last executing test programs: 24.85300961s ago: executing program 2 (id=413): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/bp20TUvtShz4uFiARCRE0qQtUAkkIi4c2hM9cMSK0xLVaVBjJFpFfAjEDSQQDwAH4BE4woF3gDNwgEoRyoGUm9Hau46J7bRpHYyS308aeWZn65nd6ax3J7MTwKFVjYiXI+JIRJyJiHK+Pc1DvN8J2X5bm+uLf2+uLybRar32ZxJJvq34riT/PJF/wXQakX6UxOMDyl27eetardFYupGnZ5srb82u3bz17PJK7erS1aXr88+dPXf+/AsX5p8f2bFurCSfPPXNxd8++7j++U9/fF/J6nsyz+s9jlGpRrV7Tna6MOrCxuxYTzwpjbEiAADsKs3v/Uvt+/9yHIntm7dyfPrjWCsHAAAAjESrVXwCAAAAB1fi2R8AAAAOuGIewNbm+mIRxjgdgf/YxkJEVDrtfycPnZxS953eiR3v945SNSJePXZpPguxT+9hAwAAABxmPyx0Fv7rH/9L45Ge/Y5HxFSxtt8IVXek+8d/0tsjLpIeGwsRL0bEnb7xv7TYpXIkTz3UHiqcSK4sN5bORMSpiJiOiaNZem6XMt594tq3w/J6x/++/PX1uaz87HN7j/R26ei//0291qw9yDGzbeODiMdKg9o/6Y759q6TeT/eWN56aVhe1v5Zexehv/3ZT62vIp4e2P+3Vy5Ndl+fdbZ9PZgtrgr9fjn59YfDyu/t/1nIyi/+FsD+y/r/1O7t314nt7te79rey/jur0s/D8u7e/sPvv5PJpfbFZzMt71TazZvzEVMJhf7t/vf1FWcj+J8Ze0//eTg3//i/i/Jf/tP9awPvRevvHf68rA8/X+8svav76n/7z3y5tSj08PKv7f+f65dmeJL3P/d3b020LjrCQAAAAAAAMBopO25fUk6042n6cxMZ57vwzGVNlbXms9cWX37er0zB7ASE2kx06vcMx90rvMaeTc9vyN9NiJOR8QX5ePt9MziaqM+7oMHAACAQ+LEkOf/zO/387IHAAAA8P9UGXcFAAAAgH3n+R8AAAAOtAdZ119EROSgRsZ9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA43P4JAAD//+0cwvs=") (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000100)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) (async) fallocate(r0, 0x3, 0x2, 0x8000c62) 23.064042404s ago: executing program 1 (id=414): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x8, 0x3, 0x26, 0x5}, {0x3, 0x1, 0x93, 0x3fb1}, {0x8c, 0x5, 0x6, 0x4}]}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x208, 0x1000600}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4180}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x2, 0x1, 0x4, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x5966, &(0x7f000000b640)="$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") 23.01716565s ago: executing program 2 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4454, &(0x7f0000004480)="$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") open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1b8) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabf, &(0x7f0000002340)="$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") ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x2401}) syz_io_uring_setup(0x1725, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x400400, 0x23456}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x52, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0xd615, 0x2, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fe, 0x1}}, {0x0, 0x11}}}, 0xa0) link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000000)='./bus/file0\x00', 0x406600, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x800}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(0x0, 0x0, 0x104) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3, @ANYRES8, @ANYRES16=r4, @ANYRES16=r5], 0x0) flock(r2, 0x2) 20.7598305s ago: executing program 0 (id=416): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x102) pwritev2(r0, &(0x7f0000001940)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, 0x8000, 0x8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x40) pwritev2(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x7fff, 0x0, 0x0) 20.329104404s ago: executing program 1 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r0, 0x38, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x800054, &(0x7f0000005ec0)=ANY=[@ANYBLOB="16a217e38d8081bed8da69f88fe3fd4eb539c42851f4158336363719af322c1b55e83b482d246308ad657619b719c387219e4a46bf6e26b7403efbd22a1a2c1490321126c0388a6c8a1c3516fc1b18241744c2e82955a7e7b5f507d49715d5318c818129f0b3c4f816daa091061a8a732c95b6d7fbcacb476d93ab1ed6ea8740b58d68cc16f0fd0ac44141dc7dc0d4a68b3e1a3da63f38fc24e86e2bf2e0aaa1d144273ffb707743d2b4a00c139739128b17659f19452d29cf2af7aa73e468727193f68a490dfe32762d60f61689b72b59449818f37e80794983a6ab8477", @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0], 0x4, 0x59ab, &(0x7f0000000280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) r3 = userfaultfd(0x801) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003f00), 0x0, 0x0) read$FUSE(r4, &(0x7f0000006100)={0x2020}, 0x2020) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1eed2c00000000000109c3c93345da0fa391090400000103000200092100000401220500090581030000000000"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x5f, &(0x7f0000008140)=ANY=[@ANYBLOB="12010803020000102505a1a440000102030109024d0001e5644356433b01044043090400c3020206000c09240e200019f057d0052400010002240f01010000000500000000000000010009058103000281f9070905820200000107e709050302400007fd0c6cf6087bfd5fb6f352b6f0cf81472ad77ff2b1ab01c9f99c56566c6dba0076d59a6bbe7db3a6af18c06e638d6c2a682c607327062e85e90dbf8692d676cfb54748e8b1ccb284b8d014f570fa9e326e34946a25921ed4e03ec7931bd82e57b2a122305ffd60a48b7c2059652b167ca14aff2ecf2d5edfa886414973ec4d7747ef31e47d9a200cdcd2ece872682b3e0c4f90f08fe10409061f4b4ed1e583b310c5473844e902cb49963cacb36f2d8078f7ddf659ae4571ce7292455deeeced5659a6fdeba47a73f636eb9ceeba1e9738ef35f7e3387f8709f7a93d63b2a32d8daad78d223c58486c193c5c09935cedd0df11d56769c4afdaa6f1efd4a8bf732c41"], &(0x7f0000006240)={0xa, &(0x7f0000000200)={0xffffffffffffff37, 0x6, 0x110, 0x9, 0xb, 0x81, 0xff, 0x3}, 0x8, &(0x7f0000005dc0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000005e00)=@lang_id={0x4, 0x3, 0x44d}}, {0x8f, &(0x7f0000006140)=ANY=[@ANYBLOB="8f03988a950f4306e98fdf1ecd7bc44dfd5024ebcc1b9554a6f55625e5ee816e808f4e60661c572cfcff6ba3b227023baeb45793344b5b260a8f133a991a0eb82a8c0bb987e543efbf28db3d9131bac73eee30294e32f0cfa3fd114ff80154ed027ac86a450d1ac47469d42a9606be0dd7ec78005ef1f67ec95680163fc6895fc1107a7343bc78116228f995f88059"]}, {0x20, &(0x7f0000005c40)=ANY=[@ANYBLOB="2003f909c9e9791b459569d775f003266d6c9f70cb783f83f8dc5e46ac03ab11081faa78858337"]}, {0x37, &(0x7f0000005e80)=@string={0x37, 0x3, "0a9ea1fd689a70938aad5900cf7880c76d0adfa7c19790e84952036f45072c16954793ccc223e3b03dd0819cf6e89532d334b66b50"}}, {0x4, &(0x7f0000006200)=@lang_id={0x4, 0x3, 0xc0c}}]}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x13, r2, 0x0) r6 = syz_mount_image$msdos(&(0x7f0000001b00), &(0x7f0000001b40)='./file0\x00', 0x4000, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0xfd, 0x1ef, &(0x7f0000001900)="$eJzs3cFqE1EUANCbWJOJq25EEIUBN66K+gURiSAOCEoEXSmom1YKdhPdNP6FX+PX6F66ykZH6kw6maigsZNp7TmbuXk3b3LfhHnJJjfPrrzefrG79+rTpQ+RJJ3oDmMYs05sRjfmprEgCQDglJvleXzJC/XM+7ZKAgAa9vvP/+iVx6/V0Mdvu4/XWR0A0IRHT57ev51lo4dpmkQcTCfjybg4Fvm797LRjfSHzWrWwWQyPneUv5kuf3c4zJ+PCxHx+WI2ulXMT+v5Xly/Vsw/zN15kC3l+7HR7NIBAAAAAAAAAAAAAAAAAAAAAKA1V6NsztNZHK36+2xtpXNl/59BmS8eLfQHWurfsxGX5w18qvZA+X7zSwIAAAAAAAAAAAAAAAAAAIBTZ+/tu+3nOzsv31RBPyLqI38TDMsTrzh93UE3TkQZ/x4Myut+7GcuG0NMj73mXnNXIz0hb8qKd0EvIpoqbJbnef/XN349qPaI/tp3JQAAAAAAAAAAAAAAAAAAOJuqH/3+nEvaKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWlD9//8KwX5E/MGTj15s0OpSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+I99DwAA//91SjB3") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) r7 = fsopen(&(0x7f0000000140)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000005c80)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYRES16=r6], 0x200}, 0x1, 0x0, 0x0, 0x20040800}, 0x40408c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 18.890078335s ago: executing program 0 (id=419): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x533c) ioctl$NBD_DO_IT(r0, 0xab03) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000027b9e6f942d657900120a0102"], 0x64}}, 0x0) 17.664140737s ago: executing program 2 (id=420): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1d9}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 15.672622188s ago: executing program 0 (id=425): r0 = socket(0x1d, 0x2, 0x6) pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1}}, 0x18) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a40)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.685559317s ago: executing program 4 (id=427): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x50, 0x20, 0x0, 0xfffffffe}, {0x6, 0x0, 0x8, 0x2000003}]}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) listen(r3, 0xdaf5) syz_genetlink_get_family_id$mptcp(&(0x7f0000002a00), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d00)={0x4, 0x0, [{0xeeef0000, 0x1000, &(0x7f0000002080)=""/4096}, {0xeeee0000, 0xbf, &(0x7f0000000b80)=""/191}, {0x8080000, 0xb4, &(0x7f0000000c40)=""/180}, {0x6000, 0xf, &(0x7f00000001c0)=""/15}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 14.534629253s ago: executing program 1 (id=428): syz_io_uring_setup(0x3d6a, 0x0, &(0x7f0000000080)=0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x8, @desc2}) syz_io_uring_submit(r0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xce3, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x40040) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200010000ffbe8c5ee17688a2002b000301000a000002a257fc5ad90200bb6a880000d6c8db0000dba67e060a0000e28900000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2", 0xd2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) 14.283699734s ago: executing program 3 (id=429): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x102) pwritev2(r0, &(0x7f0000001940)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, 0x8000, 0x8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x40) pwritev2(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x7fff, 0x0, 0x0) 13.633036776s ago: executing program 4 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4454, &(0x7f0000004480)="$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") open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1b8) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabf, &(0x7f0000002340)="$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") ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x2401}) syz_io_uring_setup(0x1725, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x400400, 0x23456}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x52, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0xd615, 0x2, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fe, 0x1}}, {0x0, 0x11}}}, 0xa0) link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000000)='./bus/file0\x00', 0x406600, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x800}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x104) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20040000f403000225bd7000ffdbdf2506000000000000000a000000090000000700000001000000010400000100000001000000671b00000500000000040000ffffffff020000003b0d0000020000000180000002000000050000000100000007000000050000000001000005000000070000009d220000020000000700000000800000ba0f0000ffff0000000000000000000008000000fdffffffffffffff0600000080000000810000002b0c000063060000fcffffff0700000004000000070000002b050000040000000400000001000080070000000200000001800000000000000500000001000000ff7f00000500000006000000cc800000040000000b00000003000000030000004d7400007c080000000000000700000086ee0000080000000100000010000000ff03000000000000000000003b0000000100000006000000010400000600000041ffffff09000000ea5e0000fa0500000000000003000000000800000e0000000700000008000000ff7f000009000000030000000500000001000000060000000100ff030000b0050000ffffffff2b0c000000000000ff0f00000300000005000000070000000900000008000000dc00000007000000010000800400000040000000080000000800000000800000010000000100000006000000010000004000000002000000b50d00008100000000080000040000000500000003000000070000000500000003000000010000000300000007"], 0x420}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3, @ANYRES8, @ANYRES16=r4, @ANYRES16=r5], 0x0) flock(r2, 0x2) 13.496259538s ago: executing program 2 (id=431): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000840900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 12.437638813s ago: executing program 3 (id=432): socketpair(0x29, 0x2, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0xc) io_uring_setup(0x1fc4, &(0x7f0000000200)={0x0, 0x77a3, 0x12, 0x3, 0x104, 0x0, r2}) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0xd}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x1000000000000041) r5 = syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="8bc2e8ee7032225ca99d1f616eb269c3f770179f574bfb6f8241aef087bda6616493bf2e322377b61ca60749b1c7e9a7d025bede48ffef709e57ecbbf4fd4c1012be6466fd4fce8a9371c63b4c27a03ff38966a0e5acdcd6e79706e1e38e0115abd668a81dc1b3845df85f0e6afdbcf2e39f1e3860cc1e9e356cba75c24cab9a3544334aa6a3fec809e9c3134068e984f9b9678898d489d33892eee3b85695f24f5d9141bc8bd489b5d4b0e8e3c34c49d44d8137bc63ed141473108ac2590ea205371f4783b234f5ca5a2f9c41cc7d9e260730c069357fcdd8537de229aa38120ad7e4", @ANYRESHEX], 0xff, 0x59dd, &(0x7f0000000580)="$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") r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x7c, r7, 0x4483fb19ecd4d5f, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48104}, 0x40000) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005f80)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@dev}}, &(0x7f0000006080)=0xe8) quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000800, r11, &(0x7f00000060c0)={0xffff, 0x144f, 0x6, 0x7, 0x3, 0x1, 0x1, 0x705, 0x10001}) ioctl$RTC_WIE_ON(r10, 0x700f) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000140)={r9, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000002c0)={r9, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @local}, 0x10) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@nullb, r12, &(0x7f0000000200)='./file1\x00') fcntl$dupfd(r5, 0x0, r0) 12.169263276s ago: executing program 2 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x208, 0x1000600}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x5966, &(0x7f000000b640)="$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") 11.061613692s ago: executing program 0 (id=434): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x200004, 0x804, 0x4, 0xf, 0x120000, 0x7f, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x6, 0x1], 0xffff1000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x20, 0x0, 0x80, 0x0, 0x0, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.936700469s ago: executing program 4 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) futex(&(0x7f0000000200)=0x400004, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000080)=0x100000, 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, 0x0, 0x0, 0x5000000) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000016c0)='./bus/file0\x00', 0x1001806, &(0x7f0000005d80)=ANY=[], 0x9, 0x1509, &(0x7f0000004840)="$eJzs3AnYjdXXMPC19t43D6GTZN5rr5uTDJskiaSUIUmSJMmUkCRJEhKSKQlJyJxkDskUknmeMifJX5IkISFhf9dTen3vv3r73u/t//pf17N+17UveznPWmff9zrn3MNznefbdgMq1al8Ry1mhv8R/PWfrgCQAgC9AeBKAIgAoGTWkllTH8+gsev/7EnE3+vByZd7BeJykv6nbdL/tE36n7ZJ/9M26X/aJv1P26T/aZv0X4i0bPOUXFfJ+LcZheB/+Tnl/n9aJsf/tE36n7ZJ/9M26X/aJv1Py1j6n8ZJ/9M26X/aJv0XIi37W+4jp79Y7PLfP/9XjN921eVex1+M6P8r7/K98oQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpCVnwiUGAH6bX+51CSGEEEIIIYQQ4u8T0l/uFQghhBBCCCGEEOJfDwGMBgMRpIP0kAIZICNcAZkgM2SBKyEBV0FWuBqywTWQHXJATsgFuSEP5AULBA4YYsgH+SEJ10IBuA4KQiEoDEXAQ1EoBtdDcbgBSsCNUBJuglJwM5SGMnALlIVboRzcBrdDebgD7oQKUBEqQWW4C6rA3VAV7oFqcC9Uh/ugBtwPNeEBqAUPQm14COrAw1AXHoF6UB8aQENo9Mf5+r/OfwE6wYvQGbro1D3QDV6G7tADekIv6A2vQB94FfrCa9AP+sMAeB0GwhswCN6EwTAEhsJbMAyGwwgYCaNgNIyBt2EsvAPj4F0YDxNgIkyCyTAFpsJ7MA2mwwx4H2bCBzALZsMcmAvz4EOYDwtgIXwEi+BjWAxLYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDJ/AFtgK22A77ICdsAs+hd3wGeyBz2EvfPHfzD/9T/ntERBQoUKDBtNhOkzBFMyIGTETZsIsmAUTmMCsmBWzYTbMjtkxJ+bE3Jgb82JeJCRkZMyH+TCJSSyABbAgFsTCWBg9eiyGxbA43oAlsASWxJJYCkthaSyDZbAslsVyWC4H/seLsAJWwkp4F96Fd2NVrIrVsBpWx+pYA2tgTayJtbAW1sbaWAfrYF2si/WwHjbABtgIG2FjbIxNsAk2w2bYHJtjC2yBLbEltsJW2BpbYxtsg22xLbbDdtgeO2AHfAFfwBfxReyCFdRL2A27YXfsjj2xF/bCV7APvoqv4mvYD/vjAHwdX8c3cBCewsE4BIfiUCynhuMIHImsRuMYHINjcSyOw3E4HifgBJyEk3EKTsWpOA2n43R8H2fiB/gBzsbZOBfn4TycjwtwIS7ERXgaF+MSXIrLcDmuwOW4ClfjKlyrftsrm3ATfoKf4FbcittxO+7Enfgpfoqf4WfYD/fiXtyH+3A/7scDeAAP4kE8hIfwMB7GI3gEj+JRPIbH8QQex5N4Ek/haTyDZ/AsnsVz+Fzur2vvLLSmH6hURhmVTqVTKSpFZVQZVSaVSWVRWVRCJVRWlVVlU9lUdpVd5VQ5VW6VW+VVeRUpUqxilU/lU0mVVAVUAQDoqgqrwsorr4qpYqq4Kq5KqBKqpLpJlVI3q9KqjGrqy6qyqpxq5m9X5dUd6g5VQVVUlVRlVVlVUVVUVVVVVVPVVHVVXdVQ96ua6iXsiQ+q1M7UUf2xrhqA9VR91UA1VG/go6qxGoRNVFPVTD2uhuBgbKEa+5bqKdVKjcDW6hk1Ep9VbdVobKeeV+1VB9VRvaA6qSa+s+qixuNLqpuahN1VD9VT9VLTsKJK7Vgl9Zrqp/qrAep1NRffUIPUm2qwGqKGqrfUMDVcjVAj1Sg1Wo1Rb6ux6h01Tr2rxqsJaqKapCarKWqqek9NU9PVDPW+mqk+ULPUbDVHzVXz1IdqvlqgFqqP1CL1sVqslqilaplarlaolWqVWq3WqLVqnVqvNqiNapParD5RW9RWtU1tVzvUTrVLfap2q8/UHvW52qu+UPvUP9R+9aU6oL5SB9XX6pD6Rh1W36oj6jt1VHVRx9RxdUL9oE6qH9UpdVqdUT+ps+pndU6dVxdUUKBRK6210ZFOp9PrFJ1BZ9RX6Ew6s86ir9QJfZXOqq/W2fQ1OrvOoXPqXDq3zqPzaqtJO8061vl0fp3U1+oC+jpdUBfShXUR7XVRXUxfr4vrG3QJfaMuqW/SpfTNurQuo2/RZfWtupy+Td+uy+s79J26gq6oK+nK+i5dRd+tq+p7dDV9r66u79M19P26pn5A19IP6tr6IV1HP6zr6kd0PV1fN9ANdSP9qG6sH9NNdFPdTD+um+sndAv9pG6pn9Kt9NO6tX5Gt9HP6rb6Od1OP6/b6w66oz6vL+igO+suLz4NoLvpl3V33UP31L10b/2K7qNf1X31a7qf7q8H6Nf1QP2GHqTf1IP1ED1Uv6WH6eF6hB6pR+nReox+W4/V7+hx+l09Xk/QE/UkPVlP0T0vVpqRmm/gv8x/5w/y+/7y7Jv0Zv2J3qK36m16u96hd+pdepferXfrPXqP3qv36n16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+rj+Sf+gT+of9Sl9Wp/WP+mz+qw+d3EfgEGjjDbGRCadSW9STAaT0VxhMpnMJou50iTMVSarudpkM9eY7CaHyWlymdwmj8lrrCHjDJvY5DP5TdJcawqY60xBU8gUNkWMN0VNMXP9n+VHFz/h/jL/T9a3bOLF/EamkWlsGpsmpolpZpqZ5qa5aWFamJampWllWpnWprVpY9qYtqataWfamfamveloOppOppPpjGC6mq6mm3nZdDc9TE/Ty/Q2r5g+po/pa/qafqafGWAGmIFmoBlkBpnBZrAZaoaaYWaYGWFGmFFmlBljxpixZqwZZ8aZ8Wa8mWgmmslmskk9sKaaYWaYmWammWVmmTlmjpln5pn5Zr5ZaBaaRWaRWWyWmCVmmVlmVpgVZpVZZdaYNWadWWc2mA1msdlsNpstZovZZraZHWaH2WV2md1mt9lj9pi9Zq/ZZ/aZ/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmRPmhDlpTppT5pQ5Y86Ys+asOWfOmQvmQuppX6QiFZnIROmidFFKlBJljDJGmaJMUZYoS5SIElHWKGuULbomyh7liHJGuaLcUZ4ob2QjilzEURzli/JHyejaqEB0XVQwKhQVjopEPioaFYuuj4pHN0QlohujktFNUano5qh0VCa6JSob3RqVi26Lbo/KR3dEd0YVoopRpahydFdUJbo7qhrdE1WL7o2qR/dFNaL7o5rRA1Gt6MGodvRQVCd6OKobPRLVi+pHDaKGUaO/tX4Ip3I85jvbLjY9vGS72Zdtd9vD9rS9bG/7iu1jX7V97Wu2n+1vB9jX7UD7hh1k37SD7RA71L5lh9nhdoQdaUfZ0XaMfduOte/YcfZdO95OsBPtJDvZTrFT7Xt2mp1uZ9j37Uz7gZ1lZ9s5dq6dZz+08+0Cu9B+ZBfZj+1iu8QutcvscrvCrrSr7Gq7xq616+x6u8FutJvsZvuJ3WK32m12u91hd9pd9lO7235m99jP7V77hd1n/2H32y/tAfuVPWi/tofsN/aw/dYesd/Zo/Z7e8wetyfsD/ak/dGesqftGfuTPWt/tufseXvBhtST+9TDOxkylI7SUQqlUEbKSJkoE2WhLJSgBGWlrJSNslF2yk45KSflptyUl/JSKiamfJSPkpSkAlSAClJBKkyFyZOnYlSMilNxKkElqCSVpFJU6uK7BehWupVuo9uoPJWnO+lOqkgVqTJVpipUhapSVapG1ag6VacaVINqUk2qRbWoNtWmOlSH6lJdqkf1qAE1oEbUiBpTY2pCTagZNaPm1JxaUAtqSS2pFbWi1tSa2lAbakttqR21o/bUnjpSR+pEnagzdaau1JW6UTfqTt2pJ/Wk3tSb+lAf6kt9qR/1owE0gAbSQBpEg2gwDaGh9BYNo+E0gkbSKBpNY2gMjaWxNI7G0XgaTxNpIk2myTSVptI0mkYzaAbNpJk0i2bRHJpD82gezaf5tJAW0iJaRItpMS2lpbScltNKWkmraTWtpbW0ntbTRtpIm2kzbaEttI220Q7aQbtoF+2m3bSH9tBe2kv7aB/tp/10gA7QQTpIh+gQHabDdISO0FE6SsfoGJ2gE3SSTtIpOkVn6AydpZ/pHJ2nCxQoxWVwGd0VLpPL7LK4K90/xzldLpfb5XF5nXXZXY7/FJNzrqAr5Aq7Is67oq6Yu/53cWlXxt3iyrpbXTl3m7v9d3EVd7er6u5x1dy9rrK76z/F1d19roZ72NV0j7harr6r7Rq6Ou5hV9c94uq5+q6Ba+iauydcC/eka+mecq3c07+L57sFbrVb49a6dW63+8ydcT+5w+5bd9b97Dq7Lq63e8X1ca+6vu4118/1/1081L3lhrnhboQb6Ua50b+LJ7pJbrKb4qa699w0N/138Tz3oZvpFrpZbrab4+b+EqeuaaH7yC1yH7vFbolb6pa55W6FW+lW/cdal7kNbqPb5Ha5T90Wt9Vtc9vdDrfzlzh1O/a4z91e94U75L5x+92X7oA74g66r3+JU7fviPvOHXXfu2PuuDvhfnAn3Y/ulDv9y/anbvsP7ry74IIDRlas2XDE6Tg9p3AGzshXcCbOzFn4Sk7wVZyVr+ZsfA1n5xyck3Nxbs7DedkysWPmmPNxfk7ytVyAr+OCXIgLcxH2XJSL8fVcnG/gEnwjl+SbuBTfzKW5DN/CZflWLse38e1cnu/gO7kCV+RKXJnv4ip8N1fle7ga38vV+T6uwfdzTX6Aa/GDXJsf4jr8MNflR7ge1+cG3JAb8aPcmB/jJtyUm/Hj3Jyf4Bb8JLfkp7gVP82t+Rluw89yW36O2/Hz3J47cEd+gTvxi9yZu3BXfom78cvcnXtwT+7FvfkV7sOvcl9+jftxfx7Ar/NAfoMH8Zs8mIfwUH6Lh/FwHsEjeRSP5jH8No/ld3gcv8vjeQJP5Ek8mafwVH6Pp/F0nsHv80z+gGfxbJ7Dc3kef8jzeQEv5I94EX/Mi3kJL+VlvJxX8Epexat5Da/ldbyeN/BG3sSb+RPewlsZeTvv4J28iz/l3fwZ7+HPeS9/wfv4H7yfv+QD/BUf5K/5EH/Dh/lbPsLf8VH+no/xcT7BP/BJ/pFP8Wk+wz/xWf6Zz/F5vsCBIcZYxTo2cRSni9PHKXGGOGN8RZwpzhxnia+ME/FVcdb46jhbfE2cPc4R54xzxbnjPHHe2MYUu5jjOM4X54+T8bVxgfi6uGBcKC4cF4l9XDQuFl8fF49viEvEN8Yl45viUvHNcem4TPzwvWXjW+Ny8W3x7XH5+I74zrhCXDGuFFeO74qrxHfHVeN74mrxvXGJ+L64Rnx/XDN+IK4VPxjXjh+K68QPx3XjR+J6cf24QdwwbhQ/GjeOH4ubxE3jZvHjcfP4ibhF/GTcMn4qbhU//ZePd41firuNKvjrUUnPSc5Nzkt+mJyfXJBcmPwouSj5cXJxcklyaXJZcnlyRXJlclVydXJNcm1yXXJ9ckNyY3JTMoTK6cGjV1574yOfzqf3KT6Dz+iv8Jl8Zp/FX+kT/iqf1V/ts/lrfHafw+f0uXxun8fn9daTd5597PP5/D7pr/UF/HW+oC/kC/si3vuivphv6Bv5Rr6xf8w38U19M/+4f9w/4Z/wT/on/VO+lX/at/bP+Db+Wd/WP+ef88/79r6D7+hf8J38i76z7+K7+q6+m+/mu/vuvqfv6Xv73r6P7+P7+r6+nz/vB/gBfqAf6Af5QX6wH+yH+qF+mB/mR/gRfpQf5cf4MX6sH+vH+XF+fMp4P9FP9JP9ZD/VT/XT/DQ/w8/wMwvO9LP8LD/Hz/Hz/Dw/38/3C/1Cv8gv8ov9Yr/UL/XL/XK/0q/0q/1qv9av9ev9er/Rb/Sb/Wa/xW/x2/w2v8Pv8Lv8Lr/b7/Z7/B6/14cQuuw7E/x+f8B/5Q/6r/0h/40/7L/1R/x3/qj/3h/zx/0J/4M/6X/0p/xpf8b/5M/6n/05f95f8MGPSbydGJt4JzEu8W5ifGJCYmJiUmJyYkpiauK9xLTE9MSMxPuJmYkPErMSsxNzEnMT8xIfJuYnFiQWJj5KLEp8nFicWJJYmliWWJ5YkQghz5Y45Av5QzJcGwqE60LBUCgUDkWCD0VDsXB9KB5uCCXCjaFkuCmUCjeH0qFMuCU8EuqF+qFBaBgahUdD4/BYaBKahmbh8dA8PBFahCdDy/BUaBWeDq3DM6FNeDa0Dc+FduH50D50CB3DC6FTeDF0Dl1C1/BS6BZeDt1Dj/Bz6BV6h1dCn/Bq6BteC/1C/zAgvB4GhjfCoPBmGByGhKHhrTAsDA8jwsgwKowOY8LbYWx4J4wL74bxYUKYGCaFyWFKmBreC9PC9DAjvB9mhg/CrDA7zAlzw7zwYZgfFoSF4aOwKHwcFoclYWlYFiBlRVgZVoXVYU1YG9aF9WFD2Bg2hc3hk7AlbA3bwvawI+wMu8KnYXf4LOwJn4e94YuwL/wj7A9fhgPhq3AwfB0OhW/C4fBtOBK+C0fD9+FYOB5OBAwnw4/hVDgdzoSfwtnwczgXzocL8p01IYQQQoj/J/ovHn/pD/5PXRzwy+/OATJvzXXwn2uuz/7rvIfK3TwBAE91affgb6NCha5df/vawWINUf7ZAJC4lJ8OLsVLoBk8AS2hKRT/w/X1UB3O8h/U73qp/u+kAEBG+Of6N/xJ/eEz/6J+lJwNUDD/pZwMcCm+VL/En9TP0fgv6mf4cgxAk/8rJxNcii/VLwaPwdPQ8j/9pBBCCCGEEEII8ase6pY2f3V9m3p9nttcykm9dv8t/qvrcyGEEEIIIYQQQlx+z3bo+OSjLVs2bSOTyzBpl/nXLvy7rOdPJun+PZbx903w4t2rf5f1/Ksn5S++2/87WZftI0kIIYQQQgjxL3LppP9yr0QIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEi7/jf+CNnl3kYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDicvs/AQAA//+QvxaP") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f0000000180)='./bus\x00', 0x10927e, 0x8) fchdir(0xffffffffffffffff) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) syz_open_procfs(0x0, &(0x7f0000000780)='gid_map\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000002b00)={0x0, 0x3938700}, 0x0) close(0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x400, 0x0, 0x4, 0x0, 0x1, 0x3}, 0xc) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x7}, 0xe) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="d2f70000", @ANYRES16, @ANYBLOB="0b060000000000000000300000000a0001007770616e30000000"], 0x20}}, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000001700), r6) clock_gettime(0x0, &(0x7f00000047c0)) recvmmsg$unix(r2, &(0x7f0000002ac0)=[{{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f00000017c0)=""/31, 0x1f}, {&(0x7f0000001800)=""/57, 0x39}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/166, 0xa6}, {&(0x7f0000002900)=""/229, 0xe5}], 0x5, &(0x7f0000002a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x1, 0x4, &(0x7f0000004800)) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="1c0000001800500000000080208000000300050000000011a94139f7cabaf4dc0514408ce72b57ecd2fc81f141832573c991a3f5ce1d752126f08b9b95345b1b4f241cb1af19ea2644010dc192b575ad0000000000"], 0x1c}}, 0x0) 9.592036467s ago: executing program 0 (id=436): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)=':,:\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'\x8f\x18#][e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000004c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) setpriority(0x1, r2, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x218, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xd0, 0xffffffc5}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000440)={0x2a010000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x3e}, &(0x7f0000000180)=""/130, 0x82, &(0x7f0000000340)=""/169, &(0x7f0000000240)=[r2, r4], 0x2, {r6}}, 0x58) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) mbind(&(0x7f00000a4000/0xd000)=nil, 0xd000, 0x3, &(0x7f0000000600)=0x2, 0x9, 0x6) write$hidraw(0xffffffffffffffff, &(0x7f0000000380)="0cb6a4485674cc2bbe6767d10b", 0xd) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) 9.536076091s ago: executing program 3 (id=437): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0200001900010026bd700000000000fc0200000000000000000000000000000000000000000000000000000000000000000002000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000000000000000000000000000000ffff7f0000010000000000032000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000104000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000fe800000000000000000000000000000000000003300000002000000fe8000"/357], 0x23c}}, 0x0) 8.864247841s ago: executing program 2 (id=438): r0 = socket(0x22, 0x2, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x20000000, 0x4) (async) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x100, 0x0, 0x10, 0x70bd26, 0x7fffffff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000805}, 0x20000040) (async) listen(r0, 0x8) 8.199950771s ago: executing program 3 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x208, 0x1000600}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="61636c2c6669785f6572726f72733d61736b2c6e6f7265636f766572792c6669785f6572726f72733d6e6f2c7265636f766572795f706173735f6c6173743d636865636b5f657874656e74732c6e6f7265636f766572792c6572726f723d726f2c7265636f6e5274727563745f616c6c6f632c6e6f5f646174615f696f2c6673636f6e746578743d726f6f742c66736d616769633d3078303030303030303030303030383030302c61707072616973652c7375626a5f747990653d6e6f5f646174615f696f2c00b59ba3dc7bbd64cf1ca62d58cc2ee65dcef11e384bed58db423f661ac475e1edf48e9715f125f1ab862760524e2cbb0fe6fe3b33a703651061eedf21fdc6596e7a6f9c3e1c6eea624ea9ea9ea6fc8c85d320099b2b71a44825e990ecbace067e4aefba3e86efc5d412526bb782a0aaa29181c7a5f02806ba48a400000000"], 0x1, 0x5966, &(0x7f000000b640)="$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") (fail_nth: 11) 6.419967622s ago: executing program 1 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x208, 0x1000600}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x5966, &(0x7f000000b640)="$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") 5.92801633s ago: executing program 3 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180300000080000000000000000008fbff8661e20095000000"], &(0x7f00000000c0)='GPL\x00', 0x200ff, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000002040)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x9, 0xfdf, {{0x1b, 0x4, 0x0, 0x2, 0x6c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x2c, 0x5b, 0x0, 0xd, [0x7, 0x100, 0x4, 0x8, 0xfffffffd, 0x7, 0x4, 0xfffffffe, 0x1e5, 0x40]}, @generic={0x89, 0x2}, @lsrr={0x83, 0xfffffecb, 0xf6, [@private=0xa010100, @remote, @remote, @broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}]}, @generic={0x86, 0x0, "5d6dac"}]}}}}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002100)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000002280)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002240)={&(0x7f0000002300)=@newtclass={0x124, 0x28, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2, 0xfff2}, {0x4, 0xfff1}, {0x7, 0xe}}, [@c_atm={{0x8}, {0xbc, 0x2, [@TCA_ATM_HDR={0x40, 0x3, "7f8ece650cb553f5c3b5d76e542c71a4b95d95d406f56fdd66bfa9036804011a20967d568620e36b63d71c58466b0ce223cc05d19337e8ed0f83a0fe"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0xc}}, @TCA_ATM_HDR={0x2b, 0x3, "ab513940a3f46d90bd7d4fe1565ecf376d22e46b1624fd533cae2791e87944fd8ce0df06ff6b2f"}, @TCA_ATM_HDR={0x42, 0x3, "e784c03f4ff9744804d7bcd4691a639822eca2f6d4dbdf1d5f0ccda2877c9b2a0e0ebf70d237179077c46c0660905ba2f5e5fb8751ec8199ab2e3725be77"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x5}}}, @c_atm={{0x8}, {0x1c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0xfff3}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r0}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x8801) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x13b4, r3, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x2}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {}, @broadcast}}, @NL80211_ATTR_FRAME={0x1d4, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @random="00b468d69018", {0x5, 0x7}, @value=@ver_80211n={0x0, 0x40, 0x3, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x8800, 0x5, @device_a, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x6c98bff2f992ec57}, {0x16, 0x1}]}, @void, [{0xdd, 0xe3, "961c89643845a318edefc1c43f8a8531ab6bc42806e27325eca5f467e0a8ae3d01fdbce7e27560a64b9a18513af9db912690c2d0c1c05235eacb9a6a07d5c77c606f076d47b6d92f7fd2ed99f93208879a95f63cd78c22d14e4fb983c4cc74942914605236c6178778e1296f79920c9d17742617ffdfbd71dec6da701a6d9f9a41b648165285e74bb429b295cdf58ada13f4a7bb3f5bf0ae7706f4ebf7d0d7c56337f7b50bc1e6cae550206e50a98515950804c6b19f68b7eea9f1dc0a705c1368ddeb086ecdc801d4a89a5d84f10001ddaa51c04acaca7217e6f05649fada821bb557"}, {0xdd, 0xb7, "f94d9a8f8da2873616b812ef123e2030c83e2a1bc13458e8f48c7964fd0383229b70c2d0bc6f63c6d748eef165c646c3665a568ea00d0f8c006bd93bc567f8e44bee4d829ffb1728d4bc1a2d8a94c084dbcfe407cd1cb5daee4c232785dab7e524044f0d642608162a039550caa693dcc1fb183b4931acfc6cdb85bbdb2c234552187f0279897be54d77b73c6f775212703b56270e73010d734fc2d581fc7651735bbb3bfc55477706103f7420a3b11b00c44ab0acab9c"}]}}, @NL80211_ATTR_FRAME={0x111e, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @device_b, {0xf, 0x5}, @device_b, @void, @value=@ver_80211n={0x0, 0x2, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0xff0, "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"}, {@device_a, @device_a, 0xe9, "fa284d46dc778d8f882a19040e7b5b522d774a8992617af7b52404bea075b18f09b62b884245747f1b87b31b87837dc61455fe947f84a97ffaed038295d4dfde86a12f26d427f7c1be7fec6220e86bb5a1a06c2ababf78ffffb3c110f9ca49a4b42c382c8cf7b4a36f6c7f8f7485c77fc8fded31f2eb56e21dacc0a23377c7151c53235f235b46ea6af53df95d71a0658727b9f0b3df607566ba35ac3834852f7f135dc0e662be209a2e29fd25bbda81c5b131ddc997bf3195a3928c2846e9f02ff4174cb4ee52337eb15e186cb3451d26fd7912d5466dff32eec3f87203bf11a12a9b74d0f7c19c81"}]}}, @NL80211_ATTR_FRAME={0x35, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xf}, @device_b, @device_b, @initial, {0xb, 0x96}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @void, @void, @val={0x7e, 0x15, {{0x0, 0x2e}, 0x5, 0x2, @device_a, 0x1, 0x6, 0x5}}}}}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0xc}}}]}, 0x13b4}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x13b4, r3, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x2}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {}, @broadcast}}, @NL80211_ATTR_FRAME={0x1d4, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_b, @device_b, @random="00b468d69018", {0x5, 0x7}, @value=@ver_80211n={0x0, 0x40, 0x3, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x8800, 0x5, @device_a, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x6c98bff2f992ec57}, {0x16, 0x1}]}, @void, [{0xdd, 0xe3, "961c89643845a318edefc1c43f8a8531ab6bc42806e27325eca5f467e0a8ae3d01fdbce7e27560a64b9a18513af9db912690c2d0c1c05235eacb9a6a07d5c77c606f076d47b6d92f7fd2ed99f93208879a95f63cd78c22d14e4fb983c4cc74942914605236c6178778e1296f79920c9d17742617ffdfbd71dec6da701a6d9f9a41b648165285e74bb429b295cdf58ada13f4a7bb3f5bf0ae7706f4ebf7d0d7c56337f7b50bc1e6cae550206e50a98515950804c6b19f68b7eea9f1dc0a705c1368ddeb086ecdc801d4a89a5d84f10001ddaa51c04acaca7217e6f05649fada821bb557"}, {0xdd, 0xb7, "f94d9a8f8da2873616b812ef123e2030c83e2a1bc13458e8f48c7964fd0383229b70c2d0bc6f63c6d748eef165c646c3665a568ea00d0f8c006bd93bc567f8e44bee4d829ffb1728d4bc1a2d8a94c084dbcfe407cd1cb5daee4c232785dab7e524044f0d642608162a039550caa693dcc1fb183b4931acfc6cdb85bbdb2c234552187f0279897be54d77b73c6f775212703b56270e73010d734fc2d581fc7651735bbb3bfc55477706103f7420a3b11b00c44ab0acab9c"}]}}, @NL80211_ATTR_FRAME={0x111e, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @device_b, {0xf, 0x5}, @device_b, @void, @value=@ver_80211n={0x0, 0x2, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0xff0, "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"}, {@device_a, @device_a, 0xe9, "fa284d46dc778d8f882a19040e7b5b522d774a8992617af7b52404bea075b18f09b62b884245747f1b87b31b87837dc61455fe947f84a97ffaed038295d4dfde86a12f26d427f7c1be7fec6220e86bb5a1a06c2ababf78ffffb3c110f9ca49a4b42c382c8cf7b4a36f6c7f8f7485c77fc8fded31f2eb56e21dacc0a23377c7151c53235f235b46ea6af53df95d71a0658727b9f0b3df607566ba35ac3834852f7f135dc0e662be209a2e29fd25bbda81c5b131ddc997bf3195a3928c2846e9f02ff4174cb4ee52337eb15e186cb3451d26fd7912d5466dff32eec3f87203bf11a12a9b74d0f7c19c81"}]}}, @NL80211_ATTR_FRAME={0x35, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xf}, @device_b, @device_b, @initial, {0xb, 0x96}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @void, @void, @val={0x7e, 0x15, {{0x0, 0x2e}, 0x5, 0x2, @device_a, 0x1, 0x6, 0x5}}}}}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0xc}}}]}, 0x13b4}, 0x1, 0x0, 0x0, 0x840}, 0x4) syz_open_dev$vim2m(&(0x7f0000000380), 0x3, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}}, 0x0) socket(0x2, 0x3, 0xff) (async) r6 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000240)=0x7, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000240)=0x7, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB="2c726f6f746d6fe4653d30303030be2419ddd016303030303030303030303030303034303030302c7573", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002140)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x1dd8a0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0xfffffb96}}, 0x50) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@nested={0xc, 0xea, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x2}]}]}, 0x1c}], 0x1}, 0x11) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000008680)="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", 0x2000, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)={0x78, 0x0, 0x40000000000000, {0x400, 0x8, 0x0, {0x0, 0x100000, 0x80000000, 0x8e1, 0x5, 0x6, 0x2, 0x4, 0xfffffc01, 0x0, 0x1, r9, r11, 0xfffffffb}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f000000a700)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x617e, 0x4) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x617e, 0x4) write(r6, &(0x7f0000000640)="68a0b32fafd3b845da570480e0465913a86dde57923b10e6fd23bb9ae2d3029b", 0x20) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bf26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x106a}}}}, [@key_params=[@NL80211_ATTR_KEY_SEQ={0x5, 0xa, '}'}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "824320f139"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24000041}, 0x804) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000300), 0x2000000) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000300), 0x2000000) 5.642134657s ago: executing program 4 (id=442): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x102) pwritev2(r0, &(0x7f0000001940)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, 0x8000, 0x8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x40) pwritev2(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x7fff, 0x0, 0x0) 5.404563617s ago: executing program 0 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x208, 0x1000600}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, 0xffffffffffffffff) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0xfb, 0x5967, &(0x7f0000000700)="$eJzs3X+QXFWdKPBzu3synZlMMgmwRJDJEMguC6uZ8KtQt9bsvl3dApaKxZZLeFEYyISNJiGVhAUCuwQf+KAACy0tRf0DLaQeGi2q4CmREvnxEh6gFE8f9Qqph++hf/gKkZRAHmWpszXT9/T03Ok7t6enJyTh86lkbt/Tp7/n3HtP377f0z3TAQAAgHeEfTdvP3DBcX/39KdG3rzh77+/+cbQWx4vr8YK/enymrerhxxM3ZWl48vsuPiz6775y8HL/+ap+3u+8dbe9Sdu+NnfHnX5w584d89dX3nsjb4H//hyUdw4nk6dWE9eTUKo/mD/Fz6995ljx8qSEEI56d8VwuJkyWOLk0yI1b8LIazPxIseePOMDWPLG2/rnlS+KFPPeH9nq6bjbOeBq08LL/312pt+vOw73+7a/cquiSpJtWE8hbDw0sbHd4UQ5qf/x8TRtjQ+OF2uCSH0NDzunJz+/OZzT581tjypxf6vzFk/Pl3OS5e9BXHi/csz66VMvex61JVZ9hS0N1t5/Wi3XpEFmfWJk9EXi3ZtS/L6GcsXp8vvpctTZxi/nB6bchJKSajUu78pmRgjoeG4JSEZf0y1vl6qH9uQbn9mPcmslzLr5a7Mdo23m+69cpJMLo/1MuXxdFxJy09scu5vdGFO+bvSZTV9or4V10P2Rk3vlBv17RoX+7V/mr4cDKWGc1Cz8vqBTw/G2OaMjo6O9iZLpjxmtIl43961t68or3t8X39OP5L7kzR+Mt7mTOPv/NHiBR//1q1XLc2Lf2kpjV9qK/7Pz3v2tYtv/fqXc+PfGeOXZxB/Xj3+6Y/0vHreEzcvz90/++P+qbTV/+GXn7xj2dGX7c7t/90xfrWt+Kv3PNvdd+CRR3P7PxT3z/y24r/4gQ/94r7nH3olN36I8Xvair9uz9bPdA8cOCU3/qNx//S2N35e3332CwMDvxrMi/9cjN/XVvx7d931/nsW3XZu7vFdE/dPf1vxzz/54ZsWHHjohLxzZ3J3p145Ad6ZjkqvsW5J19vNM2erIV/40mCldh24IP3fF77QuYYyF59j7SzsXHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGHfMaf/9w//3o/2vVtL17vTGi6XaMpbPCyGZH0LYvmN4246NW64Y/MSVV23bMrxpcHjH4MiWHduuHTzzLwa3jWzdNHzt2L1D7zmj9rglIaktkxOmtN09Ojpa6p9cFtv7DyfvfmnFOf/v1yEMHfPTgUpu/1fetfmeo5v8zEhWj35w81UX/PSsr6Xb1Z/2q79Jv0ZHR0dDTr9+c9Hv7/nc/l+eEsLQn0zXrydf/KsfTurQeMFEnFSpO9Q61J30NO1Hvddpf+L+qmzYuGlkaPr9O/b4cs52/MfrXvndhms++/va/q3mbkeL+3f+6tFNpS+uPf8PX7y+VlDUr7fruBft77gVsX9x/1XT/b0w3a6FOdtVydmum3/86PM/OO7WN3aFocrry6a2XbRdXekA6Ere1VK7sYWeZPGk8mpaPx7x+LiVOzZvXbn92p3v2bh5+IqRK0a2vG/VmavOHjrr7LNWjm/5yg5vf2z/T1vc/oMznhb9y67vxZ+tjaeifhXtj7F+Fe+Pxh7lPf96Lvz059931xMX1AqKxnmsXT+fpMueseO8KjSMt6n7qtl2Fe2HEMJgs/3w2hvnhmP/18abis5DjUem8WdGsnr0meW//do5X136l7WCg3Keb+xQm+f5eq8n+jO+v6rp8Rid/f69IP+s0/7+7Q7ldLt6m/Zr1TNPdN2+79f/Wu/fvHnhmuEdO7atqv1ckPZ0QXJ8035lS+N2LRv/WQ7pbgn1YdpkvI7pCrX+Zc+fsfoJmRZ60/t6kyVNtysr3rd37e0ryuse35c3kpP7ay3OD321ZfLunJqbMg8s1zvcrP1D9flXND4GPvzVBz/64HfPnDI+Tq/9LNquJGe7vvP8vZ//xmf/83c7t10f/qtn+3/7v/95Ra3gcDmv1Hud9idpPK+cHkLR829ZaL4duc+/UvPtKXr+ZduZqN883mBmvTeU23q+nv5Iz6vnPXHz8tzn6/5Wn6/XT1orFzxfD5Xxk31+JZXJ/Zi759ekgZKsHn3qlqN2PXbDmuNqBUXjul672bg+o4X8I2e7fnjxCwNXDv6n/9m588Y3/+KBS342vPrfagXtH/fYl84c92q6f6vZ/ftUuoy9jnln4/597+VXblpfKz90r3/TZUH+E08l26/d+cnhTZtGtm1vbbtafT2N7WRHcbuvp/HstqRgu0pTtmvubrSyv/Keb6f1htD4fEv7X87GaPf51huStl4Xdv5o8YKPf+vWq/qnPCpt6NJSGr/UVvyfn/fsaxff+vUv58a/M8avtBV/+OUn71h29GW7c+PfnaTxq23FX73n2e6+A488mht/KPZ/flvxX/zAh35x3/MPvZIbP8T4ve3t/9d3n/3CwMCvcuM/l6TtjF0jhfDAm2dsqK0noSt9vsV+dE3qV8iuJ5n1Uma93Lheqs211hsoJ8nk8lgvLT+xoS/N/FNOebwKqy6tLd+K6yF7Y/ryQ02p4dzfrLzoOhUA4EgX3/+P16Dx/f+R9EIpf6YBJsw2D1uaEzfmYRPzOfMm3b80jR8fH+cBB94bhsaWNw7WLvRn+j5CfD5k5zljO6ecNDlGu/OcRfPvyzPrsV+1+fJKQx6amprXVEIL8+9T25l+/j2z+cXz44O3TOnWYMO8Vfb4daUzZs0+75Dpb2UsQt74yM6Lxc9zDCwMa8bba3F8ZD9HE49D9nM0sZ3jMifOdj9HM9vxEbs9zfgY73Lx+xtTj1+YZv9OHL/m0bLHbwbHuzpWf67fn+3AvGHTU9rBmzec2/fDzEvmxE+fYIf6vGEsj9tRaXE+8aM55Z2aT4yni9iv/dP05WAwnwgcqWL+H18jxvL/sQvw/5+pV3Qdmr1qjPFyPyc05R3emqK8I3t13ht62nodX7dn62e6Bw6cknud82irn/vZOmmtp+BzP0X7cUVmvXA/5kzQFOV72XaK9nv2cxm9oa+t/X7vrrvef8+i287N3e9rai+kxfv985PW+gr2+2GQLzSPL194R+QLcz1/9rblI+kHn+YqH/nHnPKZ5iM9U27Ut2vcYZePdB3cfgEAh4+Y/9ffP0vz//8TK6TXEUV566mZ9RgvN2/NuT7Jy1v/IV1ek6nfm/5GxUyvm88/+eGbFhx46ITcvOXuVvPQ/zJprb8wD51d3pybR6zpzOfFc/OIep41uzwxt//1PHF2eXpu/HqePrs8Onf/1PPo2c0D5MavzwMc7nluwXxdprG42up83RGbR6e/PjtXefSFOeUzzaN7p9yob9c4eTQAwNsr5v/xMi7m/09k6s32ffbcvKBD1+3ZvwdSj//cwcor5zrvm+u8da7z+rmel6jlxaVwuObFcz0vNLfzZO/4vDhtVF4MAMChLOb/89P1/Px/dvlJs/yta1J+Ij9vGv8Iy8+P2Petc+IfOvNf8v95IdwYy70v3pz8HwDgyBbz//hrj/Hv//23dD37d+sPszy9/lcG5Ony9OniHzp5eufn2YLPAby9n4+fP1HfPAAAAG+HrvFMaerv2X8sXWZ/zz7v9/Ivzqnfqkp6eXzZjm0jI5dctXX98I6RS7ZcuX5k+yVXb9u4Y8fIllq92eaNuXlLmjd2hUq6P5rXy+Zti9K/h7Ao5+8hZOvHsMeP35j69xCyzc4v+DsCE8evtf7mHb/SNPWbjY+8450X/59y6kf143/5P59+yYbtl2zcsnHHxuFNG3eOTK43lrX2zOB7M+NumdH3pWZ+TFGa+fd3dqYfpSn96Er3R973syeZfixOe7I47/sPcvr99P/43L+cPPr7+0IYOqb87ib9/sN0/Z4ccvXof71o5B927Pvp1rH+l6btf71m2q/c7yvNqR+3p7Lpyu07Tttw5VVb1k9tqA1xPqNUX5+j+Yz06V9ucX5iXU75TD+nUJ5y49DU8vwEAACTxPf/4/VsfP/ws+kFVCxvPU+f3fvHuXn6UGt5evZ7yYry9Gz9uL2t5unVWebp2faL8vRm9Zvl6Xl5d178f8ypP1Otj5PZfc4jd5xc2to4yX6fQdE4ydaf6ThJZjlOsu0XjZNm9ZuNk7zjnhf/Izn187Q+Hmb3uZzc8XBna+PhzzPrReMhW3+m46E0y/GQbb9oPDSr32w85B3fvPgX5NRv1eTxMTYwxsfFyCVXX7ntkw315vr7L8a8NKv+ze33f7Sr9f7P7ee+5r7/c/u5srnv/+w+V5bb/+dmNxPWev/n9vtd2nXQ5mvTD5sVff6saB537dQNGDfTedx5U24cmszjwtsn5v/x7Z6Y/9+WLjv9NlAnr5NGF03cPnjfk+Z7zJrG79D3mBVdxxz2r+epotfzXfdOru/1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODI0l1ZOr7cd/P2Axcc93dPf2rkzRv+/vubb/yz6775y8HL/+ap+3u+8dbe9Sdu+NnfHnX5w584d89dX3nsjb4H//hyYeD+8Z+VU9PVagjJq0kI1R/s/8Kn9z5z7FhZEkIoJ/27QlicLHlscZKJMPS7EML6ej8n3/nAm2dsGFveeFv3pPJFmSDZ7Qq95difxn6GcE3hFnEYqqbjbOeBq08LL/312pt+vOw73+7a/cquiSpJtWE8hbDw0sbHd4UQ5qf/x8TRtjQ+OF2uCSH0NDzunIJ+ndRi/1fmrB+fLuely96COPH+5Zn1UqZedj3qyix7Ctqbrbx+tFuvyILMevZkNFt5/Yzli9Pl99LlqTOMX47/k1BKQqXe/U3JxBgJDcctCcn4sazW10v1YxvS7c+sJ5n1Uma93JXZrvF204FWTpLJ5bFepjyejitp+YmN5+omLswpf1e6rKZP1LfiesjeqOmdcqO+XeNiv/ZP05eDodRwDmpWXj/w6cHoTct6kyVTHjPaRLxv79rbV5TXPb6vP6cfyf1JGj9pK/7OHy1e8PFv3XrV0rz4l5bS+KW24v/8vGdfu/jWr385N/6dMX65rfinP9Lz6nlP3Lw8d//sj/un0lb84ZefvGPZ0Zftzu3/3TF+teX488JE/NV7nu3uO/DIo7n9H4r7Z35b/X/xAx/6xX3PP/RKbvwQ4/e0FX/dnq2f6R44cEpu/Efj/ultb/y8vvvsFwYGfjWYF/+5GL+vrfj37rrr/fcsuu3c3OO7Ju6f/rbin3/ywzctOPDQCXnnzuTuTr1yArwzHZVeY92SrjfkmX0zyTNnqyFf+NJgpXbNtyD939fJhjLG2lk4h/EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgy/eT6Mz920Qc/sraShJDk1BltIt5Xnrd69WAb7Q6//OQdy46+bHdj2dI24gAAAADFYh5eqpdUw9JwdTI/HN+0fpwjOD6uJZPLs3MIMU52jqDdOKUOxSl3KE6lQ3G6OhRnXofidHcoTrUgTjW0Fmf+NHEqY6Oixf70TNuf1uP0dijOgg7F6etQnIUdirOoQ3H6p43T+jhc3KE4SzoU56gOxTm6Q3GO6VCcP+lQnGM7FCc7pzzTcdiX1jwuL874jXJhnEpSrt/RbD792LSdE2bZTm9BO31Fr8cttjO/xXZOyjyuNMN2qi2286ezbCdpsZ0/n2U7pYJ24ri9Jtu/2E5ca3H8X9uhODs7FOe6DsW5vkNx/rVDcf6tQ3FumGUcgFbF/H8i3+sP3ZW/DD3pGSc7CxDz3WXjP6e+3uWdkGK8d2fK5xXFyybqmXjLZtq/7ARCJt7yTHnXpHiVej4yTbxqY7wVmTsLtzc7oZDp36mZ8u6ieNmJBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYQz+5/syPXfTBj6wNSRj719RoE/G+8rzVqwfbaHfv2ttXlNc9vq+xrLvSRiAAAACgUMzDu+ol1dBdWRW6k3mT6lXTeYBqul7ury0HFoY1Y8tksDS+3pMsnvZxlfRxK3ds3rpy+7U737Nx8/AVI1eMbHnfqjNXnT101tlnrdywcdPIUO1nCN0F8UII49MP26/d+cnhTZtGtm2vFWb7vzR93NJ0PUkfN/DeMDS2vDHt/5KC9kpT2pu7G8VHDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/Z9fuQuS8yjiAn3dmdma6bcxKv6ah2Qz5KFGLJnErqZbuC4KFNglZCjJbXUuwCRY3TWiTEuvYBmxrgiK0BEIkF0ZisbV40w9bxH4QqNRowI1B2qK90Aul1UpaciEpI9mdMzszO5NZx9K06e93Me/MOc85z3vmYuH/7gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/pqqjkxURsfGB5MQki41tQ7iXDafpuU++n712e0/LAyfWtk8Vsj1sREAAADQU8zhA42RYijksiEbrpj+tDQ0TYTZ3A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHz0TFVHJiqjY+MXJiEkXWpqHcS5bD5Ny330ff3txz/3yvDw35vHSn3sAwAAAPQWc3imMVIMpbAsDCRXtNTFZwOL2ta318V9Fs+zrv3ZQbe6ZfOsu2qedZ/oUbehft0VAAAA4MMv5v9cY2QoFHILuub/Xrk+1i1pq8vWr/38VgAAAAD4/8T8X2iMlEIhV2rk9fnm/aVtdXF9r//bx/Uruqzv9f/89fWr/9MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIfHVHVkojI6Np5NQki61NQ6iHPZfJqW++i75rnBf9505IGlzWOFXB8bAQAAAD3FHD4bvYuhkBsMA+HC6dw/fMPBJ7/85NMjIYSZmJ/Ph12bduy4c83Ma6xbffTIwA9eevM7c+pWz7yeswMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvmanqyERldGz8giSEpEtNrYM4l82nabmPvq994Ut/ffTEM280j5X62AcAAADoLebw2exfDKWQD/lw2fSn5qx/RqZtfbdnBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD5465v3fPNTZOTm+/0xhtvvGm8Odd/mQAAgPfakpCE2v/o8o3n+q4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAPgqnqyERldGy8mISQdKmpdRDnsvk0LffRN332WGHBqedeaB4r9bEPAAAA0FvM4bPZvxhKYSAMhEunP3V6JjCd/4fex5sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPlCmqiMTldGx8QVJCEmXmloHcS6bT9NyH30f2X3g84cXfv/G5rFCro+NAAAAgJ5iDs83RoqhkPtkKIQr658nWxck2fq183OB2XXbW5YNzntdtWVddt7r9rSdLFc/zcy6YtxvaObaWFeeu67ctK4UGu3LLevCvpZVC3rcZwAAAIBzKOb/QmNkKBRyhaac+7OW+iE5FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoYqo6MlEZHRtPkhCSLjW1DuJcNp+m5T763vO7j1/0tZ/v3dk8VupjHwAAAKC3mMNns38xlMLi8LGweDr3h6HW+lj3r8rpww//+28rQ1h12fHhXPu2P45vfvPa9c+3v4SQaa3OhLCw3i/p0u+3f3j47uW104+GsOrS7JVz+oWz92vdMq09Vdm8fsf2sL3HlwMAAADniZj/BxojQ6GQu6Nr/o/Ju0f+b5gO4Avv3v3LS+qv9UTetiIzVO+X6dLvi8sf/8uKtf9480z+P1u/zxzYeviSloYzI22StDa6deeG49ccysRTz/TPtvWP38tXvv3Gf7bseuj0TP9iKNbHF+U69Z/72uaCtDaZ2T++7t391db+uS7nf+D3L5z49aK975zp//aSwUb/q85y/rP3H7z5wX3XHjiyobV/CKHcqf9b79wYLv/T7fe3n3+wbePmb775tU2S1o4uPXlo7cHSda39k7b+8fv/xYlH9v30oe89HfvH34qsXDbf/pm2/i/vuXj3i/dtXNTaP9Pl/M/f8srwtvJ3/9h+/ttads11vYu553/s6idufXVTem/7FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPllqjoyURkdG88kISRdamodxLlsPk3LffR9/aZjb92y9yc/ah4r9bEPAAAA0FvM4bPZvxhKIR/yYXA69z9V2bx+x0vHt4ehmdmkfs1Nbrtrx6e2bNt5x23n6M4BAACA+Yr5P9cYGQqF3PIwUM//o1t3bjh+zaFMzP+ZmP+33D65eVVo1L285+LdL963cVHjOUEI0z8LKJ6p++xs3Q3XHxs6+edvrOhYt2a27ujSk4fWHixdF+tCc93q0Hg+8djVT9z66qb03sb9Ndd9+uvbJuuPJ+K+gzc/uO/aA0c2NM5Rvw7W9411k5n94+ve3V+Nddn6tVg/NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw11R1ZKIyOjYesiEkXWpqHcS5bD5Ny330Xbf8V/dfdOqZxc1jhVwfGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsJ+3YVIWf1xAD9nZve/486u7uof2orW1YrCLpKCiLqpqAgNEboyJCzNiygIIgq7aA2NxIpugqwbiQqqLYSC3CTRYo3epJsuKiiwLgJZWigXCXphZ88ZZ5+dp7XRguLzgeHMOTPP9/k955x5ZgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Ffp6RpqtEd2PjC97rybPn7s7hOP3vLufdsveeS170c23/DRvt6XT05sWbH1qxuXbT5wz5rxPS8c/rn/7d+OLRj88GyzKnVrIcTJGELtvalnH5/45JyZsRhCqMaB0RAG49LDg7GQsPqXEMKWZp1zX3zrxJVbZ9rtu3vmjC8phBSvK9SruZ5ZA3Pr5b+llvbZtumHLgvfXL9hx2fL33yje+z46Km3xFrLfgph8abW47tDCIvSY0bebUP54NSuDyH0thx39QJ1XXia9V9e0j8/tf9LbX2BnPz6ykK/UnhfsZ91h/DrujQfoXCtf4eyOuaaPGvn6yv0izejM1V2PXl8MLXvpHbVX8yv5kcMlRi6muXfG0/tkdCybjHExlrWmv1Kc21Duv5CPxb6lUK/2l24rsZ500arxjh3PL+vMJ5vx11pfEXrvbqN20rGz01tLX1QT+Z+KD6ZVZ/3pHldDbmuqT+p5Z9QabkHtRtvLnxajHoaq8el8475vY382sSGJy+ubnz/yEBJHXFfTPlx4fyBMC9/26eDfXe8vuvBobL8TZWUX+mo/m/XHv3x9l0vPl+a/0zOr3aUf8XB3sm1H+xc2WZ+Fjfyp/L8dHWUf+exD59a/v+7xtqtdSN/b86vdZR/3fjRnv7pg4dK13d1np9FHeV/fe3N3736xf7jpfkh5/d2lL9x/P6ne4anLy3NPzT7Uag3dmgH++ensau+HB7+YaQs//M8//1t8uOC+a+M7rnmpSW715Tuz/V5fgY6qv/Wiw7s6Jvef0HZvTPuPb1vWADaW5Z+Yz2R+p3+zzxTLf8Xnhvpmv0G6kuP/rN5ooKYf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzBDhwLAAAAAAjzt+4NYgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKQAA//8bsSk5") 5.248844767s ago: executing program 1 (id=444): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000890) io_setup(0x5, &(0x7f0000000e80)=0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000080)='d', 0x2}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000540)={[{@journal_checksum}, {@barrier}, {@data_writeback}, {@discard}, {@nodiscard}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x9c6}}]}, 0x1, 0x263, &(0x7f0000000600)="$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") mount$bind(&(0x7f0000000040)='./file2\x00', &(0x7f0000000480)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 4.256801538s ago: executing program 3 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4454, &(0x7f0000004480)="$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") open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1b8) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabf, &(0x7f0000002340)="$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") ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x2401}) syz_io_uring_setup(0x1725, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x400400, 0x23456}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x7, 0x1, 0x5, 0x6, 0x52, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0xd615, 0x2, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fe, 0x1}}, {0x0, 0x11}}}, 0xa0) link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000000)='./bus/file0\x00', 0x406600, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x800}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x104) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3, @ANYRES8, @ANYRES16=r4, @ANYRES16=r5], 0x0) flock(r2, 0x2) 3.361855394s ago: executing program 4 (id=446): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x200004, 0x804, 0x4, 0xf, 0x120000, 0x7f, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x6, 0x1], 0xffff1000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x20, 0x0, 0x80, 0x0, 0x0, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.102441279s ago: executing program 1 (id=447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000019c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioperm(0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r0, 0x0) timer_create(0x1, &(0x7f0000001980)={0x0, 0xd, 0x4, @tid=0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="05000020000000000000ed000007"], 0x84}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082bbd7000fedbdf253f0000000c009900ff0100003600000044005e800800070098030000080007009903000008000100e100000018000100000000000800000001800000080000000500000008000300010000000800090003000000"], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000080) 0s ago: executing program 4 (id=448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x62) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[], 0x4000) process_mrelease(r2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7fc}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r3, 0x0, 0x6, 0x5}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r3, 0x0, &(0x7f0000000200)='W', 0x1, 0x7a}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xcc, 0x0, 0x1}) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) kernel console output (not intermixed with test programs): ted [ 423.405347][ T1849] kernel write not supported for file /input/event2 (pid: 1849 comm: kworker/0:2) [ 424.047175][ T5839] usb 2-1: failed to send control message: -71 [ 424.054107][ T5839] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 424.284220][ T5839] usb 2-1: USB disconnect, device number 21 [ 424.294790][ T5839] ch341 2-1:0.0: device disconnected [ 424.380402][ T6734] loop0: detected capacity change from 0 to 32768 [ 424.486684][ T6734] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 424.822877][ T6730] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 424.880549][ T6734] XFS (loop0): Ending clean mount [ 424.957695][ T6730] EXT4-fs (loop1): Remounting filesystem read-only [ 425.158833][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.201689][ T1849] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 425.446205][ T1849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.458052][ T1849] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 425.472385][ T1849] usb 1-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 425.481770][ T1849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.300828][ T6748] loop3: detected capacity change from 0 to 32768 [ 426.316157][ T1849] usb 1-1: config 0 descriptor?? [ 426.433062][ T6748] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 426.472567][ T1849] usb 1-1: can't set config #0, error -71 [ 426.587157][ T6748] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 426.614269][ T5788] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 426.615209][ T1849] usb 1-1: USB disconnect, device number 18 [ 426.780035][ T6748] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 426.800921][ T6748] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 426.812623][ T6748] OCFS2: File system is now read-only. [ 426.818322][ T6748] (syz.3.244,6748,0):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 427.243270][ T5835] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 427.484134][ T5835] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 427.498431][ T5835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.599455][ T5835] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 427.609406][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 427.617973][ T5835] usb 4-1: SerialNumber: syz [ 427.964806][ T1849] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 428.138538][ T5839] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 428.174150][ T1849] usb 2-1: unable to get BOS descriptor or descriptor too short [ 428.196088][ T1849] usb 2-1: not running at top speed; connect to a high speed hub [ 428.242811][ T1849] usb 2-1: config 3 has an invalid interface number: 1 but max is 0 [ 428.251455][ T1849] usb 2-1: config 3 has no interface number 0 [ 428.258248][ T1849] usb 2-1: config 3 interface 1 has no altsetting 0 [ 428.336906][ T1849] usb 2-1: New USB device found, idVendor=1b80, idProduct=e421, bcdDevice=35.5d [ 428.346714][ T1849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.355382][ T1849] usb 2-1: Product: syz [ 428.360014][ T1849] usb 2-1: Manufacturer: syz [ 428.365467][ T1849] usb 2-1: SerialNumber: syz [ 428.395550][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.407228][ T5839] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 428.422031][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.537986][ T5839] usb 5-1: config 0 descriptor?? [ 428.727396][ T1849] cx231xx 2-1:3.1: New device syz syz @ 12 Mbps (1b80:e421) with 1 interfaces [ 428.736968][ T1849] cx231xx 2-1:3.1: Not found matching IAD interface [ 428.859685][ T1849] usb 2-1: USB disconnect, device number 22 [ 429.058245][ T5839] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 429.122105][ T6767] loop2: detected capacity change from 0 to 2048 [ 429.155578][ T5839] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input9 [ 429.301781][ T6767] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 429.427024][ T5839] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 429.480166][ T6771] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.519703][ T6770] loop0: detected capacity change from 0 to 512 [ 429.712559][ T30] audit: type=1800 audit(1742677854.678:12): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.237" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 429.747142][ T5835] usb 4-1: 0:2 : does not exist [ 429.752576][ T5835] usb 4-1: unit 5: unexpected type 0x0a [ 429.806094][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 430.001632][ T5835] usb 4-1: USB disconnect, device number 16 [ 430.931405][ T6570] udevd[6570]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.523776][ T5835] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 431.616665][ T1849] usb 5-1: USB disconnect, device number 13 [ 431.808275][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.823423][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 431.833620][ T5835] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.971048][ T5835] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.980834][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.990169][ T5835] usb 1-1: Product: syz [ 431.998172][ T5835] usb 1-1: Manufacturer: syz [ 432.004233][ T5835] usb 1-1: SerialNumber: syz [ 432.362834][ T6785] loop4: detected capacity change from 0 to 512 [ 432.429946][ T5835] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 432.437646][ T5835] cdc_ncm 1-1:1.0: bind() failure [ 432.472786][ T6785] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 432.728001][ T6785] EXT4-fs (loop4): 1 orphan inode deleted [ 432.734579][ T6785] EXT4-fs (loop4): 1 truncate cleaned up [ 432.742284][ T6785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.133237][ T5835] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 433.399592][ T5835] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 433.409273][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.418250][ T5835] usb 5-1: Product: syz [ 433.422795][ T5835] usb 5-1: Manufacturer: syz [ 433.431439][ T5835] usb 5-1: SerialNumber: syz [ 433.542308][ T5835] usb 5-1: config 0 descriptor?? [ 433.607194][ T5835] ch341 5-1:0.0: ch341-uart converter detected [ 434.362305][ T5835] usb 5-1: failed to send control message: -71 [ 434.369256][ T5835] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 434.618860][ T5835] usb 5-1: USB disconnect, device number 14 [ 434.628229][ T5835] ch341 5-1:0.0: device disconnected [ 434.709508][ T6808] loop3: detected capacity change from 0 to 32768 [ 434.780041][ T6808] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 434.922071][ T6808] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 435.139908][ T6808] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 435.161093][ T6808] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 435.176964][ T6808] OCFS2: File system is now read-only. [ 435.184615][ T6808] (syz.3.261,6808,1):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 435.356801][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.410458][ T45] usb 1-1: USB disconnect, device number 19 [ 435.533071][ T5839] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 435.584616][ T5837] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 435.744171][ T5839] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 435.755325][ T5839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.805029][ T5837] usb 3-1: unable to get BOS descriptor or descriptor too short [ 435.817752][ T6820] loop0: detected capacity change from 0 to 128 [ 435.828165][ T5837] usb 3-1: not running at top speed; connect to a high speed hub [ 435.859434][ T5839] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 435.869250][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.877880][ T5839] usb 4-1: SerialNumber: syz [ 435.915077][ T5837] usb 3-1: config 3 has an invalid interface number: 1 but max is 0 [ 435.923618][ T5837] usb 3-1: config 3 has no interface number 0 [ 435.930114][ T5837] usb 3-1: config 3 interface 1 has no altsetting 0 [ 436.033928][ T5837] usb 3-1: New USB device found, idVendor=1b80, idProduct=e421, bcdDevice=35.5d [ 436.043699][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.052106][ T5837] usb 3-1: Product: syz [ 436.056840][ T5837] usb 3-1: Manufacturer: syz [ 436.061718][ T5837] usb 3-1: SerialNumber: syz [ 436.406591][ T5837] cx231xx 3-1:3.1: New device syz syz @ 12 Mbps (1b80:e421) with 1 interfaces [ 436.419010][ T5837] cx231xx 3-1:3.1: Not found matching IAD interface [ 436.495970][ T5837] usb 3-1: USB disconnect, device number 14 [ 436.955302][ T6823] loop1: detected capacity change from 0 to 2048 [ 437.005155][ T6823] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 437.211062][ T6826] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 437.362182][ T30] audit: type=1800 audit(1742677862.288:13): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 437.910195][ T5839] usb 4-1: 0:2 : does not exist [ 437.915623][ T5839] usb 4-1: unit 5: unexpected type 0x0a [ 438.013725][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 438.095226][ T5839] usb 4-1: USB disconnect, device number 17 [ 438.850019][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.924857][ T6841] loop1: detected capacity change from 0 to 512 [ 438.988572][ T6841] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 439.188672][ T6841] EXT4-fs (loop1): 1 orphan inode deleted [ 439.195123][ T6841] EXT4-fs (loop1): 1 truncate cleaned up [ 439.248110][ T6841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.488108][ T5835] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 439.712018][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.722877][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 439.732105][ T5835] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.744104][ T5839] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 439.848999][ T5835] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.858799][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.868372][ T5835] usb 1-1: Product: syz [ 439.872957][ T5835] usb 1-1: Manufacturer: syz [ 439.881730][ T5835] usb 1-1: SerialNumber: syz [ 439.993048][ T5835] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 440.000525][ T5835] cdc_ncm 1-1:1.0: bind() failure [ 440.062111][ T5839] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 440.072006][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.080741][ T5839] usb 2-1: Product: syz [ 440.090631][ T5839] usb 2-1: Manufacturer: syz [ 440.097919][ T5839] usb 2-1: SerialNumber: syz [ 440.244119][ T5839] usb 2-1: config 0 descriptor?? [ 440.278109][ T5839] ch341 2-1:0.0: ch341-uart converter detected [ 440.530403][ T6858] FAULT_INJECTION: forcing a failure. [ 440.530403][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 440.544136][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.3.271 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 440.544292][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 440.544381][ T6858] Call Trace: [ 440.544437][ T6858] [ 440.544490][ T6858] dump_stack_lvl+0x216/0x2d0 [ 440.544660][ T6858] dump_stack+0x1e/0x24 [ 440.544785][ T6858] should_fail_ex+0x767/0x830 [ 440.544996][ T6858] should_failslab+0x17f/0x210 [ 440.545195][ T6858] __kmalloc_cache_noprof+0xc5/0xdf0 [ 440.545363][ T6858] ? kmsan_get_metadata+0x13e/0x1c0 [ 440.545561][ T6858] ? __se_sys_memfd_create+0x534/0x11e0 [ 440.545714][ T6858] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 440.545924][ T6858] ? kmsan_get_metadata+0x13e/0x1c0 [ 440.546129][ T6858] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 440.546338][ T6858] __se_sys_memfd_create+0x534/0x11e0 [ 440.546512][ T6858] __x64_sys_memfd_create+0x6c/0xa0 [ 440.546673][ T6858] x64_sys_call+0x3b63/0x3c30 [ 440.546837][ T6858] do_syscall_64+0xcd/0x1e0 [ 440.547021][ T6858] ? clear_bhb_loop+0x25/0x80 [ 440.547211][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.547406][ T6858] RIP: 0033:0x7f8d4f38d169 [ 440.547523][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.547668][ T6858] RSP: 002b:00007f8d502afe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 440.547809][ T6858] RAX: ffffffffffffffda RBX: 0000000000005966 RCX: 00007f8d4f38d169 [ 440.547911][ T6858] RDX: 00007f8d502afef0 RSI: 0000000000000000 RDI: 00007f8d4f40ec3c [ 440.548009][ T6858] RBP: 000020000000b640 R08: 00007f8d502afbb7 R09: 00007f8d502afe40 [ 440.548112][ T6858] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 440.548204][ T6858] R13: 00007f8d502afef0 R14: 00007f8d502afeb0 R15: 0000200000000380 [ 440.548329][ T6858] [ 440.985182][ T5839] usb 2-1: failed to send control message: -71 [ 440.992924][ T5839] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 441.034225][ T5839] usb 2-1: USB disconnect, device number 23 [ 441.068074][ T6851] loop2: detected capacity change from 0 to 4096 [ 441.105751][ T5839] ch341 2-1:0.0: device disconnected [ 441.198655][ T6862] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 441.664885][ T6866] netlink: 'syz.4.279': attribute type 4 has an invalid length. [ 441.731329][ T6848] syz.2.276 (6848) used greatest stack depth: 4328 bytes left [ 441.844859][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.035104][ T6871] loop1: detected capacity change from 0 to 32768 [ 443.186463][ T5839] usb 1-1: USB disconnect, device number 20 [ 443.199204][ T6871] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 443.379819][ T6871] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 443.559006][ T6871] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 443.583624][ T6871] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 443.593891][ T6871] OCFS2: File system is now read-only. [ 443.599610][ T6871] (syz.1.281,6871,0):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 443.616775][ T6873] loop4: detected capacity change from 0 to 2048 [ 443.726233][ T6873] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 443.835239][ T6883] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.902692][ T30] audit: type=1800 audit(1742677868.868:14): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.283" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 444.002876][ T5835] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 444.201172][ T5835] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 444.215499][ T5835] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.216491][ T5839] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 444.331740][ T5835] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 444.341388][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 444.349921][ T5835] usb 2-1: SerialNumber: syz [ 444.527181][ T5839] usb 4-1: config 0 has an invalid interface number: 42 but max is 0 [ 444.535875][ T5839] usb 4-1: config 0 has no interface number 0 [ 444.549176][ T5839] usb 4-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.ae [ 444.559096][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.732867][ T5839] usb 4-1: config 0 descriptor?? [ 444.764700][ T5839] usb-storage 4-1:0.42: USB Mass Storage device detected [ 444.823963][ T6892] netlink: 96 bytes leftover after parsing attributes in process `syz.0.288'. [ 444.843183][ T5839] usb-storage 4-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 444.851300][ T5839] usb-storage 4-1:0.42: This device (04cb,0100,00ae S 04 P e0) has an unneeded SubClass entry in unusual_devs.h (kernel 6.14.0-rc7-syzkaller-00196-g88d324e69ea9) [ 444.851300][ T5839] Please send a copy of this message to and [ 445.023716][ T5839] usb 4-1: USB disconnect, device number 18 [ 445.069917][ T5996] udevd[5996]: setting owner of /dev/bus/usb/004/018 to uid=0, gid=0 failed: No such file or directory [ 445.372994][ T5837] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 445.395518][ T1849] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 445.763173][ T1849] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 445.773345][ T1849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.781888][ T1849] usb 1-1: Product: syz [ 445.786819][ T1849] usb 1-1: Manufacturer: syz [ 445.791910][ T1849] usb 1-1: SerialNumber: syz [ 446.067603][ T1849] usb 1-1: config 0 descriptor?? [ 446.169943][ T1849] ch341 1-1:0.0: ch341-uart converter detected [ 446.288800][ T6898] loop4: detected capacity change from 0 to 32768 [ 446.312956][ T6898] bcachefs (/dev/loop4): error validating superblock: Invalid option erasure_code: too big (max 2) [ 446.324747][ T6898] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big [ 446.451380][ T1849] usb 1-1: failed to receive control message: -71 [ 446.458654][ T1849] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 446.849523][ T1849] usb 1-1: USB disconnect, device number 21 [ 446.858774][ T1849] ch341 1-1:0.0: device disconnected [ 446.887036][ T5835] usb 2-1: 0:2 : does not exist [ 446.892264][ T5835] usb 2-1: unit 5: unexpected type 0x0a [ 446.992981][ T5837] usb 3-1: config 3 has an invalid interface number: 138 but max is 0 [ 447.001639][ T5837] usb 3-1: config 3 has no interface number 0 [ 447.008301][ T5837] usb 3-1: too many endpoints for config 3 interface 138 altsetting 86: 175, using maximum allowed: 30 [ 447.019877][ T5837] usb 3-1: config 3 interface 138 altsetting 86 has 0 endpoint descriptors, different from the interface descriptor's value: 175 [ 447.034529][ T5837] usb 3-1: config 3 interface 138 has no altsetting 0 [ 447.122981][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 447.204741][ T5837] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 447.214597][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.223708][ T5837] usb 3-1: Product: syz [ 447.228146][ T5837] usb 3-1: Manufacturer: syz [ 447.233257][ T5837] usb 3-1: SerialNumber: syz [ 447.313488][ T5835] usb 2-1: USB disconnect, device number 24 [ 447.499233][ T6901] loop3: detected capacity change from 0 to 512 [ 447.629190][ T5837] usb-storage 3-1:3.138: USB Mass Storage device detected [ 447.631394][ T6901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 447.847215][ T6901] EXT4-fs (loop3): 1 orphan inode deleted [ 447.853966][ T6901] EXT4-fs (loop3): 1 truncate cleaned up [ 447.861654][ T6901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.075266][ T6909] loop4: detected capacity change from 0 to 2048 [ 448.180597][ T6909] hpfs: Bad version 183,140. Mount readonly to go around [ 448.188438][ T6909] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 448.543536][ T6907] loop0: detected capacity change from 0 to 32768 [ 448.573111][ T5837] usb 3-1: USB disconnect, device number 15 [ 448.580124][ T6907] bcachefs (/dev/loop0): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 3) [ 448.603319][ T6907] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size [ 448.733662][ T1849] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 449.084031][ T1849] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 449.098201][ T1849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.107877][ T1849] usb 4-1: Product: syz [ 449.112605][ T1849] usb 4-1: Manufacturer: syz [ 449.117474][ T1849] usb 4-1: SerialNumber: syz [ 449.315812][ T1849] usb 4-1: config 0 descriptor?? [ 449.347385][ T1849] ch341 4-1:0.0: ch341-uart converter detected [ 449.717152][ T5837] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 449.946000][ T5837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.956778][ T5837] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 449.966368][ T5837] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.058280][ T1849] usb 4-1: failed to send control message: -71 [ 450.065014][ T1849] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 450.111427][ T5837] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.126731][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.137035][ T5837] usb 3-1: Product: syz [ 450.141499][ T5837] usb 3-1: Manufacturer: syz [ 450.146630][ T5837] usb 3-1: SerialNumber: syz [ 450.148350][ T1849] usb 4-1: USB disconnect, device number 19 [ 450.161027][ T1849] ch341 4-1:0.0: device disconnected [ 450.242863][ T5837] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 450.250370][ T5837] cdc_ncm 3-1:1.0: bind() failure [ 451.199068][ T6923] loop1: detected capacity change from 0 to 32768 [ 451.216048][ T6923] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_v2: journal buckets entry with bad nr: 9+0 [ 451.216048][ T6923] journal_v2 (size 40): [ 451.216048][ T6923] Buckets: 9-9 24-25 [ 451.216048][ T6923] [ 451.240805][ T6923] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 451.435588][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.609869][ T6570] udevd[6570]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.832552][ T6936] loop1: detected capacity change from 0 to 32768 [ 452.917636][ T6938] loop3: detected capacity change from 0 to 2048 [ 452.965208][ T6936] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 453.047670][ T6938] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 453.128823][ T6936] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 453.186009][ T6941] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 453.322885][ T6936] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 453.342712][ T6936] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 453.353076][ T6936] OCFS2: File system is now read-only. [ 453.358785][ T6936] (syz.1.302,6936,1):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 453.433323][ T30] audit: type=1800 audit(1742677878.388:15): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.300" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 453.513518][ T1849] usb 3-1: USB disconnect, device number 16 [ 453.763890][ T5837] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 454.031769][ T5837] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 454.042845][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.127163][ T6949] loop2: detected capacity change from 0 to 8 [ 454.299095][ T5837] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 454.309862][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 454.324085][ T5837] usb 2-1: SerialNumber: syz [ 454.452059][ T6945] loop0: detected capacity change from 0 to 32768 [ 454.683488][ T6945] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,journal_reclaim_delay=1000,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 454.708990][ T6945] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 454.718804][ T6945] bcachefs (loop0): Version upgrade required: [ 454.718804][ T6945] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 454.718804][ T6945] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 454.718804][ T6945] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 454.795293][ T6945] bcachefs (loop0): dropping and reconstructing all alloc info [ 454.890697][ T6945] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 454.890813][ T6945] mode=100740 [ 454.890880][ T6945] flags=(5300000) [ 454.890945][ T6945] journal_seq=4 [ 454.891010][ T6945] hash_seed=d483206f1ed95abf [ 454.891083][ T6945] hash_type=siphash [ 454.891150][ T6945] bi_size=100 [ 454.891212][ T6945] bi_sectors=8 [ 454.891276][ T6945] bi_version=1126999418470400 [ 454.891347][ T6945] bi_atime=0 [ 454.891411][ T6945] bi_ctime=0 [ 454.891473][ T6945] bi_mtime=0 [ 454.891543][ T6945] bi_otime=2780562352 [ 454.891611][ T6945] bi_uid=2780562352 [ 454.891675][ T6945] bi_gid=0 [ 454.891736][ T6945] bi_nlink=0 [ 454.891802][ T6945] bi_generation=0 [ 454.891865][ T6945] bi_dev=0 [ 454.891930][ T6945] bi_data_checksum=0 [ 454.891996][ T6945] bi_compression=0 [ 454.892059][ T6945] bi_project=0 [ 454.892127][ T6945] bi_background_compression=0 [ 454.892195][ T6945] bi_data_replicas=0 [ 454.892265][ T6945] bi_promote_target=0 [ 454.892581][ T6945] bi_foreground_target=0 [ 454.892654][ T6945] bi_background_target=0 [ 454.892722][ T6945] bi_erasure_code=0 [ 454.892790][ T6945] bi_fields_set=0 [ 454.892853][ T6945] bi_dir=0 [ 454.892914][ T6945] bi_dir_offset=0 [ 454.892980][ T6945] bi_subvol=0 [ 454.893046][ T6945] bi_parent_subvol=0 [ 454.893109][ T6945] bi_nocow=0 [ 454.893173][ T6945] bi_depth=0 [ 454.893237][ T6945] bi_inodes_32bit=0 [ 454.893305][ T6945] invalid fields_start (got 0, min 6 max 13): deleting [ 455.095097][ T6945] bcachefs (loop0): accounting_read... done [ 455.102246][ T6945] bcachefs (loop0): alloc_read... done [ 455.108361][ T6945] bcachefs (loop0): stripes_read... done [ 455.114771][ T6945] bcachefs (loop0): snapshots_read... done [ 455.121363][ T6945] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 455.144709][ T6945] bcachefs (loop0): done starting filesystem [ 455.323534][ T5788] bcachefs (loop0): shutting down [ 455.556277][ T5788] bcachefs (loop0): shutdown complete [ 455.936705][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.307'. [ 455.946021][ T6959] tipc: Started in network mode [ 455.951122][ T6959] tipc: Node identity 7, cluster identity 5 [ 455.961851][ T6959] tipc: Node number set to 7 [ 456.309803][ T6964] loop3: detected capacity change from 0 to 512 [ 456.358846][ T5837] usb 2-1: 0:2 : does not exist [ 456.372242][ T5837] usb 2-1: unit 5: unexpected type 0x0a [ 456.405113][ T6964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 456.413226][ T6964] EXT4-fs: Ignoring removed i_version option [ 456.520550][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 456.584327][ T5837] usb 2-1: USB disconnect, device number 25 [ 456.699718][ T6964] EXT4-fs (loop3): 1 orphan inode deleted [ 456.708649][ T6964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.860475][ T6570] udevd[6570]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.114295][ T6963] loop2: detected capacity change from 0 to 4096 [ 457.216530][ T6968] loop1: detected capacity change from 0 to 512 [ 457.304356][ T6968] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 457.516039][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.561587][ T6968] EXT4-fs (loop1): 1 orphan inode deleted [ 457.568259][ T6968] EXT4-fs (loop1): 1 truncate cleaned up [ 457.576332][ T6968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.863507][ T6963] ntfs3(loop2): failed to convert "0080" to cp860 [ 458.053786][ T1849] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 458.359468][ T1849] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 458.369501][ T1849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.377973][ T1849] usb 2-1: Product: syz [ 458.382524][ T1849] usb 2-1: Manufacturer: syz [ 458.387409][ T1849] usb 2-1: SerialNumber: syz [ 458.659539][ T1849] usb 2-1: config 0 descriptor?? [ 458.774157][ T1849] ch341 2-1:0.0: ch341-uart converter detected [ 458.944792][ T6976] loop3: detected capacity change from 0 to 32768 [ 458.958347][ T5837] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 458.977798][ T6976] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section journal_v2: journal bucket 9 before first bucket 10 [ 458.977798][ T6976] journal_v2 (size 40): [ 458.977798][ T6976] Buckets: 9-16 24-25 [ 458.977798][ T6976] [ 459.003976][ T6976] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 459.501569][ T1849] usb 2-1: failed to send control message: -71 [ 459.508502][ T1849] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 459.808880][ T1849] usb 2-1: USB disconnect, device number 26 [ 459.817912][ T1849] ch341 2-1:0.0: device disconnected [ 460.552268][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.594711][ T1849] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 461.268708][ T6984] loop4: detected capacity change from 0 to 2048 [ 461.410109][ T6984] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 461.606871][ T6988] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 461.641226][ T6985] loop2: detected capacity change from 0 to 32768 [ 461.662922][ T6985] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section journal_v2: journal bucket 9 before first bucket 10 [ 461.662922][ T6985] journal_v2 (size 40): [ 461.662922][ T6985] Buckets: 9-16 24-25 [ 461.662922][ T6985] [ 461.688041][ T6985] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 461.767500][ T1849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.777267][ T30] audit: type=1800 audit(1742677886.698:16): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.316" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 461.778033][ T1849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.253174][ T1849] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.262819][ T1849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.271141][ T1849] usb 4-1: Product: syz [ 462.275857][ T1849] usb 4-1: Manufacturer: syz [ 462.280743][ T1849] usb 4-1: SerialNumber: syz [ 462.300011][ T1849] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 462.313638][ T1849] cdc_ncm 4-1:1.0: bind() failure [ 463.451927][ T6992] loop2: detected capacity change from 0 to 32768 [ 463.537907][ T6993] loop1: detected capacity change from 0 to 32768 [ 464.688078][ T7013] loop4: detected capacity change from 0 to 32768 [ 464.695611][ T1849] usb 4-1: USB disconnect, device number 20 [ 464.784707][ T6993] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 464.786685][ T6992] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 464.794407][ T6993] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 464.816942][ T6992] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 464.833596][ T6992] bcachefs (loop2): Version upgrade required: [ 464.833596][ T6992] Version upgrade from 0.10: bkey_renumber to 1.7: mi_btree_bitmap incomplete [ 464.833596][ T6992] Doing incompatible version upgrade from 0.10: bkey_renumber to 1.20: directory_size [ 464.833596][ T6992] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 464.910397][ T6992] bcachefs (loop2): dropping and reconstructing all alloc info [ 464.924604][ T6992] bcachefs (loop2): insufficient writeable journal devices available: have 0, need 1 [ 464.924604][ T6992] rw journal devs: loop2 [ 464.944273][ T7013] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 465.018890][ T6992] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 465.019004][ T6992] mode=100740 [ 465.019074][ T6992] flags=(5300000) [ 465.019139][ T6992] journal_seq=4 [ 465.019201][ T6992] hash_seed=d483206f1ed95abf [ 465.019269][ T6992] hash_type=siphash [ 465.019331][ T6992] bi_size=100 [ 465.019415][ T6992] bi_sectors=8 [ 465.019479][ T6992] bi_version=1126999418470400 [ 465.019551][ T6992] bi_atime=0 [ 465.019612][ T6992] bi_ctime=0 [ 465.019673][ T6992] bi_mtime=0 [ 465.019735][ T6992] bi_otime=2780562352 [ 465.019803][ T6992] bi_uid=2780562352 [ 465.019867][ T6992] bi_gid=0 [ 465.019931][ T6992] bi_nlink=0 [ 465.019992][ T6992] bi_generation=0 [ 465.020058][ T6992] bi_dev=0 [ 465.020124][ T6992] bi_data_checksum=0 [ 465.020188][ T6992] bi_compression=0 [ 465.020252][ T6992] bi_project=0 [ 465.020318][ T6992] bi_background_compression=0 [ 465.020492][ T6992] bi_data_replicas=0 [ 465.020562][ T6992] bi_promote_target=0 [ 465.020631][ T6992] bi_foreground_target=0 [ 465.020698][ T6992] bi_background_target=0 [ 465.020768][ T6992] bi_erasure_code=0 [ 465.020832][ T6992] bi_fields_set=0 [ 465.020898][ T6992] bi_dir=0 [ 465.020959][ T6992] bi_dir_offset=0 [ 465.021025][ T6992] bi_subvol=0 [ 465.021095][ T6992] bi_parent_subvol=0 [ 465.021159][ T6992] bi_nocow=0 [ 465.021220][ T6992] bi_depth=0 [ 465.021284][ T6992] bi_inodes_32bit=0 [ 465.021353][ T6992] invalid fields_start (got 0, min 6 max 13): deleting [ 465.335011][ T7013] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 465.417018][ T6993] bcachefs: bch2_fs_get_tree() error: EINVAL [ 465.593179][ T7013] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 465.613114][ T7013] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 465.623409][ T7013] OCFS2: File system is now read-only. [ 465.629111][ T7013] (syz.4.320,7013,1):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 465.695229][ T6992] bcachefs (loop2): accounting_read... done [ 465.720385][ T6992] bcachefs (loop2): alloc_read... done [ 465.726531][ T6992] bcachefs (loop2): stripes_read... done [ 465.732938][ T6992] bcachefs (loop2): snapshots_read... done [ 465.739517][ T6992] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 465.751910][ T6992] bcachefs (loop2): done starting filesystem [ 465.959956][ T5794] bcachefs (loop2): shutting down [ 466.050863][ T5794] bcachefs (loop2): shutdown complete [ 466.340843][ T5837] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 466.541356][ T5837] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 466.552643][ T5837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.575377][ T5837] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.585338][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.593825][ T5837] usb 5-1: SerialNumber: syz [ 467.098593][ T7030] loop3: detected capacity change from 0 to 512 [ 467.214018][ T7030] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 467.420953][ T7030] EXT4-fs (loop3): 1 orphan inode deleted [ 467.431654][ T7030] EXT4-fs (loop3): 1 truncate cleaned up [ 467.467233][ T5837] usb 5-1: 0:2 : does not exist [ 467.472697][ T5837] usb 5-1: unit 5: unexpected type 0x09 [ 467.504884][ T7030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.604220][ T5837] usb 5-1: USB disconnect, device number 15 [ 467.622280][ T5780] ocfs2: Unmounting device (7,4) on (node local) [ 467.942941][ T5839] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 468.232971][ T5839] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 468.248352][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.258629][ T5839] usb 4-1: Product: syz [ 468.263243][ T5839] usb 4-1: Manufacturer: syz [ 468.268117][ T5839] usb 4-1: SerialNumber: syz [ 468.436192][ T5839] usb 4-1: config 0 descriptor?? [ 468.477307][ T5839] ch341 4-1:0.0: ch341-uart converter detected [ 468.846894][ T7042] FAULT_INJECTION: forcing a failure. [ 468.846894][ T7042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.865205][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.0.332 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 468.865374][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 468.865466][ T7042] Call Trace: [ 468.865531][ T7042] [ 468.865584][ T7042] dump_stack_lvl+0x216/0x2d0 [ 468.865746][ T7042] dump_stack+0x1e/0x24 [ 468.865880][ T7042] should_fail_ex+0x767/0x830 [ 468.866098][ T7042] should_fail+0x2a/0x40 [ 468.866283][ T7042] should_fail_usercopy+0x2e/0x40 [ 468.866501][ T7042] strncpy_from_user+0x39/0x540 [ 468.866692][ T7042] ? __msan_memcpy+0x108/0x1c0 [ 468.866867][ T7042] __se_sys_memfd_create+0x5c2/0x11e0 [ 468.867040][ T7042] __x64_sys_memfd_create+0x6c/0xa0 [ 468.867197][ T7042] x64_sys_call+0x3b63/0x3c30 [ 468.867359][ T7042] do_syscall_64+0xcd/0x1e0 [ 468.867546][ T7042] ? clear_bhb_loop+0x25/0x80 [ 468.867735][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.867953][ T7042] RIP: 0033:0x7f267738d169 [ 468.868069][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.868207][ T7042] RSP: 002b:00007f267819ae18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 468.868349][ T7042] RAX: ffffffffffffffda RBX: 0000000000005966 RCX: 00007f267738d169 [ 468.868456][ T7042] RDX: 00007f267819aef0 RSI: 0000000000000000 RDI: 00007f267740ec3c [ 468.868563][ T7042] RBP: 000020000000b640 R08: 00007f267819abb7 R09: 00007f267819ae40 [ 468.868671][ T7042] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 468.868768][ T7042] R13: 00007f267819aef0 R14: 00007f267819aeb0 R15: 0000200000000380 [ 468.868899][ T7042] [ 469.317281][ T5839] usb 4-1: failed to send control message: -71 [ 469.324108][ T5839] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 469.469888][ T7047] loop0: detected capacity change from 0 to 128 [ 469.530589][ T5839] usb 4-1: USB disconnect, device number 21 [ 469.539642][ T5839] ch341 4-1:0.0: device disconnected [ 470.005302][ T7035] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 470.104403][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.256191][ T7045] loop1: detected capacity change from 0 to 32768 [ 470.268356][ T7035] EXT4-fs (loop3): Remounting filesystem read-only [ 470.328280][ T7047] capability: warning: `syz.0.334' uses 32-bit capabilities (legacy support in use) [ 470.346216][ T7045] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 470.727038][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.844149][ T7045] XFS (loop1): Ending clean mount [ 470.891519][ T7045] XFS (loop1): Quotacheck needed: Please wait. [ 471.058901][ T7045] XFS (loop1): Quotacheck: Done. [ 471.445755][ T7060] netlink: 52 bytes leftover after parsing attributes in process `syz.3.335'. [ 471.455536][ T7060] netlink: 52 bytes leftover after parsing attributes in process `syz.3.335'. [ 471.465103][ T7060] netlink: 52 bytes leftover after parsing attributes in process `syz.3.335'. [ 471.713152][ T7058] loop4: detected capacity change from 0 to 2048 [ 471.809354][ T7058] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 471.995339][ T7062] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 472.913396][ T30] audit: type=1800 audit(1742677897.848:17): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.330" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 472.950422][ T7063] loop0: detected capacity change from 0 to 32768 [ 473.136400][ T7063] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io [ 473.170049][ T7063] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 473.181879][ T7063] bcachefs (loop0): Version upgrade required: [ 473.181879][ T7063] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 473.181879][ T7063] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 473.181879][ T7063] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 473.316429][ T5779] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 473.356489][ T7063] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 473.356612][ T7063] u64s 11 type btree_ptr_v2 18376656804508598271:U64_MAX:U32_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 473.356740][ T7063] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 473.399746][ T7063] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 473.412413][ T7063] bcachefs (loop0): flagging btree xattrs lost data [ 473.419387][ T7063] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 473.434065][ T7063] error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 473.452718][ T7063] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 473.452831][ T7063] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 473.452963][ T7063] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 473.503145][ T7063] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 473.503145][ T7063] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 473.630563][ T7063] bcachefs (loop0): scan_for_btree_nodes... [ 473.934886][ T7063] bcachefs (loop0): btree node scan found 7 nodes after overwrites [ 473.950211][ T7063] done [ 473.955454][ T7063] bcachefs (loop0): check_topology... [ 473.958049][ T7063] bcachefs (loop0): btree root xattrs unreadable, must recover from scan [ 473.973380][ T7063] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=xattrs level=0 POS_MIN - SPOS_MAX [ 473.993279][ T7063] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 474.049064][ T7063] done [ 474.055226][ T7063] bcachefs (loop0): accounting_read... done [ 474.064481][ T7063] bcachefs (loop0): alloc_read... done [ 474.071402][ T7063] bcachefs (loop0): stripes_read... done [ 474.078016][ T7063] bcachefs (loop0): snapshots_read... done [ 474.092098][ T7063] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 474.105305][ T7063] bcachefs (loop0): done starting filesystem [ 474.436501][ T7078] loop2: detected capacity change from 0 to 1024 [ 474.452815][ T5788] bcachefs (loop0): shutting down [ 474.466856][ T7078] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 474.631197][ T7078] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.324: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 474.707586][ T5788] bcachefs (loop0): shutdown complete [ 474.863968][ T7078] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.324: couldn't read orphan inode 11 (err -117) [ 475.050471][ T7078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.194787][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.201544][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.407234][ T7078] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.324: Invalid block bitmap block 0 in block_group 0 [ 475.598839][ T7078] Quota error (device loop2): write_blk: dquota write failed [ 475.606885][ T7078] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 475.624009][ T7078] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.324: Failed to acquire dquot type 0 [ 475.637344][ T7084] loop3: detected capacity change from 0 to 32768 [ 475.743770][ T7084] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 475.845365][ T7084] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 476.035804][ T7084] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 476.055072][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.061896][ T7084] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 476.072180][ T7084] OCFS2: File system is now read-only. [ 476.077949][ T7084] (syz.3.340,7084,0):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 476.322967][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.366797][ T1101] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 476.376493][ T1101] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 0 [ 476.403558][ T1849] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 476.414522][ T5835] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 476.626152][ T1849] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 476.637035][ T1849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.652575][ T5835] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 476.661346][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.672215][ T5835] usb 5-1: config 0 has no interface number 0 [ 476.754277][ T5835] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 476.764102][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.772697][ T5835] usb 5-1: Product: syz [ 476.777147][ T5835] usb 5-1: Manufacturer: syz [ 476.782029][ T5835] usb 5-1: SerialNumber: syz [ 476.802958][ T1849] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 476.812613][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 476.820974][ T1849] usb 4-1: SerialNumber: syz [ 476.888885][ T5835] usb 5-1: config 0 descriptor?? [ 476.934237][ T5835] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 476.941208][ T5835] usb 5-1: No valid video chain found. [ 476.966041][ T7093] loop1: detected capacity change from 0 to 64 [ 477.020507][ T7093] hfs: Bad value for 'file_umask' [ 477.149038][ T1849] usb 4-1: 0:2 : does not exist [ 477.159914][ T1849] usb 4-1: unit 5: unexpected type 0x09 [ 477.334302][ T1849] usb 4-1: USB disconnect, device number 22 [ 477.439977][ T7097] loop2: detected capacity change from 0 to 128 [ 477.932909][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.130683][ T7099] loop1: detected capacity change from 0 to 512 [ 478.194211][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 478.213347][ T7099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 478.471977][ T7099] EXT4-fs (loop1): 1 orphan inode deleted [ 478.478660][ T7099] EXT4-fs (loop1): 1 truncate cleaned up [ 478.494667][ T7099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.548442][ T7104] FAULT_INJECTION: forcing a failure. [ 478.548442][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 478.561842][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.2.346 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 478.562000][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 478.562098][ T7104] Call Trace: [ 478.562153][ T7104] [ 478.562203][ T7104] dump_stack_lvl+0x216/0x2d0 [ 478.562361][ T7104] dump_stack+0x1e/0x24 [ 478.562484][ T7104] should_fail_ex+0x767/0x830 [ 478.562706][ T7104] should_failslab+0x17f/0x210 [ 478.562916][ T7104] kmem_cache_alloc_noprof+0xee/0xe10 [ 478.563079][ T7104] ? mas_alloc_nodes+0x4c1/0xe60 [ 478.563260][ T7104] ? kmsan_get_metadata+0x13e/0x1c0 [ 478.563464][ T7104] mas_alloc_nodes+0x4c1/0xe60 [ 478.563668][ T7104] mas_preallocate+0xc2f/0x1060 [ 478.563843][ T7104] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 478.564066][ T7104] ? kmsan_get_metadata+0x13e/0x1c0 [ 478.564268][ T7104] mmap_region+0x1e78/0x4f80 [ 478.564529][ T7104] do_mmap+0x198b/0x1e50 [ 478.564754][ T7104] vm_mmap_pgoff+0x377/0x780 [ 478.564977][ T7104] ksys_mmap_pgoff+0x16e/0x790 [ 478.565183][ T7104] ? kmsan_get_metadata+0x13e/0x1c0 [ 478.565387][ T7104] __x64_sys_mmap+0x1a8/0x240 [ 478.565586][ T7104] x64_sys_call+0x1d2c/0x3c30 [ 478.565747][ T7104] do_syscall_64+0xcd/0x1e0 [ 478.565932][ T7104] ? clear_bhb_loop+0x25/0x80 [ 478.566125][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.566319][ T7104] RIP: 0033:0x7f962918d1a3 [ 478.566431][ T7104] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 478.566566][ T7104] RSP: 002b:00007f9629f63e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 478.566707][ T7104] RAX: ffffffffffffffda RBX: 0000000000005964 RCX: 00007f962918d1a3 [ 478.566813][ T7104] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 478.566911][ T7104] RBP: 000020000000b642 R08: 00000000ffffffff R09: 0000000000000000 [ 478.567010][ T7104] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 478.567103][ T7104] R13: 00007f9629f63ef0 R14: 00007f9629f63eb0 R15: 0000200000000380 [ 478.567234][ T7104] [ 478.913464][ T7099] EXT4-fs error (device loop1): empty_inline_dir:1850: inode #12: block 7: comm syz.1.345: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 479.044746][ T7099] EXT4-fs (loop1): Remounting filesystem read-only [ 479.051593][ T7099] EXT4-fs warning (device loop1): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 479.472959][ T5839] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 479.639906][ T5837] usb 5-1: USB disconnect, device number 16 [ 479.764289][ T5839] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 479.773962][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.782274][ T5839] usb 2-1: Product: syz [ 479.787033][ T5839] usb 2-1: Manufacturer: syz [ 479.791912][ T5839] usb 2-1: SerialNumber: syz [ 479.864604][ T5839] usb 2-1: config 0 descriptor?? [ 479.887961][ T5839] ch341 2-1:0.0: ch341-uart converter detected [ 480.437717][ T5837] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 480.523247][ T5839] usb 2-1: failed to send control message: -71 [ 480.530050][ T5839] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 480.652970][ T5837] usb 5-1: device descriptor read/64, error -71 [ 480.674453][ T5839] usb 2-1: USB disconnect, device number 27 [ 480.725255][ T5839] ch341 2-1:0.0: device disconnected [ 480.913095][ T5837] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 481.097852][ T5837] usb 5-1: device descriptor read/64, error -71 [ 481.149835][ T7119] xt_limit: Overflow, try lower: 1207959552/384 [ 481.214633][ T5837] usb usb5-port1: attempt power cycle [ 481.458245][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.632705][ T5837] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 481.668426][ T5837] usb 5-1: device descriptor read/8, error -71 [ 481.840333][ T7125] fuse: Unknown parameter 'f3Oc륐d' [ 481.932828][ T5837] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 481.991844][ T5837] usb 5-1: device descriptor read/8, error -71 [ 482.106480][ T5837] usb usb5-port1: unable to enumerate USB device [ 483.279050][ T7136] loop3: detected capacity change from 0 to 32768 [ 483.342715][ T5837] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 483.378460][ T7136] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 483.474077][ T7136] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 483.552663][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 483.621509][ T5837] usb 1-1: config 0 has no interfaces? [ 483.691680][ T7136] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 483.715536][ T7136] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 483.727017][ T7136] OCFS2: File system is now read-only. [ 483.732807][ T7136] (syz.3.357,7136,0):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 483.803536][ T5837] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.818736][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.828867][ T5837] usb 1-1: Product: syz [ 483.833449][ T5837] usb 1-1: Manufacturer: syz [ 483.838359][ T5837] usb 1-1: SerialNumber: syz [ 483.991015][ T5837] usb 1-1: config 0 descriptor?? [ 484.053358][ T1849] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 484.263135][ T5835] usb 1-1: USB disconnect, device number 22 [ 484.294642][ T1849] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 484.305922][ T1849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.470266][ T1849] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 484.479912][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 484.488597][ T1849] usb 4-1: SerialNumber: syz [ 484.836556][ T1849] usb 4-1: 0:2 : does not exist [ 484.841801][ T1849] usb 4-1: unit 5: unexpected type 0x09 [ 484.988222][ T7156] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=778909908 (6231279264 ns) > initial count (2900669840 ns). Using initial count to start timer. [ 485.026214][ T1849] usb 4-1: USB disconnect, device number 23 [ 485.155072][ T7157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 485.340001][ T7162] loop1: detected capacity change from 0 to 512 [ 485.402622][ T7162] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 485.542245][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 485.569255][ T7162] EXT4-fs (loop1): 1 orphan inode deleted [ 485.575626][ T7162] EXT4-fs (loop1): 1 truncate cleaned up [ 485.584518][ T7162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.788782][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.023105][ T1849] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 486.224367][ T1849] usb 5-1: unable to get BOS descriptor or descriptor too short [ 486.262263][ T1849] usb 5-1: not running at top speed; connect to a high speed hub [ 486.310242][ T1849] usb 5-1: config 3 has an invalid interface number: 1 but max is 0 [ 486.318702][ T1849] usb 5-1: config 3 has no interface number 0 [ 486.325576][ T1849] usb 5-1: config 3 interface 1 has no altsetting 0 [ 486.410545][ T1849] usb 5-1: New USB device found, idVendor=1b80, idProduct=e421, bcdDevice=35.5d [ 486.420399][ T1849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.428995][ T1849] usb 5-1: Product: syz [ 486.433552][ T1849] usb 5-1: Manufacturer: syz [ 486.438435][ T1849] usb 5-1: SerialNumber: syz [ 486.770531][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.896604][ T1849] cx231xx 5-1:3.1: New device syz syz @ 12 Mbps (1b80:e421) with 1 interfaces [ 486.906284][ T1849] cx231xx 5-1:3.1: Not found matching IAD interface [ 487.035893][ T1849] usb 5-1: USB disconnect, device number 21 [ 487.672625][ T1849] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 487.923845][ T1849] usb 3-1: device descriptor read/64, error -71 [ 488.174586][ T7180] loop1: detected capacity change from 0 to 32768 [ 488.184042][ T7180] XFS: noikeep mount option is deprecated. [ 488.223193][ T1849] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 488.319997][ T7180] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 488.423708][ T1849] usb 3-1: device descriptor read/64, error -71 [ 488.549012][ T1849] usb usb3-port1: attempt power cycle [ 488.795920][ T7180] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x2a9/0x300, xfs_agf block 0x1 [ 488.807704][ T7180] XFS (loop1): Unmount and run xfs_repair [ 488.813859][ T7180] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 488.821539][ T7180] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 01 00 00 XAGF............ [ 488.836561][ T7180] 00000010: 00 00 00 00 00 00 00 02 00 00 00 04 00 00 00 01 ................ [ 488.847267][ T7180] 00000020: 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 488.856562][ T7180] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d ca 00 00 00 00 ................ [ 488.865792][ T7180] 00000040: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 488.875043][ T7180] 00000050: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 488.884315][ T7180] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 488.893626][ T7180] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 488.903032][ T7180] XFS (loop1): metadata I/O error in "xfs_read_agf+0x235/0x510" at daddr 0x1 len 1 error 74 [ 488.913848][ T7180] XFS (loop1): Error -117 reserving per-AG metadata reserve pool. [ 488.922056][ T7180] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x3f8/0x5e0 (fs/xfs/xfs_fsops.c:557). Shutting down filesystem. [ 488.943497][ T7180] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 488.952155][ T7180] XFS (loop1): Ending clean mount [ 488.959488][ T7180] XFS (loop1): Error -5 reserving per-AG metadata reserve pool. [ 489.045161][ T1849] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 489.127676][ T1849] usb 3-1: device descriptor read/8, error -71 [ 489.249171][ T7188] loop0: detected capacity change from 0 to 32768 [ 489.281343][ T7188] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section journal_v2: journal buckets entry with bad nr: 9+0 [ 489.281343][ T7188] journal_v2 (size 40): [ 489.281343][ T7188] Buckets: 9-9 24-25 [ 489.281343][ T7188] [ 489.306176][ T7188] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 489.453042][ T1849] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 489.590877][ T1849] usb 3-1: device descriptor read/8, error -71 [ 489.671051][ T7195] loop4: detected capacity change from 0 to 4096 [ 489.719735][ T1849] usb usb3-port1: unable to enumerate USB device [ 489.968674][ T7197] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 490.146189][ T7195] 9pnet_fd: Insufficient options for proto=fd [ 490.316160][ T7204] FAULT_INJECTION: forcing a failure. [ 490.316160][ T7204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.329871][ T7204] CPU: 0 UID: 0 PID: 7204 Comm: syz.3.376 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 490.330018][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 490.330102][ T7204] Call Trace: [ 490.330153][ T7204] [ 490.330208][ T7204] dump_stack_lvl+0x216/0x2d0 [ 490.330378][ T7204] dump_stack+0x1e/0x24 [ 490.330497][ T7204] should_fail_ex+0x767/0x830 [ 490.330709][ T7204] should_fail+0x2a/0x40 [ 490.330892][ T7204] should_fail_usercopy+0x2e/0x40 [ 490.331097][ T7204] strncpy_from_user+0x39/0x540 [ 490.331287][ T7204] ? __msan_memcpy+0x108/0x1c0 [ 490.331466][ T7204] __se_sys_memfd_create+0x5c2/0x11e0 [ 490.331634][ T7204] __x64_sys_memfd_create+0x6c/0xa0 [ 490.331788][ T7204] x64_sys_call+0x3b63/0x3c30 [ 490.331945][ T7204] do_syscall_64+0xcd/0x1e0 [ 490.332126][ T7204] ? clear_bhb_loop+0x25/0x80 [ 490.332328][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.332517][ T7204] RIP: 0033:0x7f8d4f38d169 [ 490.332627][ T7204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.332767][ T7204] RSP: 002b:00007f8d502afe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 490.332918][ T7204] RAX: ffffffffffffffda RBX: 0000000000005966 RCX: 00007f8d4f38d169 [ 490.333025][ T7204] RDX: 00007f8d502afef0 RSI: 0000000000000000 RDI: 00007f8d4f40ec3c [ 490.333123][ T7204] RBP: 000020000000b640 R08: 00007f8d502afbb7 R09: 00007f8d502afe40 [ 490.333230][ T7204] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 490.333336][ T7204] R13: 00007f8d502afef0 R14: 00007f8d502afeb0 R15: 0000200000000380 [ 490.333462][ T7204] [ 491.971954][ T7211] loop3: detected capacity change from 0 to 32768 [ 492.052136][ T7211] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 492.276163][ T7211] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 492.368723][ T7218] loop1: detected capacity change from 0 to 512 [ 492.437727][ T7211] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 492.457318][ T7211] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 492.467831][ T7211] OCFS2: File system is now read-only. [ 492.473992][ T7211] (syz.3.378,7211,1):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 492.523193][ T7218] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 492.672933][ T7216] loop4: detected capacity change from 0 to 4096 [ 492.685443][ T7218] EXT4-fs (loop1): 1 orphan inode deleted [ 492.691481][ T7218] EXT4-fs (loop1): 1 truncate cleaned up [ 492.699560][ T7218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.844167][ T5837] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 492.909404][ T7224] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 492.956899][ T30] audit: type=1800 audit(1742677917.928:18): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.379" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 493.045755][ T5837] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 493.056848][ T5837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.146144][ T5837] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 493.156132][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 493.164688][ T5837] usb 4-1: SerialNumber: syz [ 493.510375][ T5837] usb 4-1: 0:2 : does not exist [ 493.515926][ T5837] usb 4-1: unit 5: unexpected type 0x09 [ 493.718807][ T5837] usb 4-1: USB disconnect, device number 24 [ 493.777814][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.144438][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 494.321648][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.469107][ T7232] loop4: detected capacity change from 0 to 512 [ 494.540794][ T7232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 494.734791][ T7238] netlink: 'syz.1.388': attribute type 4 has an invalid length. [ 494.824260][ T7232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.837660][ T7232] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.673970][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.973687][ T5837] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 496.249584][ T5837] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.261236][ T5837] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.284187][ T5837] usb 2-1: config 0 interface 0 has no altsetting 0 [ 496.291219][ T5837] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 496.306231][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.366059][ T5837] usb 2-1: config 0 descriptor?? [ 496.876996][ T5837] hid-steam 0003:28DE:1102.0007: item fetching failed at offset 4/5 [ 496.928757][ T5837] hid-steam 0003:28DE:1102.0007: steam_probe:parse of hid interface failed [ 496.938374][ T5837] hid-steam 0003:28DE:1102.0007: probe with driver hid-steam failed with error -22 [ 497.074309][ T5837] usb 2-1: USB disconnect, device number 28 [ 497.278115][ T5839] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 497.339073][ T5835] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 497.515141][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 497.552786][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 497.561069][ T5839] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 497.569264][ T5839] usb 1-1: can't read configurations, error -71 [ 497.639646][ T1849] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 497.774752][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short [ 497.883451][ T5835] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 497.891405][ T5835] usb 4-1: can't read configurations, error -71 [ 497.978010][ T7261] loop4: detected capacity change from 0 to 512 [ 498.013354][ T1849] usb 3-1: Using ep0 maxpacket: 32 [ 498.040450][ T1849] usb 3-1: unable to get BOS descriptor or descriptor too short [ 498.059513][ T7261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 498.084872][ T1849] usb 3-1: config 127 has an invalid interface number: 25 but max is 0 [ 498.093694][ T1849] usb 3-1: config 127 has no interface number 0 [ 498.100252][ T1849] usb 3-1: config 127 interface 25 has no altsetting 0 [ 498.198140][ T1849] usb 3-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 498.208866][ T1849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.217329][ T1849] usb 3-1: Product: syz [ 498.221802][ T1849] usb 3-1: Manufacturer: syz [ 498.226877][ T1849] usb 3-1: SerialNumber: syz [ 498.293861][ T7261] EXT4-fs (loop4): 1 orphan inode deleted [ 498.300095][ T7261] EXT4-fs (loop4): 1 truncate cleaned up [ 498.308835][ T7261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.501606][ T7261] EXT4-fs error (device loop4): empty_inline_dir:1850: inode #12: block 7: comm syz.4.395: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 498.669065][ T7261] EXT4-fs (loop4): Remounting filesystem read-only [ 498.676372][ T7261] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 499.136393][ T7265] loop1: detected capacity change from 0 to 32768 [ 499.254221][ T7265] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 499.334127][ T7265] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 499.390617][ T1849] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 499.540422][ T7265] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 499.560068][ T7265] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 499.571456][ T7265] OCFS2: File system is now read-only. [ 499.582441][ T7265] (syz.1.396,7265,0):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 499.856878][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.171230][ T7279] netlink: 56 bytes leftover after parsing attributes in process `syz.3.401'. [ 500.659363][ T7275] loop0: detected capacity change from 0 to 32768 [ 500.733023][ T5835] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 500.872870][ T7291] loop2: detected capacity change from 0 to 512 [ 500.899612][ T7275] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io [ 500.933674][ T7275] superblock marked clean but clean section not present, shutting down [ 500.942651][ T7275] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 0 [ 500.952208][ T7275] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 500.960631][ T7275] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 500.970537][ T7275] bcachefs (loop0): shutting down [ 500.991338][ T7275] bcachefs (loop0): shutdown complete [ 500.991358][ T5835] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 500.991490][ T5835] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 501.024594][ T7291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.076098][ T5835] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 501.085945][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 501.094423][ T5835] usb 2-1: SerialNumber: syz [ 501.141593][ T1849] ueagle-atm 3-1:127.25: usbatm_usb_probe: bind failed: -19! [ 501.175388][ T1849] usb 3-1: USB disconnect, device number 22 [ 501.186781][ T7291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.201638][ T7291] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.356397][ T5835] usb 2-1: 0:2 : does not exist [ 501.361649][ T5835] usb 2-1: unit 5: unexpected type 0x09 [ 501.471262][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 501.538848][ T5835] usb 2-1: USB disconnect, device number 29 [ 501.684633][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 502.592218][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.645549][ T7295] loop3: detected capacity change from 0 to 40427 [ 502.691760][ T7295] F2FS-fs (loop3): invalid crc value [ 502.809353][ T7295] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 503.167199][ T7295] F2FS-fs (loop3): Start checkpoint disabled! [ 503.184490][ T7300] loop4: detected capacity change from 0 to 8 [ 503.209280][ T7295] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 503.337287][ T7275] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 503.599786][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.582755][ T7317] loop4: detected capacity change from 0 to 512 [ 505.597280][ T7319] FAULT_INJECTION: forcing a failure. [ 505.597280][ T7319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.611040][ T7319] CPU: 0 UID: 0 PID: 7319 Comm: syz.2.411 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 505.611182][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.611275][ T7319] Call Trace: [ 505.611327][ T7319] [ 505.611378][ T7319] dump_stack_lvl+0x216/0x2d0 [ 505.611535][ T7319] dump_stack+0x1e/0x24 [ 505.611660][ T7319] should_fail_ex+0x767/0x830 [ 505.611866][ T7319] should_fail+0x2a/0x40 [ 505.612039][ T7319] should_fail_usercopy+0x2e/0x40 [ 505.612253][ T7319] strncpy_from_user+0x39/0x540 [ 505.612433][ T7319] ? __msan_memcpy+0x108/0x1c0 [ 505.612600][ T7319] __se_sys_memfd_create+0x5c2/0x11e0 [ 505.612765][ T7319] __x64_sys_memfd_create+0x6c/0xa0 [ 505.612916][ T7319] x64_sys_call+0x3b63/0x3c30 [ 505.613072][ T7319] do_syscall_64+0xcd/0x1e0 [ 505.613272][ T7319] ? clear_bhb_loop+0x25/0x80 [ 505.613471][ T7319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.613682][ T7319] RIP: 0033:0x7f962918d169 [ 505.613797][ T7319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.613954][ T7319] RSP: 002b:00007f9629f63e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 505.614097][ T7319] RAX: ffffffffffffffda RBX: 0000000000005966 RCX: 00007f962918d169 [ 505.614203][ T7319] RDX: 00007f9629f63ef0 RSI: 0000000000000000 RDI: 00007f962920ec3c [ 505.614312][ T7319] RBP: 000020000000b640 R08: 00007f9629f63bb7 R09: 00007f9629f63e40 [ 505.614420][ T7319] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 505.614516][ T7319] R13: 00007f9629f63ef0 R14: 00007f9629f63eb0 R15: 0000200000000380 [ 505.614643][ T7319] [ 505.862266][ T7317] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 506.707215][ T7325] loop2: detected capacity change from 0 to 512 [ 506.825766][ T7323] loop1: detected capacity change from 0 to 32768 [ 506.845651][ T7323] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_v2: journal bucket 9 before first bucket 10 [ 506.845651][ T7323] journal_v2 (size 40): [ 506.845651][ T7323] Buckets: 9-16 24-25 [ 506.845651][ T7323] [ 506.875722][ T7323] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 506.908276][ T7325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.942212][ T7317] EXT4-fs (loop4): 1 orphan inode deleted [ 506.948468][ T7317] EXT4-fs (loop4): 1 truncate cleaned up [ 506.964412][ T7317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.230906][ T7317] EXT4-fs error (device loop4): empty_inline_dir:1850: inode #12: block 7: comm syz.4.410: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 507.333441][ T7317] EXT4-fs (loop4): Remounting filesystem read-only [ 507.340277][ T7317] EXT4-fs warning (device loop4): empty_inline_dir:1857: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 507.382722][ T5835] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 507.609021][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.632989][ T1849] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 507.649356][ T5835] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 507.657945][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.673569][ T5835] usb 1-1: config 0 has no interface number 0 [ 507.679991][ T5835] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 507.691460][ T5835] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 507.705168][ T5835] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 507.714649][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.807699][ T5835] usb 1-1: config 0 descriptor?? [ 507.889761][ T7331] dccp_invalid_packet: P.Data Offset(80) too large [ 507.898265][ T5835] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 507.943912][ T1849] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 507.953779][ T1849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.962163][ T1849] usb 5-1: Product: syz [ 507.966750][ T1849] usb 5-1: Manufacturer: syz [ 507.971611][ T1849] usb 5-1: SerialNumber: syz [ 508.066568][ T35] usb 1-1: Failed to submit usb control message: -71 [ 508.073915][ T35] usb 1-1: unable to send the bmi data to the device: -71 [ 508.086976][ T35] usb 1-1: unable to get target info from device [ 508.095623][ T35] usb 1-1: could not get target info (-71) [ 508.101785][ T35] usb 1-1: could not probe fw (-71) [ 508.111536][ T5835] usb 1-1: USB disconnect, device number 25 [ 508.139533][ T1849] usb 5-1: config 0 descriptor?? [ 508.164007][ T1849] ch341 5-1:0.0: ch341-uart converter detected [ 509.060726][ T7336] loop1: detected capacity change from 0 to 32768 [ 509.093200][ T1849] usb 5-1: failed to receive control message: -32 [ 509.106219][ T1849] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 509.281339][ T7342] loop2: detected capacity change from 0 to 32768 [ 509.366657][ T7336] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_v2: journal bucket 9 before first bucket 10 [ 509.366657][ T7336] journal_v2 (size 40): [ 509.366657][ T7336] Buckets: 9-16 24-25 [ 509.366657][ T7336] [ 509.392169][ T7336] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 509.405785][ T7342] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 509.519888][ T7342] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 510.170924][ T7342] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 510.190785][ T7342] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 510.201477][ T7342] OCFS2: File system is now read-only. [ 510.207330][ T7342] (syz.2.415,7342,1):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 510.366682][ T7348] loop0: detected capacity change from 0 to 512 [ 510.463772][ T7348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 510.543173][ T5839] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 510.595771][ T7348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.609524][ T7348] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.647358][ T5835] usb 5-1: USB disconnect, device number 22 [ 510.657047][ T5835] ch341 5-1:0.0: device disconnected [ 510.715004][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.753550][ T5839] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 510.764596][ T5839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.863277][ T5839] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 510.872971][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 510.881271][ T5839] usb 3-1: SerialNumber: syz [ 511.273034][ T5839] usb 3-1: 0:2 : does not exist [ 511.278247][ T5839] usb 3-1: unit 5: unexpected type 0x09 [ 511.750593][ T5839] usb 3-1: USB disconnect, device number 23 [ 511.761625][ T7353] loop1: detected capacity change from 0 to 32768 [ 512.221660][ T7353] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 512.239214][ T7353] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 512.249118][ T7353] bcachefs (loop1): Version upgrade required: [ 512.249118][ T7353] Version upgrade from 0.10: bkey_renumber to 1.7: mi_btree_bitmap incomplete [ 512.249118][ T7353] Doing incompatible version upgrade from 0.10: bkey_renumber to 1.20: directory_size [ 512.249118][ T7353] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 512.419049][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.496526][ T7353] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 512.496644][ T7353] mode=100740 [ 512.496711][ T7353] flags=(5300000) [ 512.496775][ T7353] journal_seq=4 [ 512.496844][ T7353] hash_seed=d483206f1ed95abf [ 512.496912][ T7353] hash_type=siphash [ 512.496979][ T7353] bi_size=100 [ 512.497041][ T7353] bi_sectors=8 [ 512.497106][ T7353] bi_version=1126999418470400 [ 512.497176][ T7353] bi_atime=0 [ 512.497238][ T7353] bi_ctime=0 [ 512.497299][ T7353] bi_mtime=0 [ 512.497365][ T7353] bi_otime=2780562352 [ 512.497430][ T7353] bi_uid=2780562352 [ 512.497503][ T7353] bi_gid=0 [ 512.497564][ T7353] bi_nlink=0 [ 512.497625][ T7353] bi_generation=0 [ 512.497691][ T7353] bi_dev=0 [ 512.497752][ T7353] bi_data_checksum=0 [ 512.497820][ T7353] bi_compression=0 [ 512.497883][ T7353] bi_project=0 [ 512.497947][ T7353] bi_background_compression=0 [ 512.498019][ T7353] bi_data_replicas=0 [ 512.498084][ T7353] bi_promote_target=0 [ 512.498153][ T7353] bi_foreground_target=0 [ 512.498220][ T7353] bi_background_target=0 [ 512.498289][ T7353] bi_erasure_code=0 [ 512.498357][ T7353] bi_fields_set=0 [ 512.498420][ T7353] bi_dir=0 [ 512.498487][ T7353] bi_dir_offset=0 [ 512.498554][ T7353] bi_subvol=0 [ 512.498616][ T7353] bi_parent_subvol=0 [ 512.498682][ T7353] bi_nocow=0 [ 512.498743][ T7353] bi_depth=0 [ 512.498808][ T7353] bi_inodes_32bit=0 [ 512.498877][ T7353] invalid fields_start (got 0, min 6 max 13): deleting [ 512.785704][ T7353] bcachefs (loop1): error validating btree node on loop1 at btree alloc level 0/0 [ 512.785829][ T7353] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 512.785950][ T7353] node offset 0/24: bad magic: want 59513f585d347cd2, got 59513f5800037cd2 [ 512.824881][ T7353] bcachefs (loop1): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 512.837047][ T7353] bcachefs (loop1): flagging btree alloc lost data [ 512.841731][ T7356] loop4: detected capacity change from 0 to 32768 [ 512.865437][ T7356] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 512.865437][ T7356] clean (size 40): [ 512.865437][ T7356] flags: 9 [ 512.865437][ T7356] journal_seq: 7 [ 512.865437][ T7356] [ 512.900762][ T7353] error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 512.900927][ T7356] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 513.105568][ T7353] bcachefs (loop1): error validating btree node on loop1 at btree lru level 0/0 [ 513.105687][ T7353] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 513.105812][ T7353] node offset 0/16 bset u64s 0: checksum error, type none: got should be , shutting down [ 513.140012][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.141404][ T7353] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 10 [ 513.167150][ T7353] bcachefs (loop1): flagging btree lru lost data [ 513.218016][ T7353] error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 513.241036][ T7353] bcachefs (loop1): error validating btree node on loop1 at btree freespace level 0/0 [ 513.241155][ T7353] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 513.241275][ T7353] node offset 8/32: btree node data missing: expected 32 sectors, found 8, shutting down [ 513.276319][ T7353] bcachefs (loop1): flagging btree freespace lost data [ 513.290919][ T7353] error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 513.341499][ T5794] ocfs2: Unmounting device (7,2) on (node local) [ 513.368098][ T7353] bcachefs (loop1): error validating btree node on loop1 at btree backpointers level 0/0 [ 513.368209][ T7353] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0f08009980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 513.368317][ T7353] node offset 0/24: got wrong btree node: got [ 513.368417][ T7353] btree=backpointers level=0 seq 4a8b0fa43a9980a6 1 [ 513.368496][ T7353] min: POS_MIN [ 513.368559][ T7353] max: SPOS_MAX [ 513.419403][ T7353] bcachefs (loop1): flagging btree backpointers lost data [ 513.450477][ T7353] error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 513.502780][ T7353] bcachefs (loop1): check_topology... done [ 513.516215][ T7353] bcachefs (loop1): accounting_read... done [ 513.524010][ T7353] bcachefs (loop1): alloc_read... done [ 513.529967][ T7353] bcachefs (loop1): stripes_read... done [ 513.536441][ T7353] bcachefs (loop1): snapshots_read... done [ 513.543147][ T7353] bcachefs (loop1): check_allocations... [ 513.550594][ T7353] bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 513.550719][ T7353] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, fixing [ 513.591847][ T7353] bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 513.591960][ T7353] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 513.652658][ T7353] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 513.652771][ T7353] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 513.723838][ T7353] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 513.723948][ T7353] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 513.751122][ T7353] bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 513.751234][ T7353] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 513.805141][ T7353] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 513.805254][ T7353] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 513.868076][ T7353] bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 513.868182][ T7353] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 513.899732][ T7353] bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 513.899836][ T7353] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 513.976541][ T7353] done [ 513.983127][ T7353] bcachefs (loop1): going read-write [ 514.087870][ T7353] bcachefs (loop1): journal_replay... [ 514.088428][ T7353] bcachefs (loop1): bch2_journal_replay(): error erofs_journal_err [ 514.106258][ T7353] bcachefs (loop1): bch2_fs_recovery(): error erofs_journal_err [ 514.114284][ T7353] bcachefs (loop1): bch2_fs_start(): error starting filesystem erofs_journal_err [ 514.128533][ T7353] bcachefs (loop1): shutting down [ 514.133972][ T7353] bcachefs (loop1): going read-only [ 514.139600][ T7353] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 514.148748][ T7353] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 514.159700][ T7353] bcachefs (loop1): unclean shutdown complete, journal seq 10 [ 514.161852][ T4155] bcachefs (loop1): bch2_btree_update_start(): error journal_shutdown [ 514.176093][ T4155] bcachefs (loop1): async_btree_node_rewrite_work(): error journal_shutdown [ 514.193247][ T7353] bcachefs (loop1): finished waiting for writes to stop [ 514.200536][ T7353] bcachefs (loop1): done going read-only, filesystem not clean [ 514.239183][ T7353] bcachefs (loop1): shutdown complete [ 514.677730][ T52] block nbd0: Receive control failed (result -32) [ 514.686157][ T7368] block nbd0: shutting down sockets [ 515.077909][ T7376] loop3: detected capacity change from 0 to 8 [ 515.403629][ T7376] SQUASHFS error: Unknown LZ4 version [ 515.409420][ T7376] squashfs image failed sanity check [ 515.670116][ T7381] FAULT_INJECTION: forcing a failure. [ 515.670116][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 515.684097][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.4.426 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 515.684258][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 515.684346][ T7381] Call Trace: [ 515.684403][ T7381] [ 515.684454][ T7381] dump_stack_lvl+0x216/0x2d0 [ 515.684618][ T7381] dump_stack+0x1e/0x24 [ 515.684750][ T7381] should_fail_ex+0x767/0x830 [ 515.684957][ T7381] should_failslab+0x17f/0x210 [ 515.685159][ T7381] kmem_cache_alloc_lru_noprof+0xf5/0xe20 [ 515.685331][ T7381] ? kmsan_internal_poison_memory+0x7d/0x90 [ 515.685504][ T7381] ? shmem_alloc_inode+0x5a/0xd0 [ 515.685667][ T7381] ? __kmalloc_cache_noprof+0x8e3/0xdf0 [ 515.685841][ T7381] ? kmsan_get_metadata+0x13e/0x1c0 [ 515.686050][ T7381] shmem_alloc_inode+0x5a/0xd0 [ 515.686208][ T7381] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 515.686365][ T7381] alloc_inode+0x86/0x460 [ 515.686566][ T7381] ? kmsan_get_metadata+0x13e/0x1c0 [ 515.686766][ T7381] new_inode+0x38/0x480 [ 515.686961][ T7381] ? kmsan_get_metadata+0x13e/0x1c0 [ 515.687160][ T7381] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 515.687369][ T7381] shmem_get_inode+0x705/0x1c50 [ 515.687550][ T7381] __shmem_file_setup+0x249/0x4d0 [ 515.687770][ T7381] shmem_file_setup+0x61/0x80 [ 515.687974][ T7381] __se_sys_memfd_create+0x81b/0x11e0 [ 515.688146][ T7381] __x64_sys_memfd_create+0x6c/0xa0 [ 515.688300][ T7381] x64_sys_call+0x3b63/0x3c30 [ 515.688465][ T7381] do_syscall_64+0xcd/0x1e0 [ 515.688649][ T7381] ? clear_bhb_loop+0x25/0x80 [ 515.688842][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.689036][ T7381] RIP: 0033:0x7facf498d169 [ 515.689145][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.689280][ T7381] RSP: 002b:00007facf27f5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 515.689421][ T7381] RAX: ffffffffffffffda RBX: 0000000000005966 RCX: 00007facf498d169 [ 515.689533][ T7381] RDX: 00007facf27f5ef0 RSI: 0000000000000000 RDI: 00007facf4a0ec3c [ 515.689636][ T7381] RBP: 000020000000b640 R08: 00007facf27f5bb7 R09: 00007facf27f5e40 [ 515.689743][ T7381] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 515.689840][ T7381] R13: 00007facf27f5ef0 R14: 00007facf27f5eb0 R15: 0000200000000380 [ 515.689967][ T7381] [ 516.107866][ T7353] bcachefs: bch2_fs_get_tree() error: erofs_journal_err [ 516.363923][ T5835] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 516.642840][ T5835] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 516.652250][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.759433][ T5835] usb 1-1: config 0 descriptor?? [ 516.803716][ T5835] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 516.921491][ T7388] loop3: detected capacity change from 0 to 512 [ 517.031122][ T7388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 517.203142][ T5835] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 517.304971][ T7388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.319475][ T7388] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.749754][ T7396] netlink: 52 bytes leftover after parsing attributes in process `syz.2.431'. [ 517.759540][ T7396] netlink: 52 bytes leftover after parsing attributes in process `syz.2.431'. [ 517.768956][ T7396] netlink: 52 bytes leftover after parsing attributes in process `syz.2.431'. [ 518.393382][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.436052][ T7394] loop4: detected capacity change from 0 to 32768 [ 518.561331][ T7394] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 518.771509][ T7394] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 518.996194][ T7394] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 519.015851][ T7394] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 519.027038][ T7394] OCFS2: File system is now read-only. [ 519.037510][ T7394] (syz.4.430,7394,0):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 519.075692][ T7400] loop1: detected capacity change from 0 to 512 [ 519.115954][ T7400] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 519.352719][ T1849] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 519.471625][ T5835] gspca_cpia1: usb_control_msg 05, error -110 [ 519.478087][ T5835] cpia1 1-1:0.0: unexpected systemstate: 00 [ 519.570680][ T7400] EXT4-fs (loop1): 1 orphan inode deleted [ 519.576861][ T7400] EXT4-fs (loop1): 1 truncate cleaned up [ 519.585220][ T7400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.029246][ T7404] loop2: detected capacity change from 0 to 32768 [ 520.410813][ T7404] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io [ 520.439372][ T7404] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 520.449242][ T7404] bcachefs (loop2): Version upgrade required: [ 520.449242][ T7404] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 520.449242][ T7404] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 520.449242][ T7404] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 520.524449][ T7406] loop3: detected capacity change from 0 to 32768 [ 520.537280][ T7404] bcachefs (loop2): insufficient writeable journal devices available: have 0, need 1 [ 520.537280][ T7404] rw journal devs: loop2 [ 520.561848][ T7406] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section journal_v2: duplicate journal buckets in ranges 9-10, 9-16 [ 520.561848][ T7406] journal_v2 (size 40): [ 520.561848][ T7406] Buckets: 9-16 9-10 [ 520.561848][ T7406] [ 520.591023][ T7406] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 520.624717][ T7406] batadv_slave_1: entered promiscuous mode [ 520.645813][ T7404] bcachefs (loop2): error validating btree node on loop2 at btree xattrs level 0/0 [ 520.645937][ T7404] u64s 11 type btree_ptr_v2 18376656804508598271:U64_MAX:U32_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 520.646071][ T7404] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 520.678189][ T5835] usb 1-1: USB disconnect, device number 26 [ 520.693207][ T1849] usb 5-1: device descriptor read/all, error -71 [ 520.694206][ T7404] bcachefs (loop2): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 520.712854][ T7404] bcachefs (loop2): flagging btree xattrs lost data [ 520.719795][ T7404] bcachefs (loop2): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 520.735134][ T7404] error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 520.745762][ T5839] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 520.771670][ T7403] batadv_slave_1: left promiscuous mode [ 520.816666][ T7404] bcachefs (loop2): error validating btree node at btree alloc level 0/0 [ 520.816779][ T7404] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 520.816911][ T7404] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 520.858873][ T7404] bcachefs (loop2): btree_node_read_work: rewriting btree node at due to error [ 520.858873][ T7404] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 520.992156][ T7404] bcachefs (loop2): scan_for_btree_nodes... [ 521.005509][ T5780] ocfs2: Unmounting device (7,4) on (node local) [ 521.022799][ T5839] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 521.032580][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.040905][ T5839] usb 2-1: Product: syz [ 521.045603][ T5839] usb 2-1: Manufacturer: syz [ 521.050553][ T5839] usb 2-1: SerialNumber: syz [ 521.250122][ T5839] usb 2-1: config 0 descriptor?? [ 521.320223][ T5839] ch341 2-1:0.0: ch341-uart converter detected [ 521.501283][ T5839] usb 2-1: failed to receive control message: -32 [ 521.508581][ T5839] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 521.625385][ T7404] bcachefs (loop2): btree node scan found 7 nodes after overwrites [ 521.636293][ T7404] done [ 521.641366][ T7404] bcachefs (loop2): check_topology... [ 521.644284][ T7404] bcachefs (loop2): btree root xattrs unreadable, must recover from scan [ 521.659273][ T7404] bcachefs (loop2): bch2_get_scanned_nodes(): recovery btree=xattrs level=0 POS_MIN - SPOS_MAX [ 521.670880][ T7404] bcachefs (loop2): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 521.704300][ T7404] done [ 521.709359][ T7404] bcachefs (loop2): accounting_read... done [ 521.719527][ T7404] bcachefs (loop2): alloc_read... done [ 521.726624][ T7404] bcachefs (loop2): stripes_read... done [ 521.732929][ T7404] bcachefs (loop2): snapshots_read... done [ 521.739411][ T7404] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 521.743401][ T7424] loop3: detected capacity change from 0 to 128 [ 521.758810][ T7404] bcachefs (loop2): done starting filesystem [ 521.898034][ T5794] bcachefs (loop2): shutting down [ 522.046014][ T5794] bcachefs (loop2): shutdown complete [ 522.053593][ T7407] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 522.122789][ T5839] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 522.135462][ T7407] EXT4-fs (loop1): Remounting filesystem read-only [ 522.306456][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 522.418748][ T5839] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 235, changing to 11 [ 522.436217][ T5839] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 34581, setting to 1024 [ 522.448240][ T5839] usb 1-1: config 0 interface 0 has no altsetting 0 [ 522.455444][ T5839] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 522.465053][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.599366][ T5839] usb 1-1: config 0 descriptor?? [ 522.608094][ T7422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 522.945226][ T7427] FAULT_INJECTION: forcing a failure. [ 522.945226][ T7427] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 522.959204][ T7427] CPU: 1 UID: 0 PID: 7427 Comm: syz.3.439 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 522.959351][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 522.959434][ T7427] Call Trace: [ 522.959488][ T7427] [ 522.959538][ T7427] dump_stack_lvl+0x216/0x2d0 [ 522.959692][ T7427] dump_stack+0x1e/0x24 [ 522.959819][ T7427] should_fail_ex+0x767/0x830 [ 522.960027][ T7427] should_fail_alloc_page+0x235/0x2b0 [ 522.960240][ T7427] __alloc_frozen_pages_noprof+0x343/0xe00 [ 522.960497][ T7427] alloc_pages_mpol+0x4cd/0x890 [ 522.960699][ T7427] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 522.960904][ T7427] alloc_pages_noprof+0x1b5/0x250 [ 522.961119][ T7427] pte_alloc_one+0x5b/0x380 [ 522.961280][ T7427] ? kmsan_get_metadata+0x13e/0x1c0 [ 522.961474][ T7427] __pte_alloc+0x3d/0x6a0 [ 522.961669][ T7427] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 522.961868][ T7427] handle_mm_fault+0x646f/0xdd90 [ 522.962029][ T7427] ? kmsan_get_metadata+0x13e/0x1c0 [ 522.962270][ T7427] exc_page_fault+0x41b/0x700 [ 522.962438][ T7427] asm_exc_page_fault+0x2b/0x30 [ 522.962634][ T7427] RIP: 0033:0x7f8d4f24fc86 [ 522.962742][ T7427] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 522.962891][ T7427] RSP: 002b:00007f8d502af4a0 EFLAGS: 00010246 [ 522.963011][ T7427] RAX: 0000000000000001 RBX: 00007f8d502af540 RCX: 0000000000000101 [ 522.963113][ T7427] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f8d502af5e0 [ 522.963205][ T7427] RBP: 0000000000000102 R08: 00007f8d44c00000 R09: 0000000000000000 [ 522.963298][ T7427] R10: 0000000000000000 R11: 00007f8d502af550 R12: 0000000000000001 [ 522.963389][ T7427] R13: 00007f8d4f4293e0 R14: 0000000000000000 R15: 00007f8d502af5e0 [ 522.963528][ T7427] [ 523.152706][ T7427] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 523.800890][ T7430] loop4: detected capacity change from 0 to 256 [ 523.902239][ T5839] hid (null): unknown global tag 0xc [ 524.078709][ T7427] loop3: detected capacity change from 0 to 32768 [ 524.118550][ T7427] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v1: device 0: bucket size 0 smaller than block size 8 [ 524.118550][ T7427] members_v1 (size 64): [ 524.118550][ T7427] Device: 0 [ 524.118550][ T7427] Label: (none) [ 524.118550][ T7427] UUID: 7af6772b-00de-4159-84cd-1faead05aceb [ 524.118550][ T7427] Size: 0 [ 524.118550][ T7427] read errors: 0 [ 524.118550][ T7427] write errors: 0 [ 524.118550][ T7427] checksum errors: 0 [ 524.118550][ T7427] seqread iops: 0 [ 524.118550][ T7427] seqwrite iops: 0 [ 524.118550][ T7427] randread iops: 0 [ 524.118550][ T7427] randwrite iops: 0 [ 524.118550][ T7427] Bucket size: 0 [ 524.118550][ T7427] First bucket: 0 [ 524.118550][ T7427] Buckets: 128 [ 524.118550][ T7427] Last mount: 1714681267 [ 524.118550][ T7427] Last superblock write: 0 [ 524.118550][ T7427] State: rw [ 524.118550][ T7427] Data allowed: journal,btree,user [ 524.118550][ T7427] Has data: journal,btree,user [ 524.118550][ T7427] Btree allocated bitmap blocksize:256 [ 524.118550][ T7427] Btree allocated bitmap: 0000000000000000000000000000000000000000000000000000000000000000 [ 524.118550][ T7427] Durabili [ 524.119610][ T7427] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 524.248641][ T1849] usb 2-1: USB disconnect, device number 30 [ 524.280859][ T1849] ch341 2-1:0.0: device disconnected [ 524.413927][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.797264][ T5839] usb 1-1: USB disconnect, device number 27 [ 525.569394][ T7436] fuse: Unknown parameter 'rootmoe' [ 525.638053][ T7440] loop4: detected capacity change from 0 to 512 [ 525.804786][ T7440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 526.029575][ T7440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.043430][ T7440] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.337124][ T7444] loop1: detected capacity change from 0 to 1024 [ 526.515801][ T7442] loop0: detected capacity change from 0 to 32768 [ 526.551271][ T7444] EXT4-fs: Ignoring removed orlov option [ 526.557578][ T7444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 526.724585][ T7442] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,nojournal_transaction_names [ 526.746436][ T7442] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 526.756221][ T7442] bcachefs (loop0): Version upgrade required: [ 526.756221][ T7442] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 526.756221][ T7442] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 526.756221][ T7442] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 526.847901][ T7444] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 526.901431][ T7444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.952788][ T7442] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 526.952911][ T7442] u64s 11 type btree_ptr_v2 18376656804508598271:U64_MAX:U32_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 526.953038][ T7442] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 526.987336][ T7442] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 526.999513][ T7442] bcachefs (loop0): flagging btree xattrs lost data [ 527.006679][ T7442] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 527.054698][ T7442] error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 527.098367][ T7442] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 527.098491][ T7442] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 527.098625][ T7442] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 527.147994][ T7442] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 527.147994][ T7442] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 527.205517][ T7444] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 527.286319][ T7442] bcachefs (loop0): scan_for_btree_nodes... [ 527.354527][ T7444] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 527.886409][ T7444] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 528.182901][ T7459] loop3: detected capacity change from 0 to 32768 [ 528.215759][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.237946][ T7459] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 528.415046][ T7459] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 528.621008][ T7459] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad parent pointer (0, expected 71) [ 528.646960][ T7459] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 528.657309][ T7459] OCFS2: File system is now read-only. [ 528.670361][ T7459] (syz.3.445,7459,1):ocfs2_trim_mainbm:7621 ERROR: status = -30 [ 528.904808][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.003589][ T5839] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 529.161456][ T7442] bcachefs (loop0): btree node scan found 7 nodes after overwrites [ 529.174491][ T7442] done [ 529.222788][ T7442] bcachefs (loop0): check_topology... [ 529.234072][ T5839] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 529.250511][ T5839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.271166][ T7442] bcachefs (loop0): btree root xattrs unreadable, must recover from scan [ 529.284662][ T7442] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=xattrs level=0 POS_MIN - SPOS_MAX [ 529.297697][ T7442] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 529.361142][ T7442] done [ 529.370093][ T7442] bcachefs (loop0): accounting_read... done [ 529.382908][ T7442] bcachefs (loop0): alloc_read... done [ 529.389721][ T7442] bcachefs (loop0): stripes_read... done [ 529.396174][ T7442] bcachefs (loop0): snapshots_read... done [ 529.402729][ T7442] bcachefs (loop0): check_allocations... [ 529.409847][ T5839] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 529.426168][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 529.426324][ T5839] usb 4-1: SerialNumber: syz [ 529.427293][ T7442] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 529.427395][ T7442] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 529.507585][ T7442] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 529.507709][ T7442] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 529.540983][ T7442] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 529.541091][ T7442] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 529.577321][ T7442] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 529.577435][ T7442] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 529.625913][ T7442] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 529.626026][ T7442] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 529.661463][ T7442] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 529.670444][ T7442] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 529.686839][ T7442] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 529.697126][ T7442] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 529.708308][ T7442] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 529.717183][ T7442] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 529.728493][ T7442] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 529.737574][ T7442] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 529.748830][ T7442] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 529.757806][ T7442] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 529.769190][ T7442] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 529.778137][ T7442] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 529.794103][ T7442] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 529.803033][ T7442] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 529.814200][ T7442] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 529.823282][ T7442] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 529.833999][ T7442] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 529.843316][ T7442] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 529.854665][ T7442] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 529.864117][ T7442] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 529.875538][ T7442] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 529.885007][ T7442] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 529.901392][ T7442] bucket 0:12 gen 0 has wrong data_type: got free, should be journal, fixing [ 529.910869][ T7442] bucket 0:12 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 529.922453][ T7442] bucket 0:13 gen 0 has wrong data_type: got free, should be journal, fixing [ 529.931775][ T7442] bucket 0:13 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 529.943242][ T7442] bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing [ 529.952799][ T7442] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 529.964312][ T7442] bucket 0:15 gen 0 has wrong data_type: got free, should be journal, fixing [ 529.973734][ T7442] bucket 0:15 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 529.985382][ T7442] bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing [ 529.999524][ T7442] bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.011107][ T7442] bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.020175][ T7442] bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.031405][ T7442] bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.040399][ T7442] bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.051637][ T7442] bucket 0:19 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.060693][ T7442] bucket 0:19 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.071934][ T7442] bucket 0:20 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.081014][ T7442] bucket 0:20 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.096586][ T7442] bucket 0:21 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.106926][ T7442] bucket 0:21 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.118158][ T7442] bucket 0:22 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.127135][ T7442] bucket 0:22 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.138443][ T7442] bucket 0:23 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.147450][ T7442] bucket 0:23 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.158526][ T7442] bucket 0:24 gen 0 has wrong data_type: got free, should be journal, fixing [ 530.167942][ T7442] bucket 0:24 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 530.179456][ T7442] bucket 0:26 gen 0 has wrong data_type: got free, should be btree, fixing [ 530.188799][ T7442] bucket 0:26 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 530.207166][ T7442] bucket 0:27 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 530.217211][ T7442] bucket 0:27 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 530.229117][ T7442] bucket 0:29 gen 0 has wrong data_type: got free, should be btree, fixing [ 530.238338][ T7442] bucket 0:29 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 530.250151][ T7442] bucket 0:32 gen 0 has wrong data_type: got sb, should be btree, fixing [ 530.260029][ T7442] bucket 0:34 gen 0 has wrong data_type: got user, should be need_discard, fixing [ 530.270017][ T7442] bucket 0:34 gen 0 data type need_discard has wrong dirty_sectors: got 16, should be 0, fixing [ 530.281543][ T7442] bucket 0:35 gen 0 has wrong data_type: got free, should be btree, fixing [ 530.290853][ T7442] bucket 0:35 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 530.306216][ T7442] bucket 0:38 gen 0 has wrong data_type: got free, should be btree, fixing [ 530.316870][ T7442] bucket 0:38 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 530.328445][ T7442] bucket 0:41 gen 0 has wrong data_type: got free, should be btree, fixing [ 530.337696][ T7442] bucket 0:41 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 530.357401][ T7442] bucket 0:120 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.366488][ T7442] bucket 0:120 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.377938][ T7442] bucket 0:121 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.387131][ T7442] bucket 0:121 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.398486][ T7442] bucket 0:122 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.466367][ T7442] bucket 0:122 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.477928][ T7442] bucket 0:123 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.487142][ T7442] bucket 0:123 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.498848][ T7442] bucket 0:124 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.513013][ T7442] bucket 0:124 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.524491][ T7442] bucket 0:125 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.533649][ T7442] bucket 0:125 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.545021][ T7442] bucket 0:126 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.554198][ T7442] bucket 0:126 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.565571][ T7442] bucket 0:127 gen 0 has wrong data_type: got free, should be sb, fixing [ 530.574793][ T7442] bucket 0:127 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 530.595271][ T7442] done [ 530.630083][ T7442] bcachefs (loop0): going read-write [ 530.641094][ T7442] bcachefs (loop0): journal_replay... [ 530.857898][ T4155] ===================================================== [ 530.871010][ T4155] BUG: KMSAN: uninit-value in bch2_btree_ptr_v2_validate+0x51c/0xb20 [ 530.880046][ T4155] bch2_btree_ptr_v2_validate+0x51c/0xb20 [ 530.886149][ T4155] bch2_bkey_val_validate+0x357/0x530 [ 530.891775][ T4155] validate_bset_keys+0x2048/0x22b0 [ 530.897395][ T4155] validate_bset_for_write+0x2b3/0x410 [ 530.903332][ T4155] __bch2_btree_node_write+0x5436/0x6870 [ 530.909217][ T4155] bch2_btree_node_write_trans+0xd7/0x890 [ 530.919350][ T4155] btree_interior_update_work+0x3eac/0x4830 [ 530.926885][ T4155] process_scheduled_works+0xc1a/0x1e80 [ 530.932830][ T4155] worker_thread+0xea7/0x14f0 [ 530.937726][ T4155] kthread+0x6b9/0xef0 [ 530.942020][ T4155] ret_from_fork+0x6d/0x90 [ 530.946820][ T4155] ret_from_fork_asm+0x1a/0x30 [ 530.951824][ T4155] [ 530.954400][ T4155] Uninit was stored to memory at: [ 530.959745][ T4155] bch2_sort_keys_keep_unwritten_whiteouts+0x15cd/0x1840 [ 530.967668][ T4155] __bch2_btree_node_write+0x3b3f/0x6870 [ 530.973662][ T4155] bch2_btree_node_write_trans+0xd7/0x890 [ 530.979636][ T4155] btree_interior_update_work+0x3eac/0x4830 [ 530.985929][ T4155] process_scheduled_works+0xc1a/0x1e80 [ 530.991865][ T4155] worker_thread+0xea7/0x14f0 [ 530.997048][ T4155] kthread+0x6b9/0xef0 [ 531.001352][ T4155] ret_from_fork+0x6d/0x90 [ 531.006134][ T4155] ret_from_fork_asm+0x1a/0x30 [ 531.011142][ T4155] [ 531.017883][ T4155] Uninit was created at: [ 531.023846][ T4155] ___kmalloc_large_node+0x22c/0x370 [ 531.029415][ T4155] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 531.035506][ T4155] __kmalloc_node_noprof+0xc96/0x1250 [ 531.041136][ T4155] __kvmalloc_node_noprof+0xc0/0x2d0 [ 531.046801][ T4155] bch2_btree_node_mem_alloc+0xa96/0x2f10 [ 531.052923][ T4155] bch2_btree_reserve_get+0x37f/0x2290 [ 531.058653][ T4155] bch2_btree_update_start+0x1af9/0x2d60 [ 531.064687][ T4155] bch2_btree_split_leaf+0x120/0xc90 [ 531.070230][ T4155] bch2_trans_commit_error+0x1c0/0x1d60 [ 531.076149][ T4155] __bch2_trans_commit+0x1d5f/0xd310 [ 531.081665][ T4155] bch2_journal_replay+0x3125/0x4e20 [ 531.087412][ T4155] bch2_run_recovery_passes+0x5a2/0x1160 [ 531.093417][ T4155] bch2_fs_recovery+0x489c/0x6230 [ 531.098670][ T4155] bch2_fs_start+0x7ca/0xc20 [ 531.103614][ T4155] bch2_fs_get_tree+0x1564/0x24e0 [ 531.108932][ T4155] vfs_get_tree+0xb1/0x5a0 [ 531.113763][ T4155] do_new_mount+0x71f/0x15e0 [ 531.122647][ T4155] path_mount+0x742/0x1f10 [ 531.127321][ T4155] __se_sys_mount+0x71f/0x800 [ 531.133655][ T4155] __x64_sys_mount+0xe4/0x150 [ 531.138593][ T4155] x64_sys_call+0x39bf/0x3c30 [ 531.143793][ T4155] do_syscall_64+0xcd/0x1e0 [ 531.148547][ T4155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.154782][ T4155] [ 531.157231][ T4155] CPU: 0 UID: 0 PID: 4155 Comm: kworker/u8:18 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 531.168490][ T4155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.178906][ T4155] Workqueue: btree_update btree_interior_update_work [ 531.186018][ T4155] ===================================================== [ 531.193226][ T4155] Disabling lock debugging due to kernel taint [ 531.199531][ T4155] Kernel panic - not syncing: kmsan.panic set ... [ 531.206142][ T4155] CPU: 0 UID: 0 PID: 4155 Comm: kworker/u8:18 Tainted: G B 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 531.218864][ T4155] Tainted: [B]=BAD_PAGE [ 531.223167][ T4155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.233451][ T4155] Workqueue: btree_update btree_interior_update_work [ 531.240449][ T4155] Call Trace: [ 531.243889][ T4155] [ 531.246965][ T4155] dump_stack_lvl+0x216/0x2d0 [ 531.251881][ T4155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 531.258013][ T4155] dump_stack+0x1e/0x24 [ 531.262489][ T4155] panic+0x4e2/0xcf0 [ 531.266672][ T4155] ? kmsan_get_metadata+0xf1/0x1c0 [ 531.272109][ T4155] kmsan_report+0x2c7/0x2d0 [ 531.276900][ T4155] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 531.283240][ T4155] ? kmsan_get_metadata+0x13e/0x1c0 [ 531.288715][ T4155] ? __msan_warning+0x95/0x120 [ 531.293735][ T4155] ? bch2_btree_ptr_v2_validate+0x51c/0xb20 [ 531.299863][ T4155] ? bch2_bkey_val_validate+0x357/0x530 [ 531.305657][ T4155] ? validate_bset_keys+0x2048/0x22b0 [ 531.311286][ T4155] ? validate_bset_for_write+0x2b3/0x410 [ 531.317177][ T4155] ? __bch2_btree_node_write+0x5436/0x6870 [ 531.323271][ T4155] ? bch2_btree_node_write_trans+0xd7/0x890 [ 531.329437][ T4155] ? btree_interior_update_work+0x3eac/0x4830 [ 531.335810][ T4155] ? process_scheduled_works+0xc1a/0x1e80 [ 531.341820][ T4155] ? worker_thread+0xea7/0x14f0 [ 531.346879][ T4155] ? kthread+0x6b9/0xef0 [ 531.351362][ T4155] ? ret_from_fork+0x6d/0x90 [ 531.356202][ T4155] ? ret_from_fork_asm+0x1a/0x30 [ 531.361394][ T4155] ? bch2_bkey_ptrs_validate+0x870/0x3840 [ 531.367377][ T4155] ? filter_irq_stacks+0x60/0x1a0 [ 531.372667][ T4155] ? kmsan_get_metadata+0x13e/0x1c0 [ 531.378125][ T4155] ? kmsan_get_metadata+0x13e/0x1c0 [ 531.383579][ T4155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 531.389676][ T4155] ? kmsan_get_metadata+0x13e/0x1c0 [ 531.395143][ T4155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 531.401348][ T4155] ? kmsan_get_metadata+0x13e/0x1c0 [ 531.406837][ T4155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 531.412946][ T4155] __msan_warning+0x95/0x120 [ 531.417797][ T4155] bch2_btree_ptr_v2_validate+0x51c/0xb20 [ 531.423812][ T4155] ? __pfx_bch2_btree_ptr_v2_validate+0x10/0x10 [ 531.430342][ T4155] bch2_bkey_val_validate+0x357/0x530 [ 531.435998][ T4155] validate_bset_keys+0x2048/0x22b0 [ 531.441536][ T4155] validate_bset_for_write+0x2b3/0x410 [ 531.447274][ T4155] __bch2_btree_node_write+0x5436/0x6870 [ 531.453189][ T4155] ? try_to_wake_up+0xacd/0x1b70 [ 531.458378][ T4155] ? kmsan_get_metadata+0x13e/0x1c0 [ 531.463850][ T4155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 531.469983][ T4155] bch2_btree_node_write_trans+0xd7/0x890 [ 531.475985][ T4155] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 531.482121][ T4155] btree_interior_update_work+0x3eac/0x4830 [ 531.488345][ T4155] ? btree_interior_update_work+0x3c6f/0x4830 [ 531.494705][ T4155] ? __pfx_btree_interior_update_work+0x10/0x10 [ 531.501239][ T4155] process_scheduled_works+0xc1a/0x1e80 [ 531.507136][ T4155] worker_thread+0xea7/0x14f0 [ 531.512097][ T4155] kthread+0x6b9/0xef0 [ 531.516407][ T4155] ? __pfx_worker_thread+0x10/0x10 [ 531.521796][ T4155] ? __pfx_kthread+0x10/0x10 [ 531.526625][ T4155] ret_from_fork+0x6d/0x90 [ 531.531342][ T4155] ? __pfx_kthread+0x10/0x10 [ 531.536249][ T4155] ret_from_fork_asm+0x1a/0x30 [ 531.541282][ T4155] [ 531.544804][ T4155] Kernel Offset: disabled [ 531.549238][ T4155] Rebooting in 86400 seconds..