea65cddb12b0cec9e531a3b5de958963e20d8a520aa71588aa3ab92186e64a710ef07debe3fce6313ea69fd5bd45ca3d50e5c98ac632d5479bc0763b05509ffca67158ad8665cb858e4a8eae29ae667cfa8e39dbd15ca03846298faf7169187feae6e84deaee4ae51cd2016a867b3d11c4e6ec3ae39aeb8c8ec36a885e475f3e1e47e1fa464ef9569aba053cd066907a112612de411a5be0868543116f32d0781323c744dfeef87601981afe063122bac14b90590000000001000000c2767cbe79e245d791e8fb222b5134ce684f7dec8fc0630cc9aeb5fbc38dfd19628ece15342c941e52be8abf0d82ed7b0b4bf5e6184edcae53949ef5987fd7fc479fc9921f2f332ae68f5dde23a3dd0b4713c3d18913edd9ce59870f7d50fdf33f3d2e8e5045d35555b4db5f48946e1b8d8d682f0c2bdd2d0de6bfff349e5e826cfb2d18d7bb43347362f13f5e80619451527bf0d3cc617881ef718466bf2efcb5f1404c573df09e00a5c0d1648b04860ee20d9e79d4ebac94a35e0a4919b1ab0db9e9dbdce1324223850e2e137ebb0c0e1cd690a3c5c9f8576538cba5e3831e6ba56809644e389ee984df3ea8e4743d5d03619b713c984fe8b43c589b78715b9147384b5bb15af8898cd82b31aca722cbe7938f119251d9142f2661f09b49f99d8988c66198dfb9db7f225086bed1deffa78995a56f905a7ab978a9c557ea1ad306bc0cd1cd8e5acaec1e4430a42068adec4a73f891c8010f0271c38685ca66c36313d15ab5bb6948c089b1fccf7fbb340eb03446a9bcda34b2d14a11e09f71e799fda19dd85293e2b0e2ca3e68145b4ea5705592562962cc6c0b65c88d06067903716656a0a7e18ffb46162d6a0c1dac8b6c59541c8ef6bfcfa87ad59cb0e8ef6ef1d7f739c0a56cf975f9cca9ee89bac15cae197d02fc72505d23ebc6153491adccd22262979d2909fb8abd25683894e5a776824b81598a833e339a582b9ce3f8d7ce59fc3147eb3e92751867ee9c3506692b25b2d7f38d97280e85c01bf6d71a602d039aec747620d33660a9d5c9cf4010d01f9cb86db4704872307942df56f04cf6c17e57612635e769218cc91da9e2de29aac4563d695a6ebe249c14ba5332b54150a291bec28417febc4c3efae9e14a0323e561dbc80e98bf71deccff5babbcdc8015ef7a86a52781a67a4915645cfb18379084c58110f1294b2e08a6994d1a3dd4fb79437a75cdb05f36a7b3fdb449c0cea5682d37e5b0217676ff7a383a19d48860476b23ccb66779093b0f6b5b6a1ff0cef503dadf5b67382b2a501d0c13d89eec496374f43fcfa751864330479e0d1f7aa0883c2aafbb5c21b06cbea3c8b515fb1f6d061e269c3de372dc48f0b1c0a935de648a0fc4a1a32ce6aaa8432240bbc977a0ece5fd60d92ba49f1443bfc83668e8251260a5b275098e4a072d44726b91d850bd9c2485cacbf2b33be73785421c2fb259b0c1c0955339713f75ca72b9bc56a7167d8a942015385eb4f1bc3e07b23a71779d043a4f420b0fd9e889d398c955f13542c811683636b71a2fb178e951e37ed5519146c5d61e697d1148458c2f224dc6911363edd1b4d30c5cb12d0e2fb035adc33656615c05266f32c2faf5144e24086c97816c87569feb1fd41775263999ff057d9832b872506aba01db7482251f65a74c66cc01b83056970f843ef58df0d89c44f9265d5bfb50c287f330795b30848341dd26683e5df82bfc1cd1a3f2df3dae99fc38edcc614b39c8a8fa6ada4b5dff08914a92b6a16b05f13bbdbdc5e9f14808e827ee5f364ce115e12bce05122f0dea62d8dd41222fafa3c6bdecea63d3fbd0bfdef667d6ac12b6918273631bf0ec25da2783f06f77a9a0ef2490afe43f3e8b0f553c0c1078141ec0d8f426b1924bd464e4240cda50e9b8a97050360a617eb4f88baa158da8672572f641b20ab3bcbab3d38ff3c84c5c3bf309e26c8ba735503700028c0806c29e02d0a0ed73b9c5c2f2a39f57ee08b935e6e056f01733a12b08603987b14aa7fc542c65a0c03e278723127bced6ac65d2386cf847a73057d19795d5a7517e71d5e480b7380866a64da32fcd1158af9a82559898a7931535a4b75326e2769711ff857d180f16acf316130574fd37bdb658b877f06db42ab96641bc75e3d4ad7fdd9028072139dd3019b03aad32907debef345bcc57423ddfc94683884a00c5f864b8c2dd5af081fa970da251d3afc65dd360c661d8ee2ab58dc9060e2d98b39ae95bb89c319cc93c9e653bf9db205338dc5528c11a391137fe496d726f1407945b243a49a1f3a786047fc47d5e5074e0ec678f26f30cba747d50070c00323d16cff4b06089830931ca704d386140f9c201a5b50a116410be001135aeaf30d7918ccdaf35482659fbb2933e97f1a2e0fc20e6a610e37511d06d4cf931e54ce8f5ab5f688e460e3943bbbe6949a8b4ae309ee31330ece6cb9dfcae0035f3808b7295776ae7bdafffadb6113faac5cd966c2875abb7b20f1b298b48cb78c467f1be92cd3a9d0fd35b7720334274a53a6cbd041b85b6f8f9d622293f0e95a8835204de1faeb7fcdcc57fbdf0afc2e6422bc114355cb5bc979f1bf6d0fb6eb31ee98e06cdcaa1ac36ed3246d85cbdaf999da5d6a7187e8622e6d224c5549a2f2802691a08242ed44a47fc9ad627af949ec3ab5b191025ac75ee7746e2762b530a622a716edbf341e4f9e04fa5d3f77c78dcde06f3845f45c8c1954120ac5949da541882d99adbbca4b0e422e4364289ff1a903bfd1ee63faaa40ef43d3e54249909066e1727591a9632cc8440dcedf931a823e9b542d51aee43897bbbc1f652ae774c326e8400a3a6ab8d90a04e5724fb39c05875ce5afff0502bb6164bc65c107593c155da4b77f136a34c9ec39a4e70cdc4f7fec68245402b2c0fb508eac623ab41a184d3bebe5e9f24c6590c1fee571ed55a76b8554b12116a36101691397d532b46924e6ccb688ab52ffc44f8a670d542477ebd3756d6ef5373024d3f915c187a35feaf39b76453ff835f73862bad13f19e76d47c70122911431e5f71b05a9728631df66b162e708584e83349db1a68368a37cfb4e16c9987a956b3018f2f12c639bf90b5fb0f0560fa7c19887a9d12316dab9bb515cddbae2e9056a556919476b47546c0dae631a88eb8bb9da49879f56efd3d1b65d50bb01c8b4ddc20374877189915cc5824200dfac8f422364b7178f2e7799665b464ac9ec54ffd87fc8dc68e08ab178059ec02bff4ae3c683d0c96796765bdc188c1a4ef46cfa9e6376678245f8d0c907e83e6eb78ffb19e75534925b5b5bfa489fb9cd2c68f00a079c9b34dc45e76044bbfc87c75bbdc5ed0ea7ca0f249007be79116fefa74085f982f670f821ccd0bb14e1086b677f379fd1a1c96bbb4a7338e867d3f91f41b0a7eb2f1104c2ed1593691e601f2e045b3db1cac5dc0d3b302b54967558057e767c4a96f0355d97beace9fe05f0513629b2dd4e86e523d16d7e2e129264e1749b07c062d3a92d96fff5cc976855540eb441a3cef8fc59bf236c85e778b04e30fa807c3ea634af17f005fb55b55f082ca54fc154e6b9df95b951ab9612da7223efc8b63f4528dc3353a15988790d507d9fda18dc8c4adefebc12567e040fd49d2d571437bada1c08054f45545e5cb33c8db8e5b4f2d6735a7fad407fea2ac6e516016c186b7a9b5586650178b3c201eb4fcda3a22291c1f5d66557675dfc73b17edd463abd17a3ec0f1b28adeb4c294c37900002665d504610d37de5dc68fa03e16243ebca169797205d2b24cd64cb1e37328530d68c9a279e36aa0c7f718831ac30607633eab2c9e1b8d6b78649a78fd573d07f0edc18d2f52da2213e2ad44a4bfb3a80ae71d8cf57a2ae2658999d542f7c46da5a30f0f4a82296d0c95e4c6f046db42a00d8631b120a64ee260bf4dbf29103d4e2233fed2ec9ae65fb109f212f967c34e0efb52f56a9a7ab4de472f9cdb0fbcd19fed42d80216c4c717e77a5e6a9118423e0a6dc9d2f3cef598fb9bed6b4e66b279ebbc265560a471d132a854ff230673e843338dcb1ae202c797cfa59dd18eb46e313f1b0dcafdb6518c1da6b08aa1c92bd433a0b65358356a8d03a454f96add1237380049b2567a24836b7bfbdfa58186f2e295e0911dcad6c5413fb36a6e637156291efc016e8513664d515d3ddba1d2c63fa6c5a3331c3cb2f5e2eaad83a75588aca785ada46973d8a2d89686a416720a8f98e1a1eaa8c95aa0bea1dad03ec69bc4bf8300a821f67db4e0c1aab57ef1d1e06880130f6ffe76297acc62879f60e03933666a0da462b7a6b584d28041a3fbafe9a08b7a4664c46b8d40ce4f31a14b122ad74cc4a003f591e019e23cf764795d4235cc8d491c58d3be78a781a708d9fda492306a5afa7c0a43f52f39cafc6a6abc850bbbfa6254fdfd5115727210e19ec8a8857c10a9e9d5cb3001c6e04132667a30a6528e8b59661b483e5365761ac0f5c61e339833b35fd8159875177ed2b78df49ef83b45584c4609562ed2e8bb9add69e88fc0774517a15575f0250d26ae8f6f138daba5311b492c986005bef123a6fc3c1912e378cae2b64e58542293489d5a0f8b582b089c1b05f3ad0aec776b9dcfc0feb1386a98b7e2e09671a73f0eca92364d7f6da861280815b71e48934bc3d321da07878290ec81d3c5c64b8d7f55c1d2e2713edbb5fef28bc36d02302b01c4c29e5df4a9692b41e8d9364e2e408c55b9b14d3ad93889a48787df0673c3df6ba3d9222ee348199aba478e2d398b1e4ae012ca19473b3454327e5bfefb3c56576b6a6c035466f7641464806e63d7086223395a58d886b0dbedd365ce840a6990f56d697605b7d0ac60809270e4e392e89413cc94cea1cb277c4aee023bf90ded9910c96eeead4c6a10ca17151c4966f84bea565746eab573e4295e564d41bc5a6cc9df38c3d7cbd4cd618bd9f292daf95472839fe71c1edc202b6b8b5b939250934ab0dc978397fbaa7533fcce0c4b2eed8ad47779aa4b21504307c7d15e0bcb01bb60e5bafabe66e4b689e4873a1067063e17ba7d647a9a047b1b4ef7350402653b564ae1b34b8597a2357891c90ca2af6b68b794680a0511279fd213eec48dfddba7cbeeb9f9335a0679b1e6db44f27b12d898575d157c2159a86f676df18858857582bffdc006d4732257ade5dde2d1b2cf316fe2a7c5b44505cc808eae5427c43d50e9b99f9317e437df2bc640351e3e8ac249c42f782d07886b6d8875c253ee0e489f1196fa604747586df87e18a893721e6cecfe61dd82daf9b3e4f1eb745c93402c121bb639c56b91bdc77262acfa55389ede1f092733d8a69ae759f82ceda537ffbf32b65138aa3e43e8883048eccf0929de8dee297c5eee97ac7633beae01198e1b00c11276502e7660cd1f59ac619200042656c6e9757b082d374c80182290845f1bc8f2589eaf96948f148ebe675ee7fdb83e32a18eade32f99cca160a4d3504c4bea9c82cfdfe1dd80fbda7c484f2c17c20eea00", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x49, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x4007, 0x0, 0x0, 0x6, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 136.906011ms ago: executing program 3 (id=843): r0 = semget(0x3, 0x1, 0x281) semop(r0, &(0x7f0000000040)=[{0x0, 0xb, 0x1000}], 0x1) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f00000002c0)=[{0x0, 0x7, 0x1800}, {0x0, 0xc, 0x1000}], 0x2) 96.83409ms ago: executing program 5 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 90.332116ms ago: executing program 1 (id=845): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8000) 0s ago: executing program 3 (id=846): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r1, 0x80003a}, &(0x7f00000001c0)=0x8) kernel console output (not intermixed with test programs): ated IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.957472][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.995346][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.014798][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.029015][ T1165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.044806][ T1165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.093268][ T1165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.117635][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.189553][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.198919][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.308398][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.318291][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.318676][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.353185][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.364124][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.509595][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.531103][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.534468][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.549523][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.766694][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.800161][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.909709][ T5953] loop1: detected capacity change from 0 to 4096 [ 80.930690][ T5953] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 81.109090][ T5957] loop4: detected capacity change from 0 to 2048 [ 81.144668][ T5957] ======================================================= [ 81.144668][ T5957] WARNING: The mand mount option has been deprecated and [ 81.144668][ T5957] and is ignored by this kernel. Remove the mand [ 81.144668][ T5957] option from the mount to silence this warning. [ 81.144668][ T5957] ======================================================= [ 81.225675][ T5953] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 81.257433][ T5957] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 81.324789][ T5957] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.385777][ T5966] loop3: detected capacity change from 0 to 1024 [ 81.499788][ T5966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.629072][ T5841] Bluetooth: hci1: command tx timeout [ 81.693853][ T30] audit: type=1326 audit(1762858685.464:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.13" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb4058f6c9 code=0x0 [ 81.727139][ T5841] Bluetooth: hci2: command tx timeout [ 81.729992][ T5830] Bluetooth: hci4: command tx timeout [ 81.732594][ T5841] Bluetooth: hci3: command tx timeout [ 81.739064][ T5830] Bluetooth: hci0: command tx timeout [ 81.934250][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.069980][ T5985] loop4: detected capacity change from 0 to 64 [ 82.231155][ T30] audit: type=1800 audit(1762858686.064:3): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 82.276061][ T5988] loop3: detected capacity change from 0 to 2048 [ 82.348288][ T5988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.555161][ T5997] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 82.859879][ T6006] warning: `syz.2.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.714733][ T6033] loop2: detected capacity change from 0 to 512 [ 83.721314][ T6037] loop4: detected capacity change from 0 to 64 [ 83.798370][ T6033] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 83.858998][ T6033] EXT4-fs (loop2): invalid journal inode [ 83.887321][ T6033] EXT4-fs (loop2): can't get journal size [ 83.907341][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 83.920714][ T6033] EXT4-fs (loop2): 1 truncate cleaned up [ 83.978401][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.206042][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.499121][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.596547][ T5941] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 84.675272][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 84.789416][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.821354][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 84.851464][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.873653][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 84.875928][ T9] usb 2-1: config 0 descriptor?? [ 84.915149][ T9] cp210x 2-1:0.0: cp210x converter detected [ 84.919188][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 84.946996][ T6073] loop4: detected capacity change from 0 to 16 [ 84.989512][ T5941] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 85.002650][ T6073] erofs (device loop4): mounted with root inode @ nid 36. [ 85.016290][ T5941] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 85.030431][ T5941] usb 4-1: Manufacturer: syz [ 85.062378][ T5941] usb 4-1: config 0 descriptor?? [ 85.358117][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 85.382495][ T6063] loop3: detected capacity change from 0 to 2048 [ 85.411291][ T6063] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.420674][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 85.507773][ T6063] syz.3.52: attempt to access beyond end of device [ 85.507773][ T6063] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 85.510323][ T6078] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.539439][ T6072] loop0: detected capacity change from 0 to 32768 [ 85.659008][ T5935] usb 2-1: USB disconnect, device number 2 [ 85.687769][ T6072] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 85.745476][ T6072] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.764139][ T5935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 85.781396][ T5941] rc_core: IR keymap rc-hauppauge not found [ 85.792144][ T5941] Registered IR keymap rc-empty [ 85.800972][ T5935] cp210x 2-1:0.0: device disconnected [ 85.807989][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 85.847974][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 85.890158][ T5941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 85.917898][ T6072] XFS (loop0): Ending clean mount [ 85.942818][ T6072] XFS (loop0): Quotacheck needed: Please wait. [ 85.946899][ T5941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 86.037704][ T6072] XFS (loop0): Quotacheck: Done. [ 86.038153][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 86.107503][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 86.139172][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 86.168732][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 86.170230][ T5821] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.196880][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 86.217186][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 86.257828][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 86.298459][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 86.327625][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 86.362640][ T5941] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 86.409218][ T5941] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 86.436960][ T5941] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 86.467433][ T5941] usb 4-1: USB disconnect, device number 2 [ 86.908713][ T24] cfg80211: failed to load regulatory.db [ 87.092901][ T6103] loop1: detected capacity change from 0 to 32768 [ 87.206219][ T6089] loop2: detected capacity change from 0 to 65536 [ 87.295371][ T6089] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 87.381357][ T6089] XFS (loop2): Ending clean mount [ 87.391678][ T6105] loop0: detected capacity change from 0 to 32768 [ 87.476481][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.623091][ T5836] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 87.656724][ T5941] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.660742][ T9] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 87.684224][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.706168][ T9] usb 4-1: Product: syz [ 87.718854][ T9] usb 4-1: Manufacturer: syz [ 87.735272][ T9] usb 4-1: SerialNumber: syz [ 87.766890][ T9] usb 4-1: config 0 descriptor?? [ 87.788580][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 87.826454][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 87.848936][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.854359][ T5941] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.876662][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 87.886666][ T5890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.886989][ T5941] usb 5-1: config 179 has no interface number 0 [ 87.908684][ T9] usb 4-1: media controller created [ 87.916536][ T5941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 87.921045][ T6123] loop2: detected capacity change from 0 to 256 [ 87.947579][ T5941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 87.951121][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.966495][ T5941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.969077][ T6123] exfat: Deprecated parameter 'utf8' [ 87.984200][ T6123] exfat: Deprecated parameter 'namecase' [ 88.000553][ T6123] exfat: Deprecated parameter 'namecase' [ 88.008253][ T5941] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 88.010807][ T6123] exfat: Deprecated parameter 'utf8' [ 88.036362][ T5941] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 88.056621][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 88.069995][ T5890] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 88.076531][ T5941] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 88.079599][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.096888][ T6123] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 88.117558][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.150452][ T6119] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 88.150846][ T5890] pvrusb2: Hardware description: Terratec Grabster AV400 [ 88.170911][ T9] DVB: Unable to find symbol mt352_attach() [ 88.186745][ T5890] pvrusb2: ********** [ 88.196952][ T5890] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 88.249613][ T5890] pvrusb2: Important functionality might not be entirely working. [ 88.300288][ T5890] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 88.337841][ T9] DVB: Unable to find symbol nxt6000_attach() [ 88.365938][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 88.376811][ T5890] pvrusb2: ********** [ 88.418702][ T2343] pvrusb2: Invalid write control endpoint [ 88.435557][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 88.460024][ T6127] loop2: detected capacity change from 0 to 256 [ 88.497090][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 88.504178][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 88.559066][ T5935] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input7 [ 88.592273][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 88.619538][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 88.627010][ T6127] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 88.704590][ T9] usb 4-1: USB disconnect, device number 3 [ 88.789504][ T2343] pvrusb2: Invalid write control endpoint [ 88.795522][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 88.806049][ T30] audit: type=1800 audit(1762858692.634:4): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.72" name="file2" dev="loop2" ino=1048605 res=0 errno=0 [ 88.828523][ T6131] exFAT-fs (loop2): error, data size is invalid(150994954) [ 88.835923][ T6131] exFAT-fs (loop2): Filesystem has been set read-only [ 88.873034][ T5890] usb 5-1: USB disconnect, device number 2 [ 88.873042][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 88.879073][ T5910] usb 2-1: USB disconnect, device number 3 [ 88.888154][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 88.903020][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 88.911000][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 88.921071][ T2343] pvrusb2: Device being rendered inoperable [ 88.933414][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 88.945548][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 88.985019][ T2343] pvrusb2: Attached sub-driver cx25840 [ 88.993949][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 89.036852][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 89.143851][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 89.250003][ T6141] loop2: detected capacity change from 0 to 2048 [ 89.281546][ T6141] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.374410][ T6141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.451036][ T6141] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.75: bg 0: block 234: padding at end of block bitmap is not set [ 89.472717][ T6141] EXT4-fs (loop2): Remounting filesystem read-only [ 89.566558][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.661094][ T6155] loop0: detected capacity change from 0 to 512 [ 89.709154][ T6155] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.787579][ T6155] EXT4-fs (loop0): filesystem is read-only [ 89.835156][ T6155] EXT4-fs (loop0): filesystem is read-only [ 89.871815][ T6155] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.940185][ T6155] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.81: bad orphan inode 16 [ 90.006954][ T6155] ext4_test_bit(bit=15, block=3) = 0 [ 90.013960][ T6155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.128007][ T6169] mmap: syz.4.88 (6169) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.161709][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.044088][ T6167] loop2: detected capacity change from 0 to 32768 [ 91.153443][ T6167] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.286542][ T6167] XFS (loop2): Ending clean mount [ 91.307438][ T6167] XFS (loop2): Quotacheck needed: Please wait. [ 91.422533][ T6167] XFS (loop2): Quotacheck: Done. [ 91.617259][ T5836] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.635733][ T5910] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.722223][ C1] hrtimer: interrupt took 13589 ns [ 91.829539][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 91.864408][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 91.902321][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.956914][ T5910] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 91.984661][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.996602][ T5910] usb 5-1: Product: syz [ 91.998477][ T6222] loop0: detected capacity change from 0 to 2048 [ 92.000792][ T5910] usb 5-1: Manufacturer: syz [ 92.033487][ T5910] usb 5-1: SerialNumber: syz [ 92.053139][ T5910] usb 5-1: config 0 descriptor?? [ 92.073114][ T5910] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.081082][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'. [ 92.091968][ T5910] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 92.102375][ T6222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.207527][ T6228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.214998][ T6228] IPv6: NLM_F_CREATE should be set when creating new route [ 92.222350][ T6228] IPv6: NLM_F_CREATE should be set when creating new route [ 92.229627][ T6228] IPv6: NLM_F_CREATE should be set when creating new route [ 92.255832][ T6228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.264160][ T6228] Zero length message leads to an empty skb [ 92.383541][ T6234] loop0: detected capacity change from 0 to 256 [ 92.399746][ T6234] exfat: Deprecated parameter 'utf8' [ 92.405292][ T6234] exfat: Deprecated parameter 'utf8' [ 92.493293][ T6234] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 92.700411][ T5910] em28xx 5-1:0.0: chip ID is em2870 [ 92.967127][ T5910] usb 5-1: USB disconnect, device number 3 [ 92.984792][ T5910] em28xx 5-1:0.0: Disconnecting em28xx [ 93.024995][ T5910] em28xx 5-1:0.0: Freeing device [ 93.456170][ T6257] syz.0.124 (6257) used greatest stack depth: 16056 bytes left [ 94.573139][ T6277] loop4: detected capacity change from 0 to 32768 [ 94.650118][ T6277] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.761151][ T6308] dvmrp6: entered allmulticast mode [ 94.808921][ T6277] XFS (loop4): Ending clean mount [ 94.993816][ T5822] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.149651][ T6288] loop2: detected capacity change from 0 to 32768 [ 95.186747][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.189331][ T6288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.138 (6288) [ 95.348915][ T6288] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.365798][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 95.380478][ T6288] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 95.412179][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 95.436478][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.470518][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.496496][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 95.500932][ T6335] loop4: detected capacity change from 0 to 128 [ 95.525179][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 95.546800][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.579739][ T6335] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 95.589171][ T24] usb 1-1: config 0 descriptor?? [ 95.630299][ T6335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.691928][ T6288] BTRFS info (device loop2): enabling ssd optimizations [ 95.736871][ T6288] BTRFS info (device loop2): turning on async discard [ 95.746542][ T6288] BTRFS info (device loop2): enabling free space tree [ 95.818613][ T6314] loop0: detected capacity change from 0 to 8 [ 96.134127][ T24] redragon 0003:0C45:760B.0001: unknown main item tag 0x7 [ 96.156468][ T24] redragon 0003:0C45:760B.0001: unknown main item tag 0x3 [ 96.163754][ T24] redragon 0003:0C45:760B.0001: unknown main item tag 0x6 [ 96.189969][ T24] redragon 0003:0C45:760B.0001: reserved main item tag 0xd [ 96.199194][ T24] redragon 0003:0C45:760B.0001: unknown main item tag 0x4 [ 96.207518][ T24] redragon 0003:0C45:760B.0001: unknown main item tag 0x1 [ 96.225397][ T24] redragon 0003:0C45:760B.0001: item fetching failed at offset 74/133 [ 96.248900][ T24] redragon 0003:0C45:760B.0001: probe with driver redragon failed with error -22 [ 96.303115][ T5836] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.370542][ T5941] usb 1-1: USB disconnect, device number 2 [ 96.812381][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 96.859275][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 97.033702][ T6384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.173'. [ 97.066460][ T6384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.173'. [ 97.092351][ T6384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.173'. [ 98.086662][ T6421] loop2: detected capacity change from 0 to 128 [ 98.168615][ T6421] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 98.208300][ T6421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.235057][ T6387] loop3: detected capacity change from 0 to 40427 [ 98.246765][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.322751][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'. [ 98.327455][ T6387] F2FS-fs (loop3): build fault injection rate: 14 [ 98.356007][ T6387] F2FS-fs (loop3): build fault injection type: 0x0 [ 98.408337][ T6387] F2FS-fs (loop3): invalid crc value [ 98.461305][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.476081][ T5836] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 98.493150][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 98.527124][ T5836] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 98.539079][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.592213][ T9] usb 5-1: config 0 descriptor?? [ 98.617822][ T6437] loop1: detected capacity change from 0 to 1764 [ 98.639412][ T6437] iso9660: Unknown parameter 'de' [ 98.790994][ T6387] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 98.851771][ T6387] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.078628][ T5832] syz-executor: attempt to access beyond end of device [ 99.078628][ T5832] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.095933][ T9] uclogic 0003:5543:0004.0002: hidraw0: USB HID v0.02 Device [HID 5543:0004] on usb-dummy_hcd.4-1/input0 [ 99.151508][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 99.151535][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.151559][ T5832] Call Trace: [ 99.151567][ T5832] [ 99.151577][ T5832] dump_stack_lvl+0x189/0x250 [ 99.151612][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.151635][ T5832] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 99.151659][ T5832] ? __pfx_queue_work_on+0x10/0x10 [ 99.151680][ T5832] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 99.151703][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.151737][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 99.151768][ T5832] f2fs_write_end_io+0x886/0xb60 [ 99.151801][ T5832] __submit_merged_bio+0x256/0x6a0 [ 99.151831][ T5832] __submit_merged_write_cond+0x255/0x530 [ 99.151861][ T5832] f2fs_write_data_pages+0x261d/0x3000 [ 99.151907][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 99.151983][ T5832] ? __lock_acquire+0xab9/0xd20 [ 99.152011][ T5832] ? do_raw_spin_lock+0x121/0x290 [ 99.152037][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 99.152054][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 99.152073][ T5832] do_writepages+0x32e/0x550 [ 99.152105][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 99.152125][ T5832] filemap_fdatawrite+0x199/0x240 [ 99.152149][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 99.152211][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 99.152232][ T5832] f2fs_sync_dirty_inodes+0x30f/0x830 [ 99.152263][ T5832] f2fs_write_checkpoint+0x93e/0x2440 [ 99.152282][ T5832] ? __lock_acquire+0xab9/0xd20 [ 99.152326][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 99.152391][ T5832] kill_f2fs_super+0x2cc/0x6d0 [ 99.152415][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 99.152448][ T5832] ? shrinker_free+0x2ce/0x3e0 [ 99.152471][ T5832] deactivate_locked_super+0xbc/0x130 [ 99.152492][ T5832] cleanup_mnt+0x425/0x4c0 [ 99.152510][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.152537][ T5832] task_work_run+0x1d4/0x260 [ 99.152567][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 99.152589][ T5832] ? exit_to_user_mode_loop+0x55/0x4f0 [ 99.152613][ T5832] exit_to_user_mode_loop+0xff/0x4f0 [ 99.152633][ T5832] ? rcu_is_watching+0x15/0xb0 [ 99.152661][ T5832] do_syscall_64+0x2e9/0xfa0 [ 99.152677][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.152693][ T5832] ? clear_bhb_loop+0x60/0xb0 [ 99.152714][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.152729][ T5832] RIP: 0033:0x7f0cd4d909f7 [ 99.152750][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 99.152764][ T5832] RSP: 002b:00007ffd0631f018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.152781][ T5832] RAX: 0000000000000000 RBX: 00007f0cd4e11d7d RCX: 00007f0cd4d909f7 [ 99.152802][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0631f0d0 [ 99.152812][ T5832] RBP: 00007ffd0631f0d0 R08: 0000000000000000 R09: 0000000000000000 [ 99.152823][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd06320160 [ 99.152834][ T5832] R13: 00007f0cd4e11d7d R14: 0000000000018293 R15: 00007ffd063201a0 [ 99.152862][ T5832] [ 99.152873][ T5832] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 99.494170][ T9] usb 5-1: USB disconnect, device number 4 [ 99.535881][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.762710][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.008090][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.020697][ T5935] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.044948][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.054986][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.064623][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.083221][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.092214][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.155796][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.188828][ T5935] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 100.199048][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.212742][ T5935] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.226582][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.234783][ T5935] usb 2-1: Product: syz [ 100.260609][ T5935] usb 2-1: Manufacturer: syz [ 100.265254][ T5935] usb 2-1: SerialNumber: syz [ 100.298608][ T5935] usb 2-1: config 0 descriptor?? [ 100.313918][ T5935] usb 2-1: selecting invalid altsetting 0 [ 100.535262][ T5935] usb 2-1: USB disconnect, device number 4 [ 100.772312][ T6479] Illegal XDP return value 4294967294 on prog (id 29) dev N/A, expect packet loss! [ 100.885453][ T62] bridge_slave_1: left allmulticast mode [ 100.911825][ T62] bridge_slave_1: left promiscuous mode [ 100.938853][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.020858][ T62] bridge_slave_0: left allmulticast mode [ 101.041431][ T62] bridge_slave_0: left promiscuous mode [ 101.071651][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.517527][ T6481] loop3: detected capacity change from 0 to 32768 [ 101.538352][ T6481] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.200 (6481) [ 101.604860][ T6481] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 101.635259][ T6481] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm [ 101.761570][ T6509] loop0: detected capacity change from 0 to 764 [ 101.800660][ T6481] BTRFS info (device loop3): enabling ssd optimizations [ 101.839583][ T6490] loop1: detected capacity change from 0 to 32768 [ 101.850519][ T6481] BTRFS info (device loop3): turning on async discard [ 101.863708][ T6481] BTRFS info (device loop3): enabling free space tree [ 101.879066][ T6490] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 101.922664][ T6509] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 101.956183][ T6490] XFS (loop1): Ending clean mount [ 101.981855][ T30] audit: type=1800 audit(1762858705.824:5): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.200" name="file1" dev="loop3" ino=263 res=0 errno=0 [ 102.114020][ T5832] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 102.189833][ T5841] Bluetooth: hci4: command tx timeout [ 102.360157][ T5829] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 102.364978][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.478519][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.520150][ T62] bond0 (unregistering): Released all slaves [ 103.003331][ T6539] Bluetooth: MGMT ver 1.23 [ 103.782869][ T6469] chnl_net:caif_netlink_parms(): no params data found [ 104.068012][ T6572] ubi31: attaching mtd0 [ 104.072373][ T6572] ubi31 error: ubi_attach_mtd_dev: bad VID header (7236540) or data offsets (7236604) [ 104.224421][ T62] hsr_slave_0: left promiscuous mode [ 104.259667][ T5841] Bluetooth: hci4: command tx timeout [ 104.304429][ T62] hsr_slave_1: left promiscuous mode [ 104.322086][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.338585][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.372111][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.397379][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.475932][ T62] veth1_macvtap: left promiscuous mode [ 104.492485][ T62] veth0_macvtap: left promiscuous mode [ 104.508517][ T62] veth1_vlan: left promiscuous mode [ 104.515531][ T62] veth0_vlan: left promiscuous mode [ 104.556871][ T6554] loop4: detected capacity change from 0 to 32768 [ 104.585846][ T6554] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.224 (6554) [ 104.609375][ T6589] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 104.620784][ T6589] netlink: 'syz.0.235': attribute type 7 has an invalid length. [ 104.652032][ T6554] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.659030][ T6589] netlink: 'syz.0.235': attribute type 8 has an invalid length. [ 104.677813][ T6554] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 104.717281][ T6589] netlink: 208 bytes leftover after parsing attributes in process `syz.0.235'. [ 104.765634][ T6589] NCSI netlink: No device for ifindex 65584 [ 104.836159][ T6554] BTRFS info (device loop4): enabling ssd optimizations [ 104.876785][ T6554] BTRFS info (device loop4): turning on async discard [ 104.883607][ T6554] BTRFS info (device loop4): enabling free space tree [ 105.089131][ T5822] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.524194][ T6583] loop3: detected capacity change from 0 to 40427 [ 105.542335][ T6583] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 105.589795][ T6583] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 105.844277][ T6583] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 105.853018][ T6632] loop1: detected capacity change from 0 to 256 [ 105.897965][ T6583] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 105.951709][ T6583] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.079328][ T6583] syz.3.232: attempt to access beyond end of device [ 106.079328][ T6583] loop3: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 106.144422][ T5832] syz-executor: attempt to access beyond end of device [ 106.144422][ T5832] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.165628][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 106.165649][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.165658][ T5832] Call Trace: [ 106.165664][ T5832] [ 106.165671][ T5832] dump_stack_lvl+0x189/0x250 [ 106.165700][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.165721][ T5832] ? __pfx_queue_work_on+0x10/0x10 [ 106.165738][ T5832] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 106.165759][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 106.165787][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 106.165815][ T5832] f2fs_write_end_io+0x886/0xb60 [ 106.165845][ T5832] __submit_merged_bio+0x256/0x6a0 [ 106.165873][ T5832] __submit_merged_write_cond+0x255/0x530 [ 106.165899][ T5832] f2fs_write_data_pages+0x261d/0x3000 [ 106.165914][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.165960][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.166039][ T5832] ? __lock_acquire+0xab9/0xd20 [ 106.166071][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.166088][ T5832] do_writepages+0x32e/0x550 [ 106.166120][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 106.166138][ T5832] filemap_fdatawrite+0x199/0x240 [ 106.166161][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 106.166223][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 106.166242][ T5832] f2fs_sync_dirty_inodes+0x30f/0x830 [ 106.166271][ T5832] f2fs_write_checkpoint+0x93e/0x2440 [ 106.166313][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 106.166328][ T5832] ? kasan_record_aux_stack+0xbd/0xd0 [ 106.166399][ T5832] kill_f2fs_super+0x2cc/0x6d0 [ 106.166433][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 106.166466][ T5832] ? shrinker_free+0x2ce/0x3e0 [ 106.166490][ T5832] deactivate_locked_super+0xbc/0x130 [ 106.166513][ T5832] cleanup_mnt+0x425/0x4c0 [ 106.166531][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.166558][ T5832] task_work_run+0x1d4/0x260 [ 106.166581][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 106.166604][ T5832] ? exit_to_user_mode_loop+0x55/0x4f0 [ 106.166630][ T5832] exit_to_user_mode_loop+0xff/0x4f0 [ 106.166652][ T5832] ? rcu_is_watching+0x15/0xb0 [ 106.166680][ T5832] do_syscall_64+0x2e9/0xfa0 [ 106.166699][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.166717][ T5832] ? clear_bhb_loop+0x60/0xb0 [ 106.166738][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.166757][ T5832] RIP: 0033:0x7f0cd4d909f7 [ 106.166773][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 106.166788][ T5832] RSP: 002b:00007ffd0631f018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 106.166807][ T5832] RAX: 0000000000000000 RBX: 00007f0cd4e11d7d RCX: 00007f0cd4d909f7 [ 106.166818][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0631f0d0 [ 106.166828][ T5832] RBP: 00007ffd0631f0d0 R08: 0000000000000000 R09: 0000000000000000 [ 106.166839][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd06320160 [ 106.166850][ T5832] R13: 00007f0cd4e11d7d R14: 0000000000019e6a R15: 00007ffd063201a0 [ 106.166883][ T5832] [ 106.470427][ T5832] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 106.485847][ T5841] Bluetooth: hci4: command tx timeout [ 106.530345][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.615218][ T62] team0 (unregistering): Port device team_slave_1 removed [ 106.678533][ T62] team0 (unregistering): Port device team_slave_0 removed [ 106.686542][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 106.693802][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 106.710981][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 106.732098][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.740608][ T9] usb 2-1: Product: syz [ 106.746260][ T9] usb 2-1: Manufacturer: syz [ 106.785682][ T9] usb 2-1: SerialNumber: syz [ 106.832168][ T9] usb 2-1: config 0 descriptor?? [ 107.275065][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 107.524818][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.251'. [ 107.611496][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.672384][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.677497][ T9] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 107.716796][ T9] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 107.729146][ T6469] bridge_slave_0: entered allmulticast mode [ 107.769452][ T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 107.780461][ T6469] bridge_slave_0: entered promiscuous mode [ 107.806148][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.832347][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.842981][ T9] usb 2-1: USB disconnect, device number 5 [ 107.862328][ T6469] bridge_slave_1: entered allmulticast mode [ 107.889986][ T6469] bridge_slave_1: entered promiscuous mode [ 107.914751][ T6655] loop3: detected capacity change from 0 to 2048 [ 107.980839][ T6662] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.991643][ T6659] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 108.035528][ T6659] syzkaller0: linktype set to 768 [ 108.066197][ T6638] loop0: detected capacity change from 0 to 65536 [ 108.073490][ T6655] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 108.101182][ T6655] Remounting filesystem read-only [ 108.129189][ T6638] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 108.163145][ T6638] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 108.176582][ T5832] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 108.224903][ T6469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.258309][ T6638] XFS (loop0): Ending clean mount [ 108.319976][ T6469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.364443][ T6638] XFS (loop0): Quotacheck needed: Please wait. [ 108.394986][ T6674] input: syz1 as /devices/virtual/input/input11 [ 108.409950][ T6638] XFS (loop0): Quotacheck: Done. [ 108.496469][ T5841] Bluetooth: hci4: command tx timeout [ 108.621126][ T5821] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 108.752649][ T6469] team0: Port device team_slave_0 added [ 108.759714][ T6683] loop1: detected capacity change from 0 to 2048 [ 108.799044][ T6469] team0: Port device team_slave_1 added [ 108.835074][ T6683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.108759][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.122353][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.137558][ T6697] loop4: detected capacity change from 0 to 256 [ 109.153126][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.214970][ T6697] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 109.254648][ T6469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.255055][ T6699] i2c i2c-0: Invalid block write size 252 [ 109.280015][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.292378][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.396461][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.648805][ T6709] process 'syz.0.259' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 109.683413][ T6469] hsr_slave_0: entered promiscuous mode [ 109.712925][ T6469] hsr_slave_1: entered promiscuous mode [ 109.730280][ T6469] debugfs: 'hsr0' already exists in 'hsr' [ 109.736050][ T6469] Cannot create hsr debugfs directory [ 109.755314][ T6711] loop3: detected capacity change from 0 to 512 [ 109.813842][ T6711] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.269: inode has both inline data and extents flags [ 109.846199][ T6711] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.269: couldn't read orphan inode 15 (err -117) [ 109.871395][ T6711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.059246][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.155233][ T6720] loop0: detected capacity change from 0 to 4096 [ 110.530680][ T6736] loop0: detected capacity change from 0 to 512 [ 110.592590][ T6736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.683290][ T6716] loop4: detected capacity change from 0 to 32768 [ 110.703958][ T6736] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.750775][ T6716] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.776490][ T5940] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.812779][ T6469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.849653][ T6469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.873626][ T6469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.892841][ T6469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.947319][ T5940] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 111.031793][ T5940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.061699][ T6735] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.276: bg 0: bad block bitmap checksum [ 111.115780][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.121226][ T6716] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 111.134307][ T5940] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.140165][ T6735] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Filesystem failed CRC [ 111.172166][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.197491][ T6716] XFS (loop4): Starting recovery (logdev: internal) [ 111.213677][ T6469] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.215635][ T5940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.263396][ T6716] XFS (loop4): Ending recovery (logdev: internal) [ 111.270323][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.276505][ T5940] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.277534][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.342384][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.344172][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.384387][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.391612][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.393800][ T5940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.475094][ T5940] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.527281][ T6716] XFS (loop4): User initiated shutdown received. [ 111.539013][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.561145][ T6716] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 111.604405][ T5940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.625130][ T5940] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.636812][ T6716] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 111.676624][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.693572][ T5940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.731736][ T5940] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.757872][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.768404][ T5940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.768511][ T5822] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.786511][ T5940] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.817268][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.828589][ T5940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.840128][ T5940] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.861435][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.928767][ T5940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.959133][ T5940] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.997374][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.006476][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 112.020573][ T5940] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 112.050183][ T5940] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 112.070414][ T5940] usb 4-1: Product: syz [ 112.074617][ T5940] usb 4-1: Manufacturer: syz [ 112.101002][ T5940] usb 4-1: SerialNumber: syz [ 112.129968][ T5940] usb 4-1: config 0 descriptor?? [ 112.159990][ T5940] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 112.177307][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 112.204895][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 112.227283][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.236510][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.276116][ T10] usb 2-1: config 0 descriptor?? [ 112.299562][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 112.616030][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 112.635048][ T5940] usb 4-1: USB disconnect, device number 4 [ 112.645450][ T5940] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 113.141986][ T10] gspca_sunplus: reg_r err -71 [ 113.149042][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 113.159422][ T6469] veth0_vlan: entered promiscuous mode [ 113.185749][ T6469] veth1_vlan: entered promiscuous mode [ 113.193763][ T10] usb 2-1: USB disconnect, device number 6 [ 113.279985][ T6469] veth0_macvtap: entered promiscuous mode [ 113.307728][ T6469] veth1_macvtap: entered promiscuous mode [ 113.380276][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.413034][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.507767][ T1156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.529730][ T1156] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.557673][ T1156] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.589388][ T1156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.818145][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.866225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.940788][ T6827] loop3: detected capacity change from 0 to 64 [ 113.959979][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.983664][ T6827] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 113.992173][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.018121][ T6808] loop0: detected capacity change from 0 to 32768 [ 114.092068][ T6808] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.235669][ T6808] XFS (loop0): Ending clean mount [ 114.278381][ T6808] XFS (loop0): Quotacheck needed: Please wait. [ 114.435820][ T6816] loop4: detected capacity change from 0 to 32768 [ 114.461164][ T6808] XFS (loop0): Quotacheck: Done. [ 114.623121][ T6850] capability: warning: `syz.5.297' uses deprecated v2 capabilities in a way that may be insecure [ 114.623706][ T6816] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32 [ 114.735003][ T6816] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 114.768857][ T6816] OCFS2: File system is now read-only. [ 114.784098][ T6816] (syz.4.289,6816,1):ocfs2_read_locked_inode:599 ERROR: status = -30 [ 114.814291][ T6816] (syz.4.289,6816,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 114.824948][ T6816] (syz.4.289,6816,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0 [ 114.863502][ T6816] (syz.4.289,6816,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 114.877828][ T6816] (syz.4.289,6816,1):ocfs2_mount_volume:1758 ERROR: status = -30 [ 114.884545][ T5821] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.908681][ T6816] (syz.4.289,6816,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 115.305043][ T6870] netlink: 'syz.5.306': attribute type 1 has an invalid length. [ 115.347302][ T6870] netlink: 224 bytes leftover after parsing attributes in process `syz.5.306'. [ 115.387467][ T5910] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.576568][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 115.626940][ T5910] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 115.636024][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.675265][ T5910] usb 2-1: Product: syz [ 115.683389][ T5910] usb 2-1: Manufacturer: syz [ 115.726095][ T5910] usb 2-1: SerialNumber: syz [ 115.822791][ T5910] usb 2-1: config 0 descriptor?? [ 115.841715][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 116.660606][ T5910] gspca_sonixj: reg_r err -71 [ 116.684062][ T5910] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 116.730722][ T6880] loop4: detected capacity change from 0 to 131072 [ 116.752356][ T6880] F2FS-fs (loop4): Test dummy encryption mode enabled [ 116.754688][ T5910] usb 2-1: USB disconnect, device number 7 [ 116.780448][ T6880] F2FS-fs (loop4): invalid crc value [ 116.873291][ T6880] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 116.911757][ T6880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.989586][ T6896] loop0: detected capacity change from 0 to 32768 [ 118.141370][ T6896] read_mapping_page failed! [ 118.197670][ T6896] ERROR: (device loop0): txCommit: [ 118.197670][ T6896] [ 118.290897][ T6896] read_mapping_page failed! [ 118.295455][ T6896] ERROR: (device loop0): txCommit: [ 118.295455][ T6896] [ 118.706343][ T6941] vxlan0: entered promiscuous mode [ 118.738252][ T6941] vxlan0: entered allmulticast mode [ 118.751720][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.776538][ T1156] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.785303][ T1156] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.839005][ T1156] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.068205][ T6994] binder: 6993:6994 ioctl 40046205 0 returned -22 [ 121.129234][ T7031] netlink: 88 bytes leftover after parsing attributes in process `syz.0.352'. [ 121.138661][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 121.173991][ T7032] loop1: detected capacity change from 0 to 1024 [ 121.299880][ T3469] hfsplus: b-tree write err: -5, ino 4 [ 121.419140][ T7041] loop3: detected capacity change from 0 to 256 [ 121.526756][ T7041] FAT-fs (loop3): Directory bread(block 64) failed [ 121.546524][ T7041] FAT-fs (loop3): Directory bread(block 65) failed [ 121.553166][ T7041] FAT-fs (loop3): Directory bread(block 66) failed [ 121.587512][ T7041] FAT-fs (loop3): Directory bread(block 67) failed [ 121.598924][ T7041] FAT-fs (loop3): Directory bread(block 68) failed [ 121.626146][ T7041] FAT-fs (loop3): Directory bread(block 69) failed [ 121.666625][ T7041] FAT-fs (loop3): Directory bread(block 70) failed [ 121.686500][ T7041] FAT-fs (loop3): Directory bread(block 71) failed [ 121.713676][ T7041] FAT-fs (loop3): Directory bread(block 72) failed [ 121.722288][ T7041] FAT-fs (loop3): Directory bread(block 73) failed [ 121.818765][ T7054] loop4: detected capacity change from 0 to 256 [ 121.937015][ T7054] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 123.043750][ T7101] loop1: detected capacity change from 0 to 256 [ 123.053547][ T7101] exfat: Deprecated parameter 'namecase' [ 123.181820][ T7101] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 123.699020][ T7122] loop4: detected capacity change from 0 to 256 [ 123.760224][ T7122] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 123.834416][ T7122] exFAT-fs (loop4): error, data size is invalid(150994954) [ 123.845435][ T30] audit: type=1800 audit(1762858727.674:6): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.395" name="file2" dev="loop4" ino=1048616 res=0 errno=0 [ 123.878313][ T7122] exFAT-fs (loop4): Filesystem has been set read-only [ 123.912421][ T7126] IPv6: addrconf: prefix option has invalid lifetime [ 124.106674][ T7133] loop4: detected capacity change from 0 to 64 [ 124.546249][ T7144] loop1: detected capacity change from 0 to 512 [ 124.675076][ T7144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.692823][ T7144] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.755271][ T7120] loop3: detected capacity change from 0 to 40427 [ 124.767563][ T7144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.403: bg 0: bad block bitmap checksum [ 124.796612][ T7120] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 124.815850][ T7120] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.831668][ T7149] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.403: bg 0: bad block bitmap checksum [ 124.847226][ T7151] loop0: detected capacity change from 0 to 128 [ 124.852948][ T7120] F2FS-fs (loop3): invalid crc value [ 124.854974][ T7144] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Filesystem failed CRC [ 124.888956][ T7151] EXT4-fs (loop0): Test dummy encryption mode enabled [ 124.914871][ T7151] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0082] [ 124.934213][ T7151] System zones: 1-3, 19-19, 35-36 [ 124.960524][ T7151] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.000621][ T7151] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.064821][ T7151] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 125.078554][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.079332][ T7120] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 125.117885][ T7151] EXT4-fs (loop0): Online defrag not supported for encrypted files [ 125.122713][ T7120] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 125.143982][ T7120] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 125.284340][ T7162] loop5: detected capacity change from 0 to 512 [ 125.284724][ T5821] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.451607][ T7162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.484381][ T7162] ext4 filesystem being mounted at /30/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.563574][ T7170] loop6: detected capacity change from 0 to 524287999 [ 125.687975][ T6469] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.891248][ T7179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.898544][ T7179] IPv6: NLM_F_CREATE should be set when creating new route [ 126.340204][ T7164] loop4: detected capacity change from 0 to 32768 [ 126.430596][ T7164] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.545148][ T7164] XFS (loop4): Ending clean mount [ 126.555098][ T7202] loop1: detected capacity change from 0 to 8 [ 126.572473][ T7164] XFS (loop4): Quotacheck needed: Please wait. [ 126.589015][ T7202] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 126.646977][ T6085] udevd[6085]: incorrect cramfs checksum on /dev/loop1 [ 126.719305][ T6085] udevd[6085]: incorrect cramfs checksum on /dev/loop1 [ 126.750571][ T7164] XFS (loop4): Quotacheck: Done. [ 126.793159][ T7178] loop0: detected capacity change from 0 to 32768 [ 126.906089][ T7178] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.926144][ T5822] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.025993][ T7178] XFS (loop0): Ending clean mount [ 127.290606][ T5821] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.560858][ T7222] loop4: detected capacity change from 0 to 1024 [ 127.582121][ T7191] loop5: detected capacity change from 0 to 32768 [ 127.655350][ T7191] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.421 (7191) [ 127.770544][ T7224] loop3: detected capacity change from 0 to 1024 [ 127.910747][ T7224] hfsplus: bad catalog entry type [ 127.964552][ T3469] hfsplus: b-tree write err: -5, ino 3 [ 128.084488][ T1165] hfsplus: b-tree write err: -5, ino 4 [ 128.328325][ T7191] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.408633][ T7191] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 128.480519][ T7220] loop1: detected capacity change from 0 to 131072 [ 128.488664][ T7220] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 128.495367][ T7220] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.523741][ T7220] F2FS-fs (loop1): invalid crc value [ 128.595098][ T7220] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 128.605966][ T7220] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 128.613084][ T7220] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 128.703523][ T7220] F2FS-fs (loop1): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 128.816617][ T7191] BTRFS info (device loop5): enabling ssd optimizations [ 128.846969][ T7191] BTRFS info (device loop5): turning on async discard [ 128.853783][ T7191] BTRFS info (device loop5): enabling free space tree [ 128.956585][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.060516][ T6469] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.136867][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 129.168117][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.187480][ T9] usb 5-1: no configurations [ 129.192250][ T9] usb 5-1: can't read configurations, error -22 [ 130.026169][ T7280] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 130.045201][ T7280] netlink: 224 bytes leftover after parsing attributes in process `syz.0.446'. [ 130.283465][ T7289] netlink: 104 bytes leftover after parsing attributes in process `syz.4.449'. [ 130.481616][ T7296] netlink: 'syz.0.453': attribute type 8 has an invalid length. [ 130.552652][ T7273] loop5: detected capacity change from 0 to 32768 [ 130.580596][ T7273] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.443 (7273) [ 130.651977][ T7273] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.691788][ T7273] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 130.718836][ T7304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.455'. [ 131.073498][ T7273] BTRFS info (device loop5): enabling ssd optimizations [ 131.103833][ T7273] BTRFS info (device loop5): turning on async discard [ 131.120729][ T7273] BTRFS info (device loop5): enabling free space tree [ 131.291786][ T6469] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.649476][ T7302] loop1: detected capacity change from 0 to 32768 [ 131.692715][ T7300] loop4: detected capacity change from 0 to 32768 [ 131.701714][ T7302] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.435 (7302) [ 131.779913][ T7300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.454 (7300) [ 131.820988][ T7302] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 131.845293][ T7300] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.876540][ T7302] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm [ 131.887613][ T7300] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 131.906814][ T7300] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 132.076962][ T7300] BTRFS info (device loop4): rebuilding free space tree [ 132.107958][ T7302] BTRFS info (device loop1): enabling ssd optimizations [ 132.116599][ T7302] BTRFS info (device loop1): turning on async discard [ 132.123405][ T7302] BTRFS info (device loop1): enabling free space tree [ 132.192086][ T7300] BTRFS info (device loop4): disabling free space tree [ 132.199138][ T7302] BTRFS info (device loop1): use lzo compression, level 1 [ 132.206281][ T7302] BTRFS info (device loop1): max_inline set to 0 [ 132.236662][ T7300] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.241019][ T7366] loop5: detected capacity change from 0 to 256 [ 132.272854][ T7368] loop3: detected capacity change from 0 to 512 [ 132.285003][ T7300] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.356441][ T7368] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 132.374821][ T7300] BTRFS info (device loop4): enabling ssd optimizations [ 132.391880][ T7368] EXT4-fs (loop3): orphan cleanup on readonly fs [ 132.416884][ T7300] BTRFS info (device loop4): enabling disk space caching [ 132.445121][ T7300] BTRFS info (device loop4): force clearing of disk cache [ 132.467512][ T7368] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.463: Block bitmap for bg 0 marked uninitialized [ 132.482104][ T7300] BTRFS info (device loop4): enabling auto defrag [ 132.497028][ T7300] BTRFS info (device loop4): max_inline set to 0 [ 132.559528][ T7368] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 132.634129][ T7368] EXT4-fs (loop3): 1 orphan inode deleted [ 132.673548][ T7368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.761611][ T7368] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 132.800253][ T7368] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 132.888088][ T7368] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.463: Block bitmap for bg 0 marked uninitialized [ 132.958577][ T5822] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.002302][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.009516][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.143692][ T7383] loop5: detected capacity change from 0 to 256 [ 133.165025][ T5829] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 133.247994][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.109454][ T7399] loop5: detected capacity change from 0 to 4096 [ 134.410511][ T7386] loop0: detected capacity change from 0 to 32768 [ 134.428800][ T7386] btrfs: Deprecated parameter 'usebackuproot' [ 134.434910][ T7386] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 134.496947][ T7386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.474 (7386) [ 134.578754][ T5841] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 134.589129][ T5841] Bluetooth: hci3: Injecting HCI hardware error event [ 134.589287][ T7386] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.598474][ T5841] Bluetooth: hci3: hardware error 0x00 [ 134.623648][ T7386] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 134.669886][ T7423] netlink: 148 bytes leftover after parsing attributes in process `syz.4.488'. [ 134.781192][ T7386] BTRFS info (device loop0): rebuilding free space tree [ 134.896328][ T7386] BTRFS info (device loop0): allowing degraded mounts [ 134.926224][ T7448] program syz.5.492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.926682][ T7386] BTRFS info (device loop0): enabling ssd optimizations [ 134.959758][ T7386] BTRFS info (device loop0): turning on flush-on-commit [ 134.967614][ T7386] BTRFS info (device loop0): enabling free space tree [ 134.974483][ T7386] BTRFS info (device loop0): force clearing of disk cache [ 134.991336][ T7450] loop3: detected capacity change from 0 to 128 [ 134.998850][ T7386] BTRFS info (device loop0): trying to use backup root at mount time [ 135.007845][ T7386] BTRFS info (device loop0): use zstd compression, level 3 [ 135.033960][ T7450] EXT4-fs: Ignoring removed nobh option [ 135.088864][ T7450] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.145066][ T7450] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.201790][ T5821] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.284558][ T7450] fscrypt (loop3, inode 12): Unsupported log2_data_unit_size in encryption policy: 8 [ 135.385804][ T5832] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.236003][ T7493] loop4: detected capacity change from 0 to 512 [ 136.266474][ T5940] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.305431][ T7493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.315718][ T7495] loop1: detected capacity change from 0 to 128 [ 136.352168][ T7495] EXT4-fs: Ignoring removed nobh option [ 136.395537][ T7501] random: crng reseeded on system resumption [ 136.429996][ T7495] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.442810][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 136.465270][ T7495] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.483023][ T5940] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 136.502825][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.516433][ T5940] usb 4-1: Product: syz [ 136.520627][ T5940] usb 4-1: Manufacturer: syz [ 136.526598][ T5940] usb 4-1: SerialNumber: syz [ 136.534013][ T5940] usb 4-1: config 0 descriptor?? [ 136.554048][ T5940] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.559283][ T7495] fscrypt (loop1, inode 12): Reserved bits set in encryption policy [ 136.583053][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.635166][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.736992][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 136.874322][ T5940] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 136.896547][ T5841] Bluetooth: hci4: command tx timeout [ 136.937443][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.946649][ T7513] loop4: detected capacity change from 0 to 2048 [ 137.021591][ T7513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.042386][ T5940] usb 4-1: USB disconnect, device number 5 [ 137.185372][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.319063][ T7505] loop0: detected capacity change from 0 to 32768 [ 137.340120][ T7521] block nbd0: Unsupported socket: should be TCP or UNIX. [ 137.392719][ T7505] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.454850][ T7505] XFS (loop0): Ending clean mount [ 137.560023][ T7509] loop1: detected capacity change from 0 to 32768 [ 137.584851][ T5821] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.632049][ T7509] btrfs: Deprecated parameter 'usebackuproot' [ 137.666120][ T7509] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 137.699671][ T7509] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.518 (7509) [ 137.750405][ T7509] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.784835][ T7509] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 138.002111][ T7509] BTRFS info (device loop1): rebuilding free space tree [ 138.103303][ T7509] BTRFS info (device loop1): allowing degraded mounts [ 138.148073][ T7509] BTRFS info (device loop1): enabling ssd optimizations [ 138.204808][ T7509] BTRFS info (device loop1): turning on flush-on-commit [ 138.225367][ T5910] kernel read not supported for file /sg0 (pid: 5910 comm: kworker/0:5) [ 138.261362][ T7509] BTRFS info (device loop1): enabling free space tree [ 138.308737][ T7509] BTRFS info (device loop1): force clearing of disk cache [ 138.315900][ T7509] BTRFS info (device loop1): trying to use backup root at mount time [ 138.391511][ T7509] BTRFS info (device loop1): use zstd compression, level 3 [ 138.399297][ T7566] loop0: detected capacity change from 0 to 2048 [ 138.550919][ T7509] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 138.696642][ T7566] loop0: detected capacity change from 0 to 2048 [ 138.709304][ T7570] loop5: detected capacity change from 0 to 4096 [ 138.727631][ T5829] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.791999][ T7572] loop4: detected capacity change from 0 to 65 [ 138.834920][ T7566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.846149][ T7574] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.923301][ T7572] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 139.054977][ T7537] loop3: detected capacity change from 0 to 32768 [ 139.134402][ T7537] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.528 (7537) [ 139.265735][ T7537] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.345897][ T7537] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 139.421372][ T7580] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 139.567314][ T7597] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 139.575104][ T7597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.676658][ T7537] BTRFS info (device loop3): rebuilding free space tree [ 139.754819][ T7537] BTRFS info (device loop3): disabling free space tree [ 139.778525][ T7537] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.805575][ T7537] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.850211][ T7537] BTRFS info (device loop3): enabling ssd optimizations [ 139.890222][ T7537] BTRFS info (device loop3): turning on sync discard [ 139.916471][ T7537] BTRFS info (device loop3): force clearing of disk cache [ 140.132808][ T7616] loop4: detected capacity change from 0 to 256 [ 140.183398][ T5832] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.287494][ T7616] FAT-fs (loop4): Directory bread(block 64) failed [ 140.315155][ T7616] FAT-fs (loop4): Directory bread(block 65) failed [ 140.355023][ T7616] FAT-fs (loop4): Directory bread(block 66) failed [ 140.387108][ T7616] FAT-fs (loop4): Directory bread(block 67) failed [ 140.400703][ T7616] FAT-fs (loop4): Directory bread(block 68) failed [ 140.422702][ T7616] FAT-fs (loop4): Directory bread(block 69) failed [ 140.435728][ T7616] FAT-fs (loop4): Directory bread(block 70) failed [ 140.450938][ T7616] FAT-fs (loop4): Directory bread(block 71) failed [ 140.466931][ T7616] FAT-fs (loop4): Directory bread(block 72) failed [ 140.479410][ T7622] loop1: detected capacity change from 0 to 4096 [ 140.520767][ T7616] FAT-fs (loop4): Directory bread(block 73) failed [ 140.554794][ T7627] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.946467][ T5940] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.112247][ T5940] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 141.127480][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.135933][ T7618] loop5: detected capacity change from 0 to 32768 [ 141.154307][ T7618] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.549 (7618) [ 141.155327][ T5940] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.185702][ T7618] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.196175][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.199391][ T7618] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 141.206284][ T5940] usb 1-1: Product: syz [ 141.226506][ T5940] usb 1-1: Manufacturer: syz [ 141.232452][ T5940] usb 1-1: SerialNumber: syz [ 141.259667][ T5940] usb 1-1: config 0 descriptor?? [ 141.279517][ T5940] hub 1-1:0.0: bad descriptor, ignoring hub [ 141.289434][ T7618] BTRFS info (device loop5): rebuilding free space tree [ 141.290048][ T5940] hub 1-1:0.0: probe with driver hub failed with error -5 [ 141.320538][ T7618] BTRFS info (device loop5): disabling free space tree [ 141.330977][ T7618] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.356250][ T7618] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.388456][ T7618] BTRFS info (device loop5): setting nodatasum [ 141.397769][ T7618] BTRFS info (device loop5): setting nodatacow [ 141.419091][ T7618] BTRFS info (device loop5): turning off barriers [ 141.425687][ T7618] BTRFS info (device loop5): force clearing of disk cache [ 141.555476][ T5940] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 141.580986][ T6912] udevd[6912]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.784638][ T5940] usb 1-1: USB disconnect, device number 3 [ 141.848526][ T6469] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.119645][ T5940] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 142.309457][ T5940] usb 1-1: config 1 interface 0 has no altsetting 0 [ 142.324394][ T5940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 142.348409][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.372780][ T5940] usb 1-1: Product: syz [ 142.379495][ T5940] usb 1-1: Manufacturer: syz [ 142.384225][ T5940] usb 1-1: SerialNumber: syz [ 142.435515][ T7677] loop1: detected capacity change from 0 to 64 [ 142.607324][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 142.782982][ T5940] usb 1-1: USB disconnect, device number 4 [ 143.633236][ T7679] loop3: detected capacity change from 0 to 40427 [ 143.686999][ T7679] F2FS-fs (loop3): Image doesn't support compression [ 143.693731][ T7679] F2FS-fs (loop3): build fault injection rate: 690 [ 143.714281][ T7693] loop4: detected capacity change from 0 to 32768 [ 143.748373][ T7679] F2FS-fs (loop3): invalid crc value [ 144.066136][ T7679] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 144.098072][ T7679] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.166496][ T30] audit: type=1800 audit(1762858748.004:7): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.569" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 144.314743][ T5832] syz-executor: attempt to access beyond end of device [ 144.314743][ T5832] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.369957][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 144.369984][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.369996][ T5832] Call Trace: [ 144.370004][ T5832] [ 144.370012][ T5832] dump_stack_lvl+0x189/0x250 [ 144.370056][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.370086][ T5832] ? __pfx_queue_work_on+0x10/0x10 [ 144.370111][ T5832] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 144.370140][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.370180][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 144.370218][ T5832] f2fs_write_end_io+0x886/0xb60 [ 144.370259][ T5832] __submit_merged_bio+0x256/0x6a0 [ 144.370294][ T5832] __submit_merged_write_cond+0x255/0x530 [ 144.370330][ T5832] f2fs_write_data_pages+0x261d/0x3000 [ 144.370387][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.370421][ T5832] ? is_bpf_text_address+0x292/0x2b0 [ 144.370473][ T5832] ? __mod_zone_page_state+0xd7/0x140 [ 144.370512][ T5832] ? folios_put_refs+0x58b/0x670 [ 144.370549][ T5832] ? __lock_acquire+0xab9/0xd20 [ 144.370583][ T5832] ? do_raw_spin_lock+0x121/0x290 [ 144.370614][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 144.370634][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.370656][ T5832] do_writepages+0x32e/0x550 [ 144.370695][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 144.370719][ T5832] filemap_fdatawrite+0x199/0x240 [ 144.370747][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 144.370824][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 144.370850][ T5832] f2fs_sync_dirty_inodes+0x30f/0x830 [ 144.370889][ T5832] f2fs_write_checkpoint+0x93e/0x2440 [ 144.370911][ T5832] ? __lock_acquire+0xab9/0xd20 [ 144.370966][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 144.371053][ T5832] kill_f2fs_super+0x2cc/0x6d0 [ 144.371082][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 144.371122][ T5832] ? shrinker_free+0x2ce/0x3e0 [ 144.371149][ T5832] deactivate_locked_super+0xbc/0x130 [ 144.371174][ T5832] cleanup_mnt+0x425/0x4c0 [ 144.371194][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.371226][ T5832] task_work_run+0x1d4/0x260 [ 144.371265][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 144.371291][ T5832] ? exit_to_user_mode_loop+0x55/0x4f0 [ 144.371321][ T5832] exit_to_user_mode_loop+0xff/0x4f0 [ 144.371344][ T5832] ? rcu_is_watching+0x15/0xb0 [ 144.371377][ T5832] do_syscall_64+0x2e9/0xfa0 [ 144.371396][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.371415][ T5832] ? clear_bhb_loop+0x60/0xb0 [ 144.371438][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.371457][ T5832] RIP: 0033:0x7f0cd4d909f7 [ 144.371480][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 144.371497][ T5832] RSP: 002b:00007ffd0631f018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 144.371518][ T5832] RAX: 0000000000000000 RBX: 00007f0cd4e11d7d RCX: 00007f0cd4d909f7 [ 144.371532][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0631f0d0 [ 144.371544][ T5832] RBP: 00007ffd0631f0d0 R08: 0000000000000000 R09: 0000000000000000 [ 144.371556][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd06320160 [ 144.371569][ T5832] R13: 00007f0cd4e11d7d R14: 0000000000023326 R15: 00007ffd063201a0 [ 144.371604][ T5832] [ 144.371613][ T5832] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 144.417740][ T7711] loop0: detected capacity change from 0 to 4096 [ 144.780208][ T7720] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.349444][ T7730] loop4: detected capacity change from 0 to 2048 [ 145.357635][ T7709] loop5: detected capacity change from 0 to 32768 [ 145.369707][ T7730] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 145.395582][ T7730] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 145.449358][ T7709] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.527278][ T7730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.666225][ T7709] XFS (loop5): Ending clean mount [ 145.666546][ T7747] loop0: detected capacity change from 0 to 512 [ 145.703069][ T7709] XFS (loop5): Quotacheck needed: Please wait. [ 145.799159][ T7751] loop1: detected capacity change from 0 to 512 [ 145.812750][ T7747] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.594: iget: bad i_size value: 38620345925642 [ 145.864327][ T7751] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 145.869477][ T7747] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.594: couldn't read orphan inode 15 (err -117) [ 145.873139][ T7751] EXT4-fs (loop1): orphan cleanup on readonly fs [ 145.903763][ T7709] XFS (loop5): Quotacheck: Done. [ 145.929850][ T7751] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #16: comm syz.1.596: corrupted inode contents [ 145.945687][ T7751] EXT4-fs error (device loop1): ext4_dirty_inode:6521: inode #16: comm syz.1.596: mark_inode_dirty error [ 145.955170][ T7750] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 8192 lbcount: 12288 extent 65+8192 [ 145.977735][ T7751] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #16: comm syz.1.596: corrupted inode contents [ 145.984932][ T7747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.015576][ T7751] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.596: mark_inode_dirty error [ 146.029245][ T7751] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #16: comm syz.1.596: corrupted inode contents [ 146.046841][ T7751] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 146.067106][ T7751] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #16: comm syz.1.596: corrupted inode contents [ 146.079473][ T7751] EXT4-fs error (device loop1): ext4_truncate:4641: inode #16: comm syz.1.596: mark_inode_dirty error [ 146.092415][ T7751] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 146.106955][ T7751] EXT4-fs (loop1): 1 truncate cleaned up [ 146.115901][ T1156] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 146.145273][ T1156] EXT4-fs error (device loop1): ext4_release_dquot:6982: comm kworker/u8:6: Failed to release dquot type 1 [ 146.198682][ T7751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.241547][ T7761] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.594: bg 0: block 5: invalid block bitmap [ 146.289896][ T6469] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.382950][ T7761] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 560 with error 28 [ 146.396994][ T7761] EXT4-fs (loop0): This should not happen!! Data will be lost [ 146.396994][ T7761] [ 146.408565][ T7761] EXT4-fs (loop0): Total free blocks count 0 [ 146.416219][ T7761] EXT4-fs (loop0): Free/Dirty block details [ 146.444393][ T7761] EXT4-fs (loop0): free_blocks=0 [ 146.465289][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.496772][ T7761] EXT4-fs (loop0): dirty_blocks=580 [ 146.529534][ T7761] EXT4-fs (loop0): Block reservation details [ 146.535606][ T7761] EXT4-fs (loop0): i_reserved_data_blocks=580 [ 146.730429][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 560 with max blocks 20 with error 28 [ 146.946853][ T5910] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 147.089186][ T7760] loop4: detected capacity change from 0 to 32768 [ 147.118625][ T5910] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 147.130976][ T5910] usb 6-1: config 0 has no interface number 0 [ 147.169486][ T5910] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 147.179027][ T7763] loop3: detected capacity change from 0 to 32768 [ 147.179267][ T7778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.607'. [ 147.194971][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.195001][ T5910] usb 6-1: Product: syz [ 147.195016][ T5910] usb 6-1: Manufacturer: syz [ 147.195029][ T5910] usb 6-1: SerialNumber: syz [ 147.217377][ T7759] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.235578][ T7763] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.601 (7763) [ 147.283622][ T5910] usb 6-1: config 0 descriptor?? [ 147.310269][ T7763] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.322293][ T5910] hub 6-1:0.217: bad descriptor, ignoring hub [ 147.349436][ T5910] hub 6-1:0.217: probe with driver hub failed with error -5 [ 147.371680][ T7763] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 147.521243][ T5910] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 147.577890][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.657200][ T5910] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 147.662374][ T7807] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 147.665725][ T5910] usb 6-1: media controller created [ 147.703350][ T7763] BTRFS info (device loop3): rebuilding free space tree [ 147.786887][ T7763] BTRFS info (device loop3): disabling free space tree [ 147.816467][ T7763] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.833826][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.865079][ T7763] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.882925][ T7763] BTRFS info (device loop3): setting nodatasum [ 147.907717][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 147.916883][ T7763] BTRFS info (device loop3): setting nodatacow [ 147.939634][ T7763] BTRFS info (device loop3): turning off barriers [ 147.946095][ T7763] BTRFS info (device loop3): force clearing of disk cache [ 148.024549][ T5910] DVB: Unable to find symbol dib7000p_attach() [ 148.031073][ T5910] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 148.199237][ T7819] loop1: detected capacity change from 0 to 64 [ 148.260681][ T5910] rc_core: IR keymap rc-dib0700-rc5 not found [ 148.274490][ T5910] Registered IR keymap rc-empty [ 148.298389][ T5910] dvb-usb: could not initialize remote control. [ 148.337392][ T5910] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 148.340132][ T7819] hfs: request for non-existent node 131072 in B*Tree [ 148.410550][ T5832] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.418385][ T5910] usb 6-1: USB disconnect, device number 2 [ 148.433735][ T7819] hfs: request for non-existent node 131072 in B*Tree [ 148.512268][ T7825] loop5: detected capacity change from 0 to 128 [ 148.535101][ T7825] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.600275][ T5910] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 148.615744][ T7825] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.896027][ T7833] netlink: 488 bytes leftover after parsing attributes in process `syz.1.623'. [ 148.938477][ T7833] netlink: 488 bytes leftover after parsing attributes in process `syz.1.623'. [ 148.943168][ T7832] netlink: 56 bytes leftover after parsing attributes in process `syz.5.624'. [ 149.180628][ T7839] loop0: detected capacity change from 0 to 16 [ 149.210796][ T7836] loop3: detected capacity change from 0 to 4096 [ 149.222875][ T7839] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 149.586557][ T7854] loop0: detected capacity change from 0 to 16 [ 149.599519][ T7859] loop4: detected capacity change from 0 to 16 [ 149.635007][ T7859] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 149.650446][ T7854] erofs (device loop0): mounted with root inode @ nid 36. [ 149.681386][ T7854] erofs (device loop0): xattr_isize 12 of nid 46 is not supported yet [ 150.517648][ T5910] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 150.574556][ T7883] input: syz1 as /devices/virtual/input/input15 [ 150.654872][ T7856] loop1: detected capacity change from 0 to 40427 [ 150.682807][ T7862] loop5: detected capacity change from 0 to 32768 [ 150.699186][ T5910] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 150.707381][ T7856] F2FS-fs (loop1): invalid crc value [ 150.712735][ T5910] usb 5-1: can't read configurations, error -71 [ 150.735158][ T7862] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.639 (7862) [ 150.782108][ T7862] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 150.817898][ T7862] BTRFS info (device loop5): using blake2b (blake2b-256-lib) checksum algorithm [ 150.904324][ T7856] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 150.945084][ T7856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 151.004377][ T7862] BTRFS info (device loop5): enabling ssd optimizations [ 151.040687][ T7862] BTRFS info (device loop5): turning on async discard [ 151.073584][ T7862] BTRFS info (device loop5): enabling free space tree [ 151.092356][ T7913] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 151.092356][ T7913] The task syz.3.651 (7913) triggered the difference, watch for misbehavior. [ 151.241486][ T5829] syz-executor: attempt to access beyond end of device [ 151.241486][ T5829] loop1: rw=2051, sector=77824, nr_sectors = 4096 limit=40427 [ 151.286957][ T5829] syz-executor: attempt to access beyond end of device [ 151.286957][ T5829] loop1: rw=2051, sector=49152, nr_sectors = 8 limit=40427 [ 151.336765][ T5829] F2FS-fs (loop1): Issue discard(9728, 9728, 512) failed, ret: -5 [ 151.348011][ T5829] F2FS-fs (loop1): Issue discard(6144, 6144, 1) failed, ret: -5 [ 151.385665][ T6469] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 151.724585][ T7919] loop4: detected capacity change from 0 to 8192 [ 151.751797][ T7919] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 151.861567][ T7919] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 152.169869][ T7931] loop4: detected capacity change from 0 to 128 [ 152.228192][ T7931] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.279569][ T7931] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.582246][ T7938] loop1: detected capacity change from 0 to 32768 [ 153.684538][ T7938] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.786685][ T7938] XFS (loop1): Ending clean mount [ 153.793462][ T7974] loop5: detected capacity change from 0 to 128 [ 153.808661][ T7938] XFS (loop1): Quotacheck needed: Please wait. [ 153.889890][ T7938] XFS (loop1): Quotacheck: Done. [ 153.905555][ T7960] loop3: detected capacity change from 0 to 32768 [ 153.971323][ T7938] XFS (loop1): User initiated shutdown received. [ 153.993473][ T7960] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.006201][ T7938] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472). Shutting down filesystem. [ 154.022917][ T7938] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 154.062239][ T5829] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.316931][ T7960] XFS (loop3): Ending clean mount [ 154.418864][ T5832] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.665722][ T5830] Bluetooth: hci5: command 0xfc11 tx timeout [ 154.669143][ T5841] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 155.094837][ T7996] loop0: detected capacity change from 0 to 1024 [ 155.132477][ T7996] EXT4-fs: inline encryption not supported [ 155.255033][ T7996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.417973][ T7984] loop5: detected capacity change from 0 to 40427 [ 155.466284][ T7984] F2FS-fs (loop5): build fault injection rate: 14 [ 155.498972][ T7984] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 155.541830][ T7984] F2FS-fs (loop5): invalid crc value [ 155.564283][ C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 155.603508][ C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 155.691526][ T7996] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.682: Allocating blocks 497-513 which overlap fs metadata [ 155.755701][ T7996] EXT4-fs (loop0): Remounting filesystem read-only [ 155.841737][ T7984] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 155.855325][ T7993] EXT4-fs (loop0): pa ffff8880116b11d0: logic 48, phys. 177, len 21 [ 155.885619][ T7984] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 155.924635][ T7995] loop1: detected capacity change from 0 to 40427 [ 155.938189][ T7984] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 156.024161][ T7995] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 156.043330][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.068637][ T7995] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 156.075707][ T7984] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 156.117632][ T7995] F2FS-fs (loop1): invalid crc value [ 156.122991][ T30] audit: type=1800 audit(1762858759.964:8): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.677" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 156.141689][ T7984] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of __vfs_getxattr+0x3f4/0x430 [ 156.288442][ T6469] syz-executor: attempt to access beyond end of device [ 156.288442][ T6469] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 156.346621][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 156.346647][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.346658][ T6469] Call Trace: [ 156.346666][ T6469] [ 156.346674][ T6469] dump_stack_lvl+0x189/0x250 [ 156.346711][ T6469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.346743][ T6469] ? __pfx_queue_work_on+0x10/0x10 [ 156.346766][ T6469] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 156.346794][ T6469] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.346834][ T6469] f2fs_handle_critical_error+0x37c/0x540 [ 156.346871][ T6469] f2fs_write_end_io+0x886/0xb60 [ 156.346912][ T6469] __submit_merged_bio+0x256/0x6a0 [ 156.346944][ T6469] __submit_merged_write_cond+0x255/0x530 [ 156.346974][ T6469] f2fs_write_data_pages+0x261d/0x3000 [ 156.347027][ T6469] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 156.347062][ T6469] ? is_bpf_text_address+0x292/0x2b0 [ 156.347083][ T6469] ? is_bpf_text_address+0x26/0x2b0 [ 156.347132][ T6469] ? stack_trace_save+0x9c/0xe0 [ 156.347153][ T6469] ? __pfx_stack_trace_save+0x10/0x10 [ 156.347196][ T6469] ? __lock_acquire+0xab9/0xd20 [ 156.347230][ T6469] ? do_raw_spin_lock+0x121/0x290 [ 156.347261][ T6469] ? do_raw_spin_unlock+0x122/0x240 [ 156.347281][ T6469] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 156.347303][ T6469] do_writepages+0x32e/0x550 [ 156.347342][ T6469] ? do_raw_spin_unlock+0x122/0x240 [ 156.347366][ T6469] filemap_fdatawrite+0x199/0x240 [ 156.347394][ T6469] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 156.347470][ T6469] ? do_raw_spin_unlock+0x122/0x240 [ 156.347495][ T6469] f2fs_sync_dirty_inodes+0x30f/0x830 [ 156.347540][ T6469] f2fs_write_checkpoint+0x93e/0x2440 [ 156.347562][ T6469] ? __lock_acquire+0xab9/0xd20 [ 156.347616][ T6469] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 156.347709][ T6469] kill_f2fs_super+0x2cc/0x6d0 [ 156.347738][ T6469] ? __pfx_kill_f2fs_super+0x10/0x10 [ 156.347779][ T6469] ? shrinker_free+0x2ce/0x3e0 [ 156.347806][ T6469] deactivate_locked_super+0xbc/0x130 [ 156.347837][ T6469] cleanup_mnt+0x425/0x4c0 [ 156.347858][ T6469] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.347890][ T6469] task_work_run+0x1d4/0x260 [ 156.347914][ T6469] ? __pfx_task_work_run+0x10/0x10 [ 156.347940][ T6469] ? exit_to_user_mode_loop+0x55/0x4f0 [ 156.347969][ T6469] exit_to_user_mode_loop+0xff/0x4f0 [ 156.347992][ T6469] ? rcu_is_watching+0x15/0xb0 [ 156.348024][ T6469] do_syscall_64+0x2e9/0xfa0 [ 156.348044][ T6469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.348063][ T6469] ? clear_bhb_loop+0x60/0xb0 [ 156.348087][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.348105][ T6469] RIP: 0033:0x7f25e65909f7 [ 156.348123][ T6469] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 156.348139][ T6469] RSP: 002b:00007ffe5ba27a58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 156.348159][ T6469] RAX: 0000000000000000 RBX: 00007f25e6611d7d RCX: 00007f25e65909f7 [ 156.348172][ T6469] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5ba27b10 [ 156.348181][ T6469] RBP: 00007ffe5ba27b10 R08: 0000000000000000 R09: 0000000000000000 [ 156.348192][ T6469] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe5ba28ba0 [ 156.348204][ T6469] R13: 00007f25e6611d7d R14: 000000000002621a R15: 00007ffe5ba28be0 [ 156.348232][ T6469] [ 156.348556][ T6469] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 156.353072][ T7995] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 156.717444][ T7995] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 156.746782][ T7995] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.913649][ T8025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.920972][ T8025] IPv6: NLM_F_CREATE should be set when creating new route [ 156.928290][ T8025] IPv6: NLM_F_CREATE should be set when creating new route [ 156.935526][ T8025] IPv6: NLM_F_CREATE should be set when creating new route [ 157.477433][ T8031] loop5: detected capacity change from 0 to 1024 [ 157.513346][ T8031] hfsplus: invalid length 32517 has been corrected to 255 [ 157.575563][ T8031] hfsplus: invalid length 32517 has been corrected to 255 [ 157.595570][ T8031] hfsplus: invalid length 32517 has been corrected to 255 [ 157.715573][ T8037] loop3: detected capacity change from 0 to 256 [ 157.770266][ T1156] hfsplus: b-tree write err: -5, ino 4 [ 157.795395][ T8037] exfat: Deprecated parameter 'namecase' [ 157.806444][ T8037] exfat: Deprecated parameter 'utf8' [ 157.847771][ T8037] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 158.173935][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 158.322702][ T8035] loop0: detected capacity change from 0 to 32768 [ 158.324025][ T8043] loop5: detected capacity change from 0 to 2048 [ 158.338582][ T8045] loop1: detected capacity change from 0 to 256 [ 158.397116][ T8045] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 158.436052][ T8043] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=26504, location=26504 [ 158.485279][ T8043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.510986][ T8035] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.559939][ T8045] exfat: Deprecated parameter 'utf8' [ 158.592747][ T8057] loop3: detected capacity change from 0 to 256 [ 158.604313][ T8057] exfat: Deprecated parameter 'namecase' [ 158.613064][ T8057] exfat: Deprecated parameter 'namecase' [ 158.621372][ T8045] exfat: Deprecated parameter 'utf8' [ 158.626957][ T8045] exfat: Deprecated parameter 'utf8' [ 158.665194][ T8057] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 158.735388][ T8035] XFS (loop0): Ending clean mount [ 158.759177][ T8035] XFS (loop0): Quotacheck needed: Please wait. [ 158.836158][ T8035] XFS (loop0): Quotacheck: Done. [ 158.930911][ T8062] loop5: detected capacity change from 0 to 22 [ 158.952131][ T8062] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 158.994316][ T8062] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 159.091387][ T5821] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.134290][ T8065] loop3: detected capacity change from 0 to 1024 [ 159.338280][ T8065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.465441][ T8072] sock: sock_set_timeout: `syz.5.710' (pid 8072) tries to set negative timeout [ 159.568145][ T7944] Set syz1 is full, maxelem 65536 reached [ 159.569645][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.991493][ T8087] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.220057][ T8067] loop1: detected capacity change from 0 to 40427 [ 160.236508][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.409219][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 160.428419][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.465861][ T8067] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 160.467555][ T9] usb 5-1: config 0 descriptor?? [ 160.510437][ T8067] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 160.521067][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 160.688093][ T8104] netlink: 'syz.0.721': attribute type 10 has an invalid length. [ 160.696948][ T5829] syz-executor: attempt to access beyond end of device [ 160.696948][ T5829] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.731013][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 160.731041][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.731053][ T5829] Call Trace: [ 160.731062][ T5829] [ 160.731070][ T5829] dump_stack_lvl+0x189/0x250 [ 160.731108][ T5829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.731137][ T5829] ? __pfx_queue_work_on+0x10/0x10 [ 160.731161][ T5829] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 160.731189][ T5829] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 160.731230][ T5829] f2fs_handle_critical_error+0x37c/0x540 [ 160.731267][ T5829] f2fs_write_end_io+0x886/0xb60 [ 160.731304][ T5829] __submit_merged_bio+0x256/0x6a0 [ 160.731336][ T5829] __submit_merged_write_cond+0x255/0x530 [ 160.731370][ T5829] f2fs_write_data_pages+0x261d/0x3000 [ 160.731420][ T5829] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 160.731452][ T5829] ? is_bpf_text_address+0x292/0x2b0 [ 160.731501][ T5829] ? __mod_zone_page_state+0xd7/0x140 [ 160.731537][ T5829] ? folios_put_refs+0x58b/0x670 [ 160.731575][ T5829] ? __lock_acquire+0xab9/0xd20 [ 160.731606][ T5829] ? do_raw_spin_lock+0x121/0x290 [ 160.731638][ T5829] ? do_raw_spin_unlock+0x122/0x240 [ 160.731659][ T5829] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 160.731681][ T5829] do_writepages+0x32e/0x550 [ 160.731719][ T5829] ? do_raw_spin_unlock+0x122/0x240 [ 160.731741][ T5829] filemap_fdatawrite+0x199/0x240 [ 160.731769][ T5829] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 160.731846][ T5829] ? do_raw_spin_unlock+0x122/0x240 [ 160.731869][ T5829] f2fs_sync_dirty_inodes+0x30f/0x830 [ 160.731902][ T5829] f2fs_write_checkpoint+0x93e/0x2440 [ 160.731922][ T5829] ? __lock_acquire+0xab9/0xd20 [ 160.731969][ T5829] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 160.732064][ T5829] kill_f2fs_super+0x2cc/0x6d0 [ 160.732093][ T5829] ? __pfx_kill_f2fs_super+0x10/0x10 [ 160.732135][ T5829] ? shrinker_free+0x2ce/0x3e0 [ 160.732162][ T5829] deactivate_locked_super+0xbc/0x130 [ 160.732186][ T5829] cleanup_mnt+0x425/0x4c0 [ 160.732207][ T5829] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.732239][ T5829] task_work_run+0x1d4/0x260 [ 160.732264][ T5829] ? __pfx_task_work_run+0x10/0x10 [ 160.732291][ T5829] ? exit_to_user_mode_loop+0x55/0x4f0 [ 160.732320][ T5829] exit_to_user_mode_loop+0xff/0x4f0 [ 160.732344][ T5829] ? rcu_is_watching+0x15/0xb0 [ 160.732378][ T5829] do_syscall_64+0x2e9/0xfa0 [ 160.732398][ T5829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.732414][ T5829] ? clear_bhb_loop+0x60/0xb0 [ 160.732436][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.732455][ T5829] RIP: 0033:0x7f5bcb1909f7 [ 160.732473][ T5829] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 160.732487][ T5829] RSP: 002b:00007ffe422f2a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 160.732508][ T5829] RAX: 0000000000000000 RBX: 00007f5bcb211d7d RCX: 00007f5bcb1909f7 [ 160.732522][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe422f2ac0 [ 160.732535][ T5829] RBP: 00007ffe422f2ac0 R08: 0000000000000000 R09: 0000000000000000 [ 160.732546][ T5829] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe422f3b50 [ 160.732557][ T5829] R13: 00007f5bcb211d7d R14: 0000000000027350 R15: 00007ffe422f3b90 [ 160.732589][ T5829] [ 160.735471][ T5829] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 160.760981][ T5941] usb 5-1: USB disconnect, device number 9 [ 160.876643][ T8089] loop3: detected capacity change from 0 to 32768 [ 161.106532][ T8089] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.717 (8089) [ 161.143242][ T8104] batman_adv: batadv0: Adding interface: netdevsim0 [ 161.157071][ T8104] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.220361][ T8089] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 161.234449][ T8104] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 161.256097][ T8089] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm [ 161.378079][ T8089] BTRFS info (device loop3): enabling ssd optimizations [ 161.424082][ T8089] BTRFS info (device loop3): turning on async discard [ 161.486495][ T8089] BTRFS info (device loop3): enabling free space tree [ 161.493300][ T8089] BTRFS info (device loop3): use lzo compression, level 1 [ 161.628010][ T8106] loop5: detected capacity change from 0 to 32768 [ 161.671690][ T8089] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 161.729595][ T8106] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.843800][ T8106] XFS (loop5): Ending clean mount [ 161.846871][ T5832] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 161.859433][ T8106] XFS (loop5): Quotacheck needed: Please wait. [ 161.917826][ T8106] XFS (loop5): Quotacheck: Done. [ 162.102763][ T6469] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.417914][ T8121] loop0: detected capacity change from 0 to 32768 [ 162.446873][ T8121] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.724 (8121) [ 162.565028][ T8121] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.594033][ T8121] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 162.712894][ T8154] loop5: detected capacity change from 0 to 256 [ 162.842324][ T8154] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 162.911943][ T30] audit: type=1800 audit(1762858766.754:9): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.728" name="file2" dev="loop5" ino=1048645 res=0 errno=0 [ 162.938464][ T8121] BTRFS info (device loop0): rebuilding free space tree [ 163.043091][ T8121] BTRFS info (device loop0): disabling free space tree [ 163.077668][ T8121] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.108078][ T8121] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.151101][ T8121] BTRFS info (device loop0): enabling ssd optimizations [ 163.171825][ T8121] BTRFS info (device loop0): turning on async discard [ 163.196611][ T8121] BTRFS info (device loop0): force clearing of disk cache [ 163.218202][ T8175] loop1: detected capacity change from 0 to 1024 [ 163.232918][ T8121] BTRFS info (device loop0): enabling auto defrag [ 163.246510][ T8121] BTRFS info (device loop0): max_inline set to 4096 [ 163.256497][ T8175] EXT4-fs (loop1): bad geometry: block count 4294901760 exceeds size of device (512 blocks) [ 163.548713][ T8186] loop5: detected capacity change from 0 to 1024 [ 163.611159][ T8121] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.839839][ T8193] loop4: detected capacity change from 0 to 1024 [ 164.321659][ T8207] loop3: detected capacity change from 0 to 512 [ 164.322951][ T8203] loop1: detected capacity change from 0 to 4096 [ 164.348137][ T8203] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 164.402220][ T8207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.402327][ T8207] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.486431][ T8203] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 164.625436][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.946480][ T5940] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 165.144699][ T5940] usb 1-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.159982][ T5940] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.173478][ T8238] loop4: detected capacity change from 0 to 1024 [ 165.180543][ T5940] usb 1-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 165.190637][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.204680][ T5940] usb 1-1: config 0 descriptor?? [ 165.330125][ T30] audit: type=1800 audit(1762858769.174:10): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.764" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 165.657488][ T3469] hfsplus: b-tree write err: -5, ino 4 [ 165.720999][ T5940] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 165.766082][ T5940] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 165.814749][ T5940] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 165.886071][ T5940] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 165.929141][ T5940] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 165.952664][ T5940] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 165.978000][ T5940] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 165.995659][ T5940] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 166.014013][ T5940] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 166.041650][ T5940] asus 0003:0B05:1A30.0003: unknown main item tag 0x0 [ 166.079493][ T5940] asus 0003:0B05:1A30.0003: unexpected long global item [ 166.119412][ T5940] asus 0003:0B05:1A30.0003: Asus hid parse failed: -22 [ 166.148441][ T5940] asus 0003:0B05:1A30.0003: probe with driver asus failed with error -22 [ 166.189192][ T5940] usb 1-1: USB disconnect, device number 5 [ 166.252496][ T8239] loop3: detected capacity change from 0 to 32768 [ 166.288886][ T8239] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.762 (8239) [ 166.344689][ T8239] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 166.380309][ T8239] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm [ 166.586138][ T8239] BTRFS info (device loop3): enabling ssd optimizations [ 166.596438][ T8239] BTRFS info (device loop3): turning on async discard [ 166.603241][ T8239] BTRFS info (device loop3): enabling free space tree [ 166.667865][ T8239] BTRFS info (device loop3): use lzo compression, level 1 [ 166.675149][ T8239] BTRFS info (device loop3): max_inline set to 0 [ 166.801834][ T8288] loop0: detected capacity change from 0 to 512 [ 166.840456][ T8288] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.867410][ T8288] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 166.930896][ T8288] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 166.948013][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.782'. [ 167.028371][ T8288] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 167.086802][ T8288] System zones: 0-2, 18-18, 34-34 [ 167.137284][ T8288] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.779: couldn't read orphan inode 15 (err -116) [ 167.191207][ T8288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.251274][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.785'. [ 167.279146][ T8288] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.779: bg 0: block 80: padding at end of block bitmap is not set [ 167.316216][ T5832] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 167.490834][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.061246][ T8296] loop1: detected capacity change from 0 to 32768 [ 168.099441][ T8323] loop3: detected capacity change from 0 to 64 [ 168.133407][ T8323] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 168.264419][ T8325] program syz.0.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.411519][ T8330] loop3: detected capacity change from 0 to 8 [ 168.433504][ T8328] loop5: detected capacity change from 0 to 4096 [ 168.477526][ T8328] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.506036][ T8328] EXT4-fs (loop5): Test dummy encryption mode enabled [ 168.541477][ T8307] loop4: detected capacity change from 0 to 32768 [ 168.572313][ T8307] btrfs: Deprecated parameter 'usebackuproot' [ 168.590642][ T8328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.637026][ T8307] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 168.700179][ T8307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.788 (8307) [ 168.840904][ T8343] loop3: detected capacity change from 0 to 64 [ 168.859113][ T8307] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.873335][ T6469] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.905658][ T8307] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 168.905746][ T8343] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 168.961690][ T8307] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 169.070808][ T8343] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 169.168245][ T30] audit: type=1800 audit(1762858773.004:11): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.802" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 169.245953][ T8307] BTRFS info (device loop4): rebuilding free space tree [ 169.324462][ T8307] BTRFS info (device loop4): disabling free space tree [ 169.346525][ T8307] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 169.362887][ T8307] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 169.399016][ T8307] BTRFS info (device loop4): enabling ssd optimizations [ 169.406472][ T8307] BTRFS info (device loop4): turning on flush-on-commit [ 169.413436][ T8307] BTRFS info (device loop4): enabling disk space caching [ 169.456877][ T8307] BTRFS info (device loop4): force clearing of disk cache [ 169.464038][ T8307] BTRFS info (device loop4): trying to use backup root at mount time [ 169.517192][ T8307] BTRFS info (device loop4): force zlib compression, level 3 [ 170.080324][ T8363] loop5: detected capacity change from 0 to 40427 [ 170.112736][ T8363] F2FS-fs (loop5): invalid crc value [ 170.279325][ T8363] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 170.289233][ T8363] F2FS-fs (loop5): Start checkpoint disabled! [ 170.305867][ T8363] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 170.318185][ T8363] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 170.583347][ T8383] loop1: detected capacity change from 0 to 512 [ 170.619908][ T5822] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.642193][ T8383] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.719017][ T8383] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.816: inode has both inline data and extents flags [ 170.779032][ T8383] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.816: couldn't read orphan inode 15 (err -117) [ 170.838287][ T8383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.916500][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.124346][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 171.139343][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 171.161288][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.183085][ T9] usb 4-1: config 0 has no interface number 0 [ 171.199106][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 171.212542][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.230902][ T9] usb 4-1: Product: syz [ 171.241370][ T9] usb 4-1: Manufacturer: syz [ 171.244573][ T8397] loop4: detected capacity change from 0 to 2048 [ 171.251622][ T9] usb 4-1: SerialNumber: syz [ 171.275918][ T9] usb 4-1: config 0 descriptor?? [ 171.301403][ T8397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.357989][ T8397] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.560551][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.570594][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.608052][ T8407] loop0: detected capacity change from 0 to 1024 [ 171.739368][ T1165] hfsplus: b-tree write err: -5, ino 4 [ 171.870797][ T8411] vlan2: entered allmulticast mode [ 171.988982][ T8418] tun0: tun_chr_ioctl cmd 1074025680 [ 172.147645][ T8423] netlink: 'syz.4.832': attribute type 1 has an invalid length. [ 172.166565][ T9] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 172.190904][ T9] uvcvideo 4-1:0.105: No valid video chain found. [ 172.237360][ T9] usb 4-1: USB disconnect, device number 6 [ 172.399694][ T8428] sctp: [Deprecated]: syz.5.834 (pid 8428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.399694][ T8428] Use struct sctp_sack_info instead [ 172.614008][ T8436] loop1: detected capacity change from 0 to 2048 [ 172.726500][ T8436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.790317][ T8436] overlayfs: upper fs needs to support d_type. [ 172.820130][ T8436] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 172.866793][ T8436] overlayfs: failed to set xattr on upper [ 172.881857][ T8436] overlayfs: ...falling back to redirect_dir=nofollow. [ 172.900912][ T8436] overlayfs: ...falling back to index=off. [ 172.918432][ T8436] overlayfs: ...falling back to uuid=null. [ 173.056068][ T5829] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 173.072181][ T5829] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 173.110123][ T8422] loop0: detected capacity change from 0 to 40427 [ 173.135935][ T6726] ------------[ cut here ]------------ [ 173.141580][ T6726] WARNING: ./include/linux/ns_common.h:255 at put_mnt_ns+0x152/0x190, CPU#0: syz.1.274/6726 [ 173.151861][ T6726] Modules linked in: [ 173.155766][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.1.274 Not tainted syzkaller #0 PREEMPT(full) [ 173.165507][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.165837][ T8453] sctp: [Deprecated]: syz.3.846 (pid 8453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.165837][ T8453] Use struct sctp_sack_info instead [ 173.176473][ T6726] RIP: 0010:put_mnt_ns+0x152/0x190 [ 173.198052][ T6726] Code: 79 00 00 bf 01 00 00 00 89 ee e8 c9 c0 7d ff 85 ed 7e 1f e8 80 bc 7d ff 5b 41 5e 41 5f 5d e9 55 ab 18 09 cc e8 6f bc 7d ff 90 <0f> 0b 90 e9 33 ff ff ff e8 61 bc 7d ff 4c 89 f7 be 03 00 00 00 5b [ 173.217987][ T6726] RSP: 0018:ffffc9000ea1fa68 EFLAGS: 00010293 [ 173.224197][ T6726] RAX: ffffffff82436311 RBX: ffff888025175000 RCX: ffff88802fe7db80 [ 173.232239][ T6726] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 173.240273][ T6726] RBP: 00000000ffffffff R08: ffff8880251750bb R09: 1ffff11004a2ea17 [ 173.248324][ T6726] R10: dffffc0000000000 R11: ffffed1004a2ea18 R12: dffffc0000000000 [ 173.256319][ T6726] R13: 0000000000000009 R14: ffff8880251750b8 R15: dffffc0000000000 [ 173.264379][ T6726] FS: 0000000000000000(0000) GS:ffff888125ecc000(0000) knlGS:0000000000000000 [ 173.273398][ T6726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.280060][ T6726] CR2: 0000000000000000 CR3: 0000000067da8000 CR4: 00000000003526f0 [ 173.288206][ T6726] Call Trace: [ 173.291570][ T6726] [ 173.294514][ T6726] free_nsproxy+0x46/0x560 [ 173.299756][ T6726] do_exit+0x6b8/0x2300 [ 173.303945][ T6726] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 173.310123][ T6726] ? do_raw_spin_lock+0x121/0x290 [ 173.315182][ T6726] ? __pfx_do_exit+0x10/0x10 [ 173.319871][ T6726] do_group_exit+0x21c/0x2d0 [ 173.324480][ T6726] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.329730][ T6726] get_signal+0x1285/0x1340 [ 173.334275][ T6726] arch_do_signal_or_restart+0x9a/0x7a0 [ 173.338931][ T8422] F2FS-fs (loop0): invalid crc value [ 173.339920][ T6726] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 173.350347][ T6726] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 173.356594][ T6726] ? exit_to_user_mode_loop+0x55/0x4f0 [ 173.362172][ T6726] exit_to_user_mode_loop+0x87/0x4f0 [ 173.367530][ T6726] ? rcu_is_watching+0x15/0xb0 [ 173.372373][ T6726] do_syscall_64+0x2e9/0xfa0 [ 173.377132][ T6726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.383225][ T6726] ? clear_bhb_loop+0x60/0xb0 [ 173.387967][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.393877][ T6726] RIP: 0033:0x7f5bcb1c1f85 [ 173.398359][ T6726] Code: Unable to access opcode bytes at 0x7f5bcb1c1f5b. [ 173.405392][ T6726] RSP: 002b:00007f5bcc030f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 173.413904][ T6726] RAX: fffffffffffffdfc RBX: 00007f5bcb3e5fa0 RCX: 00007f5bcb1c1f85 [ 173.421944][ T6726] RDX: 00007f5bcc030fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.430042][ T6726] RBP: 00007f5bcb211f91 R08: 0000000000000000 R09: 0000000000000000 [ 173.438086][ T6726] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.446255][ T6726] R13: 00007f5bcb3e6038 R14: 00007f5bcb3e5fa0 R15: 00007ffe422f3778 [ 173.454301][ T6726] [ 173.457414][ T6726] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.464789][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.1.274 Not tainted syzkaller #0 PREEMPT(full) [ 173.473999][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.484064][ T6726] Call Trace: [ 173.487352][ T6726] [ 173.490293][ T6726] dump_stack_lvl+0x99/0x250 [ 173.494911][ T6726] ? __asan_memcpy+0x40/0x70 [ 173.499530][ T6726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.504754][ T6726] ? __pfx__printk+0x10/0x10 [ 173.509360][ T6726] vpanic+0x237/0x6d0 [ 173.513343][ T6726] ? __pfx_vpanic+0x10/0x10 [ 173.517837][ T6726] ? is_bpf_text_address+0x292/0x2b0 [ 173.523114][ T6726] ? is_bpf_text_address+0x26/0x2b0 [ 173.528308][ T6726] panic+0xb9/0xc0 [ 173.532017][ T6726] ? __pfx_panic+0x10/0x10 [ 173.536435][ T6726] __warn+0x318/0x4d0 [ 173.540406][ T6726] ? put_mnt_ns+0x152/0x190 [ 173.544908][ T6726] ? put_mnt_ns+0x152/0x190 [ 173.549416][ T6726] report_bug+0x2be/0x4f0 [ 173.553836][ T6726] ? put_mnt_ns+0x152/0x190 [ 173.558337][ T6726] ? put_mnt_ns+0x152/0x190 [ 173.562866][ T6726] ? put_mnt_ns+0x154/0x190 [ 173.567375][ T6726] handle_bug+0x84/0x160 [ 173.571614][ T6726] exc_invalid_op+0x1a/0x50 [ 173.576110][ T6726] asm_exc_invalid_op+0x1a/0x20 [ 173.580966][ T6726] RIP: 0010:put_mnt_ns+0x152/0x190 [ 173.586089][ T6726] Code: 79 00 00 bf 01 00 00 00 89 ee e8 c9 c0 7d ff 85 ed 7e 1f e8 80 bc 7d ff 5b 41 5e 41 5f 5d e9 55 ab 18 09 cc e8 6f bc 7d ff 90 <0f> 0b 90 e9 33 ff ff ff e8 61 bc 7d ff 4c 89 f7 be 03 00 00 00 5b [ 173.605706][ T6726] RSP: 0018:ffffc9000ea1fa68 EFLAGS: 00010293 [ 173.611776][ T6726] RAX: ffffffff82436311 RBX: ffff888025175000 RCX: ffff88802fe7db80 [ 173.619741][ T6726] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 173.627716][ T6726] RBP: 00000000ffffffff R08: ffff8880251750bb R09: 1ffff11004a2ea17 [ 173.635702][ T6726] R10: dffffc0000000000 R11: ffffed1004a2ea18 R12: dffffc0000000000 [ 173.643683][ T6726] R13: 0000000000000009 R14: ffff8880251750b8 R15: dffffc0000000000 [ 173.651663][ T6726] ? put_mnt_ns+0x151/0x190 [ 173.656177][ T6726] ? put_mnt_ns+0x151/0x190 [ 173.660678][ T6726] free_nsproxy+0x46/0x560 [ 173.665097][ T6726] do_exit+0x6b8/0x2300 [ 173.669268][ T6726] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 173.674649][ T6726] ? do_raw_spin_lock+0x121/0x290 [ 173.679675][ T6726] ? __pfx_do_exit+0x10/0x10 [ 173.684303][ T6726] do_group_exit+0x21c/0x2d0 [ 173.688891][ T6726] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.694090][ T6726] get_signal+0x1285/0x1340 [ 173.698605][ T6726] arch_do_signal_or_restart+0x9a/0x7a0 [ 173.704145][ T6726] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 173.709338][ T6726] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 173.715496][ T6726] ? exit_to_user_mode_loop+0x55/0x4f0 [ 173.720953][ T6726] exit_to_user_mode_loop+0x87/0x4f0 [ 173.726245][ T6726] ? rcu_is_watching+0x15/0xb0 [ 173.731016][ T6726] do_syscall_64+0x2e9/0xfa0 [ 173.735599][ T6726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.741663][ T6726] ? clear_bhb_loop+0x60/0xb0 [ 173.746337][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.752247][ T6726] RIP: 0033:0x7f5bcb1c1f85 [ 173.756669][ T6726] Code: Unable to access opcode bytes at 0x7f5bcb1c1f5b. [ 173.763678][ T6726] RSP: 002b:00007f5bcc030f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 173.772089][ T6726] RAX: fffffffffffffdfc RBX: 00007f5bcb3e5fa0 RCX: 00007f5bcb1c1f85 [ 173.780073][ T6726] RDX: 00007f5bcc030fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.788052][ T6726] RBP: 00007f5bcb211f91 R08: 0000000000000000 R09: 0000000000000000 [ 173.796020][ T6726] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.803982][ T6726] R13: 00007f5bcb3e6038 R14: 00007f5bcb3e5fa0 R15: 00007ffe422f3778 [ 173.811965][ T6726] [ 173.815111][ T6726] Kernel Offset: disabled [ 173.819423][ T6726] Rebooting in 86400 seconds..