last executing test programs: 2m2.55777952s ago: executing program 4 (id=494): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 2m0.972038645s ago: executing program 4 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 2m0.038493838s ago: executing program 4 (id=503): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac14140005000a000000000005000800000000000500130001"], 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 1m58.600128651s ago: executing program 4 (id=507): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m57.103549582s ago: executing program 4 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0, 0x0, 0xf}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) 1m56.331550774s ago: executing program 4 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000060068f0100000000aaaaaaaaaaaa88a8600081"], 0x1a5) 1m52.470258545s ago: executing program 32 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000060068f0100000000aaaaaaaaaaaa88a8600081"], 0x1a5) 1m45.55575581s ago: executing program 3 (id=529): r0 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.700637449s ago: executing program 3 (id=531): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 1m41.354378182s ago: executing program 3 (id=540): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 1m39.892477783s ago: executing program 3 (id=544): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x764, &(0x7f0000000a80)="$eJzs3M9rHGUfAPDvTJOmP/K+mxdeeF89iNBCC6WTpLm0p8aLt0Kh4LWGZBJCJtmQ3dRuLNh6FmpzURBEPXv0KpT6B3iTgoJ3oWiNB/GyMptNamM22TZJV9LPB2b3eZ6Zeb7Pd3d4sgN5JoCX1uvlSxIxGBFXI6LSbk8j4mirdCzi9vpxa49vTZZbEs3mtZ+T8rRYa1Y2+0ra7yejdUr8PyIe9Eece//vcWuNlbmJosiX2vXh+vzicK2xcn52fmImn8kXRscujVwcG7s4MrZrDv8rX/p3z/X0W5eO3/v2zdXV776q332t73wS4628o53b7j08u/XPpD/Gt7QvHESwHkp6PQAAALpS/s4/EhF9rV+plTjSKgEAAACHSXOgCQAAABx6SfR6BAAAAMDB2vg/gI21vQe1DraTR29ExNB28ftaa4gjjrWW9p5YS55amZCsnwZ7cvtORNwf33r9fVFeYbf32PfIlvrTa6SP7rF39sP9cv4Z327+STfnn9hm/unbeHbCHnWe/57EP9Jh/rvaZYyvP32l49MRHt2JeLVvu/jJZvykQ/y3u4x/d/WDe532NT+POLPt35/kqVg7PB9ifHq22PHxAw/+OPtwp/xPdIqf7Jz/Ypf5v7v261ynuaSMf/bUzt//dvHLa+LD9jjSiLjXfi/rq1tinJr//pud8p+KaD7P9/9Zl/n/+OXAzS4PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IgYjSbPNcppmWcTJiPhvnEiLaq1+brq6vDBV7osYiv50erbIRyKisl5Pyvpoq/ykfmFLfSwi/vPD8fWgs0WeTVaLqV4nDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKaTETEYSZpFRBoRv1XSNMsi+ro4d+AFjA8AAADYJ0O9HgAAAABw4Nz/AwAAwOH3vPf/yT6PAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjUrl65Um7Ntce3Jsv61I3G8lz1xvmpvDaXzS9PZpPVpcVsplqdKfJssjq/W39Ftbo4eimWbw7X81p9uNZYuT5fXV6oX5+dn5jJr+f9LyQrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntVga0vSLCLSVjlNsyziXxExFP3J9GyRj0TEvyPiYaV/oKyP9nrQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LtaY2VuoijyJQWFl6ZQXvm9HcZ7EfFP+TT+Uhh40tLrmQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF6oNVbmJooiX6r1eiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0VvpTEhHldqZyenDr3qPJ75XWe0S888m1j25O1OtLo2X7L5vt9Y/b7Rd6MX4AAAB4KVx+loM37tM37uMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6VWuszE0URb60t8LlaKw0kw7H9DpHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+fwZAAD//zkLxTE=") chdir(&(0x7f00000001c0)='./file0\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 1m37.125247075s ago: executing program 3 (id=552): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 1m35.815612662s ago: executing program 3 (id=556): r0 = socket(0x1e, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1m33.333329082s ago: executing program 33 (id=556): r0 = socket(0x1e, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1m6.351533173s ago: executing program 2 (id=617): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc57, &(0x7f00000021c0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001880)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001840)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m3.867412213s ago: executing program 2 (id=621): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r1, 0xffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m1.954893986s ago: executing program 2 (id=624): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) 55.223746168s ago: executing program 2 (id=633): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') open(0x0, 0x181042, 0x10a) iopl(0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 53.35589712s ago: executing program 2 (id=637): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x1, 0x9000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x4}) fallocate(r1, 0x10, 0x6, 0x10001) 51.782737954s ago: executing program 2 (id=642): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = open(&(0x7f0000000080)='./file1\x00', 0x34d542, 0x98) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) read$FUSE(r5, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000006dc0)=ANY=[@ANYBLOB="58060000", @ANYRES64=r8, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r9, @ANYBLOB, @ANYRES32=r9, @ANYRES32=r10], 0x658) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000780)=0xe8) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) getresuid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f0000000a40)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) fstat(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r16, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r17) getresgid(&(0x7f0000000d00)=0x0, &(0x7f0000000d40), &(0x7f0000000d80)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0}, &(0x7f0000000f00)=0xc) r20 = getegid() syz_fuse_handle_req(r2, &(0x7f0000001b40)="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", 0x2000, &(0x7f0000001080)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x7, {0x7, 0x2b, 0x7, 0x20800, 0x4000, 0x4, 0xfffffff7, 0x800, 0x0, 0x0, 0x10, 0x1ff}}, &(0x7f0000000180)={0x18, 0xfffffffffffffffe, 0x40, {0x8}}, &(0x7f00000001c0)={0x18, 0x0, 0x5, {0x6}}, &(0x7f0000000200)={0x18, 0x0, 0x9, {0x5}}, &(0x7f0000000240)={0x18, 0xffffffffffffffda, 0x0, {0xfff}}, &(0x7f0000000280)={0x28, 0x0, 0x6, {{0x6, 0xe, 0x2, r3}}}, &(0x7f00000002c0)={0x60, 0xffffffffffffffda, 0x7, {{0x3, 0x0, 0xfffffffffffffffe, 0x3, 0x75, 0x6b, 0x4, 0x4}}}, &(0x7f0000000340)={0x18, 0x0, 0x80000001, {0x8}}, &(0x7f0000000380)={0x16, 0xfffffffffffffffe, 0x8000000000000001, {')/&]\a\x00'}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x0, 0x8}}, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x8001, 0xfffffffa, 0x0, {0x2, 0xfffffffffffffffd, 0xbf8c, 0x6, 0x1, 0x4, 0xc, 0xfffffff9, 0xe36b, 0x6000, 0x4b91, r4, r10, 0x7, 0x2}}}, &(0x7f0000000880)={0x90, 0x0, 0x9, {0x5, 0x1, 0x1, 0x1ff, 0x1, 0x481, {0x3, 0xed, 0x9, 0x0, 0x3, 0x81, 0x8, 0x3, 0x7, 0x2000, 0x8, r11, r12, 0x7, 0x7}}}, &(0x7f0000000940)={0x68, 0xfffffffffffffffe, 0x0, [{0x1, 0x3, 0x7, 0xad, 'nogrpid'}, {0x5, 0x0, 0x2, 0xfffffffc, '@?'}, {0x1, 0x2, 0x0, 0x7fff}]}, &(0x7f0000000b80)={0x150, 0x0, 0xe4d, [{{0x5, 0x2, 0x400, 0x8, 0x8, 0x5, {0x0, 0xfffffffffffff9b1, 0x8, 0x0, 0x9, 0x3, 0x1000, 0x9, 0x8, 0x4000, 0x3, r13, 0xee01, 0x6, 0x2}}, {0x5, 0x4, 0x5, 0x0, 'orlov'}}, {{0x3, 0x2, 0x3, 0x8, 0x8000, 0xd4, {0x6, 0x9d, 0xfff, 0x7, 0x8, 0x90, 0x7, 0xb90, 0x7ff, 0x4000, 0x7f, r14, r15, 0x10, 0x6}}, {0x2, 0xde, 0x5, 0x1, 'bsddf'}}]}, &(0x7f0000000dc0)={0xa0, 0x0, 0xfffffffffffffffa, {{0x0, 0x3, 0x0, 0x8, 0x2, 0x1, {0x6, 0x0, 0x0, 0xe, 0x2, 0x3ff, 0xfffffc00, 0x0, 0x80000001, 0x1000, 0x5, r17, r18, 0xf, 0x2}}, {0x0, 0x3}}}, &(0x7f0000000e80)={0x20, 0x0, 0x40, {0xf73, 0x0, 0x2, 0x677d}}, &(0x7f0000000f40)={0x130, 0x0, 0x8, {0x8, 0x167, 0x0, '\x00', {0x20, 0x1, 0x2, 0x5, r19, r20, 0xc000, '\x00', 0x6, 0x1b, 0x6a2b, 0x3ff, {0x2}, {0x7ff, 0x7}, {0x9d, 0x5}, {0x9e, 0x3}, 0x2, 0x0, 0x2, 0x6}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003b40)={r0, 0x80, 0x8, 0x200}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r21, 0xa71bd000) 47.880063474s ago: executing program 34 (id=642): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = open(&(0x7f0000000080)='./file1\x00', 0x34d542, 0x98) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) read$FUSE(r5, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000006dc0)=ANY=[@ANYBLOB="58060000", @ANYRES64=r8, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r9, @ANYBLOB, @ANYRES32=r9, @ANYRES32=r10], 0x658) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000780)=0xe8) getresgid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) getresuid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f0000000a40)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) fstat(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r16, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r17) getresgid(&(0x7f0000000d00)=0x0, &(0x7f0000000d40), &(0x7f0000000d80)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0}, &(0x7f0000000f00)=0xc) r20 = getegid() syz_fuse_handle_req(r2, &(0x7f0000001b40)="be1a7a0f2e83204e46564e05d50d6e59325c9912a4db528867351533928030d2cdf47d18fc43a9d8da610916a5d5edb436abb2d8d86448db484a74c805f09619d17e7024fb2165155550a4f219c8310c3ee331f0b7f395841a3b6c36394de4799808acc229aa20fea3604e9f485ce57fa804118090d74d549cf0175dd6ee5143f2bcd5994a7ec16d258c97925b95229b0920a8f1be0d3fdd5d20832be30ff8c921b8c769d764203bb1129eb81a3cb43ffe77fd9e22ce21cf062268c56c3de31de62bdedbb5d57724866f9c89ec22c1b70c541566500d384c4bb4b5d14b65cd2f2b84378292e7663e1ef7f2373a58db188410f3534bdcfdefec406332dc2e8a724229d7980d5881f42cb7235a22b150514fc0fc911e0ad5bcba33e6914927deca5b00c20134991ce6a26bcde0ff22c47b73a025ee519902862e9da3a1c12833d358c84104ced48526cb92bcac224c3bd69f313e3129774d31f2bc6ee0649b6a0d334558dcd9e3cc178653f4f212878662a45f293e5c2c419602c2aa5465e10034aa158c3b3c14de23705d51858243d8585f9c9146d37f85410952ba45b56a72b3be3f29b2ddbe380c23426bb3d16aa4f4ab84075a69f671b42483cc5b13c3f6e0cdd1560b4bfa2db7d8c66599bcb2af910dd51f7a77bf778304799b10181bf7f9246d71e988cb86fa137f19fbeb8218fc83181ea0e78af440bb07a4097bebcb759c55dfde4b92b47af9100c6efd6d7b25578f8a7c127acbe8c69c340f25ece8656fc653bcb13f4d7eb058c70e89f57c5c2623611efb8637816a2cb7a7f05d8f8ad55aa40b0d05d154e21ff59e093bb6891a60614aca923701d47bc6d63bd313faf01a406db449c6938841c144edd3f49c69cc57fdb82b6c334c9b868673425a53572277258205041bf80cd84f29539637df5cee649f84f0266de5265776195ca9d7d0c08c683894da92ad45d40ee776b096f02fe0a6734252479078a400b5e43cfc5747300489f41415722315b8f9429fe4de52e7e3994ec9a8f0233c880ef6a24ee26e69f8382d9c0f9b0cf6a53bb70019cd5e2ff7c7a9e31a96abfc0be34c39b44b82f60507c5a55259c0be452f2ac9ec99f301ad6d61bb9d61d679abe08a6250366a3f518a9e515763252032e6a3f5ba842ca4c9e98b9832652912745624a8e05ea5f40562c556795c63f1ffcc75139bc8aeefe80bf5be944651d2cc93aef8b3f2f86ea34c8763b8f8d5e8888c2563baedac5e77890681c76ed20a6bcc9d509d2bce8b96d5110f9f1a7c86a937becdf47d11c9bf858c33b89bad9a785d26eeff2160bd3925abbbb92a9148a3b1effcda1501ea04b5698697008eaa6f79f5aaf5efcc09c4728ac9a63c828b2b8718899b2696a35d4520f7d6bfc788f7b92dedb4711a8efcc1bcbf27f975a67f6066563edf2941e97e7a36efcae1c26117ee763f427f3bee2fd4cc26854a7c67afd7f7bebba5ebed76bbea281fb5d4823c10f89b43a43ffcda253a8202fb932c5b7297376fb0e2fec90da3cbf3733e3c29e0c8622c6eb4704fe49f174c6114958c52a8c1fffe8c7ef9a2805d1e65dfdccb4211697aa7fa819d85eecfa1b44f3f48b806883d6e0ae96e354dffec07fbd470f194290ea95d9dc407b6d98e7d5b00e828c473fe49ca12ce577b3b56c16de339c2932898881ece91da6e52ae39b6d62ee6414e616b2b5070267f367f01cd1bb7abe0171b83b634ca49f1c858447b7d64155e774dec843431a6d7652cc2f5ce85db6fab134b18a961611803af0ff0dc8df00d49a2d6ba12ece82aa44d51ebbfdc0a3d26ff6b927a7d590ce4349eefa9d7c785666f2325af31821c5d9f2a4a314bebd34e05ecaa75e28bd05d4b356dcdc5dbf5d6ed2a88d84aa4cd2aa53e83a122fec07aa6d9a91a2c661d3fd8e91979f329f996c05b657c1933ff35c2496cf7e1c507f343f60393439ff5d91dddab0f07942eab5c7c5467e2592250a51a602fcaaa083cf27dc09487c08db0250d39e27865ac1856b37247285d3a1b03a1f1b22490092219f24f2cd724d0d89e48c139594d5d5cd7887129c34f6fb5a480064a85279a3346d00f77d7d3de780c678959411a66cec379fb3f3a4b10609a63b0471bb5b28a46d98359464046f1e1b36c2d8d53cfecbcdc0b9e35941ab4b04a884d037bf02ea9600fdfbda7a1543696f59dafd9e55328e97047e404f00c72de0e689e82bd753379e8973afa2858df2a56d149d487fae4a949f096d9629024d42c27fbb29066f17b2749940acbc7a04cbee407793d9fa4e8c227956256e7209a4b30686a693c15fc4a9551e65985803eb11ccfd983c3992ee37a4f2ec7148ff15fe71fff3072509c782f8c1ddb254b3846bba162e278ecd57b89a12b8c8024634962c241c8d8860a23c22cc774877c18367e04cc510921a67049cf5782ee3d7e258c7b6bb6d803d1090eafb21e1069f3c04f028bafd7a251b97eac24d2cb80083cfa4bd54475772117c047f0259fdef6639870df29b1d410ec52b1c27b9cb34f97a5ef207c6875dbab9c78a4e7c9ee6720b63444c9519ad4b07f053dde205603b2ac4990f100d6de1e3a90d6cc4851ed5c727efdfa0b62b7ad193d115f551ad5f9dcacb9809a45fd52ab52afdc12a014b0ba1808fb323cab8e1332beae19188c0b9bef44a03c0b36624080a1468b85104323f8eed1d95f3bab7b176d43f8afca70fc08a32789b044a4c5051f8b134afcbf25c314d61d9dd874c3d35a488163cfd969b962dc885295f0a8f0bf6a646a3ddd3d8cbbd78834ec873df52bfd37d0e91018430cc095ff243ab4e8c431a0cce88d2d21aa1612545738ec67d202c32bca238afa0bc8a25562e5413e3ad5f8d8b9eab560f7ee9a28ea683f1d810c2840d0a888297a0242a3233dc377819a1ae57488f0f24c7d53f0e7056febe7598b4af4b1a5ddce781022a94c8752e4b6eb88e05cf3c6af5eb47ad21d5885a13767ac01357727318740e5e511f45983034108870286307ca63d77509c883f6d638c5c2862b4350837a5924b8a4cbad313e5b00d2abb75d497c8267b7e464470aeb86a9379e2a5b663045248d3e5753fc62323069cb9d18f9d0c33f9343b9f68afb0e87624bad7537ac799c42208cd9f21e8cd22b4e0e2f601817014bd850a46a68bffb56e45a7f5f8ed857e81d9244eb07d768105dff1c7cf5ac4e39e89e2b0d9c0912bd0ac2d511c67afcc86c50943f74efb7286c5ecdc84b577d1ec876ccbbafa5b221cacf728d074a54cac940792098840774ead547b8323e8146c0c1bf970d7980b00045ca8258024faf5b5210af8c37f0a43b3318da61a61db27f9ac25b036f3c5daa7c80b24d6d691926548aa40155e109aa65750e25c50d138c2b6d520b6909f2cf1a7ace51b1922ec142d273652f47ddf96f8ff5ad17a43cb908999f46ae862b9734b66d46ea744b60f1d11b900a6c606f7df9fc2c5bc006110f7d594e1f91ce34973512ae20a86a587ea7b7a50c599313cc3d386b67327d754c77cb83a75d8bda32582330db8d3543d2651d12c9b43d8673378cf582831fa984668476048e67e0d8219507f9e68a9a4a86ec323bd515094c0036eb93f238f5a1f51c45b1dd4dc4027c965d64a6779dc46d62f2438385fa868ceb004612c89a1c005cada72518f92ba1510834822c855d14d993cc0253821af73bb79d85de65d8723cd238ea3953dbff92ffb7d471c6633821d88efdd7a3a9eb7a54dc03fd1b0e755d381e60798c4205a9386808e95af4450ef062a19901e3e2400d6031e92d8fc87b28146a523bd6571107c7ac6ca1d753f847c4a44558022a91b4f40c59d3bb054796602dc3e2e2867e0a7abcdf4bb94fa169d68fba313c6198fa133a60ee5f44e08d778274d6644fb781902fd749228db6168479f933277bd4b5a89361a99aed50a3bc014257e1e977c21a0fb176fd80d8b6a67e5a0509d1f258479d3a3480c581eab9ae20b28e73acb087d622c5cf9413a917dd1b5be37294bd5ea07ec8423ed622fdaa77e069e60bc3683e205aef07083405c77308059896fd467e6abab05aa0e2b6891d26573cbda6a465f23efa17e71c9961468811a43aea7cc69cf8931ed7c79aa0c8a72626f2b4a996cd4d942f0dd14f835b5ed3fa47d7c9aec9ab1a9b52888122b1decc764a424d1f9d4b3e2f44b328b8a59544a0c8c7157a2bf76432576774124eb1e8c4780f1e0d32ae5e6f16ad7769c82957f0bc33079e390aa91b5b0a63d94ed4abfab35a8c320bb3c0c2aa0fc5457be46669fccf25ccd8efe2b1c4549cb0112df984c2bf29e3f4537aa67d5b102c60b051ee05d3821020c0e456dee84874a2e14a1c7022f0a1e5a8ec486a8e444cb1ecffb6ef13e3055b6f3d9b17baf6a3b75da416a3703a93f4513d5f419fd72b20eb27f6db8e4677d7b4c1637d1cc27da85b299aa090e3d108b541ac8cecc7cb9269269e2851a8dd5b9424165d98f9e7254904b7f19f90e4546155f6112b4b10ab4f24013738d77230e94de0dca4f6588c76f025027c59e63426bfe43f2e9ae4a4dcd6082dd7d82b7565bd7b018d9d520c8184e7a070ab97408f2f861ae6555bc5f8ad531954030b183113aba7350df0e61a3ef139143bf0e93d5fb81bcdbbfcdb32c6ebf8238c655f9b7c3beace7a1771423b7761b47b926eb033eaf98908d21823588b49b6cb83b7bf68b24ced78d40f5346cfe88080616bea1085b0a56802a5df42d306836d619044edccc5d210b913263ca7487f43ca4e7decf3a1ac34efe6dec978dc4c03ac3d9f3e9e030d91198312d49fc8f58e07eed5359a2a238b1c82b23d2bf2e83e1e15998ad397469ae88e10dcd35ea037cba32b2847bf7576153318bb996550401fbca6903c290ec5b2f115352fd4af76f7dd2fe05624d26c7950921f972248eac4a0f47160d6f5a7b80b0c0993aed23dca5a7f8da497aaeed3da2e35cfd21d47488fd39e075da5971df2ec2fa017c2fad048ac60118ce6c8594fba0476d8f2c3059c03d8a2409ce07ddba7a9013e453319a09dcab0ef13771fbcc5e2f44e873e9799d2f29b427dab4793f0e7d08a57c3fe22161e8f6fb44740fd67540302f02ec97c04f57b90247ea6d741da063d92c56915510797dc9b278c9d798029767e3c1caa212fa1483e5c460dd0639c38063ff7ffa845bbe9132a01d9d4f0ea634b15bec8d33c147262982e0dccdebd5ef39a23c6f1d1e561db834cc58dd7cbf741a5832ad0b64ff2b6192d62e72f5f09afe44470e9f5e1cbf039f6ae290c10be1b175ebcae836d62f75014d48a3cc0381629f389f290fe5d9ec13a1131aa21e547bf995e8e85db3d9182041cdee6276f72f1aba9e5d9af22a8c6426d16fd56d8ff453bb9969d3cc6833f44d03fef06e332d9072c5bf817c0db71954aa1afc6e90660b88f6e18cc3e8c6583a131bd8374ea1e7f16c9690d8197d97140415401249d62dc3f35c1c5b46db53d5b3c588d274ee11806cbcd01395c2159d9ae3dd239c9f82504819cf25646b2a8ded8f0f1dde200aadcee0c293a41106479666bbd530389f7a7686a829961e7396520a4d96af3bc7198e968ecb9ea754e0d40afd540bc552a68a4cea7c78284a6730235103b3b0be3f117d467fc2795f00c3c600bab0d4c21d3af7808ff6d19bd0972b8c5063c230623f248ad90fe03d2c701b62fb866243f8d04d62844e8774f5afe04f8d22d1352b486c64550b3a6c51cc8785b87af82be424a11f2bdf86bc757a246c2065fe7225ba9ecc21f330c9fe6efd7015fddf789fb9dcccf1d78938ca154354ea916c0cb280d02b0772d504fb1d7018fa0bc22ae42b4c0b6b328b5dc6d6fe17bc41f6dab88af575eac8cc6f4f76fa3317ffa548d1bdf6e0d9e29c9fcf182af7c277cd3a8c2cf428c05dd666f6ec1cd3f890c799a8dcf894ea6e598b4655136f6051701ac1dc5f7da46e0b2e490b933b7c999bd28868e54f91138914c8fd756dd7806257a7b604cab32ff0f2220032bab8e7747b60520c92ca6487da3d07fd8a801eb054bda196b611c297ef391fa6d2c101beaebd96006cb10292c11af95bf05234299fb316efa37f3d8354cdd22b9fc3a77a04e237ac6b8fb69e119bc4c2781fb7bf3f398483bdde2e7ef09e053b2f4ed1daea3c0df175fb96f57d12a13b00f2789c1718c8c9c2a5ddeb2a4be4b862a9658a02f49bde8404209217d2ea80e60f2a267dc841c53f35f796b22f35ac6ca6b194b273215dc1de1ebc1a734d676966458f170d903f73ee91fcf14aea159887298256316db9b81086b6107a11c454229978b9063e6dd0ae67066d905c9626b8367f330e1ef8bbc47fc1e1e10f9365af6aaa1c3f4438f9e5532927afacdb98097603b2a0c185292e1e597edfb20f5098d9f222494114a037db6bce70a3c2d2bab9bd2bca444abf4d2f352d42446d3c81fdc8d73d5324cc0a5857729524f7b0fb1886cf2900006c1ca887eb84f0232e527466ba15607d2c2e09169ed561c47d28f37adc7a310412b4b0ca4e88ca928b9310013d296098ca84dcd421ee2d04368755bc95e8652b4d102d52e0d92c3445847a9ab64a6100338f3f8ce4e3596f386108550aa16961f01ebbb40b2d53a2ccd2a523ba6d12ee7fb50ee7ba8970be7d6646be2ed1ea5c304a77c9c6078e3fff2af43534d70198c02ae68bb12dea2abf5fe4c45ce45249d8023ac4cc448f745267af1137be0493e38391ee1057dc42ab6454b27bd9352512dc82f3f93fdaa39d0fd7b190de94e945870585506afc8607e160739afe42d6ff0f9067b224841223242ad47f0829c1ee2d585e7f39d57fe9d61dd0504022a3b6df936d1f6f0b92ce315e6f2e862dcbb49b0c9baaebb6aadc16c7efc70d22f24791b5e353a6d3ec459bd948377e10e816d44b9f036e2e9c548d52bfbfd329cc4acd169dee1b4a1d566bb0f470abd709aa8a94811fb205cbf8edff7e7deef7cd8fea2d5028a8a6d28ef020488f8f24273f1f9dac52106883f19dad905fc75e87e915aa8cf95cc471b0f5035ed6f79bac020d36a215abbff0e964b5f72ad0b6859de0bcfd5d9caed039e986618c9eaa927fd099edf302f0fc1b04fc6285591cc6720140ab625ebf45a8f0f36cc00c19a913a3d8733ee354722ac6912ee3fe984cf9cc3d15ff612e50a8a1591979d86b12846615fef70ebaaaca5aa35ee29d00e4856def393f8ecd3a2e5480390f95781c880a09ba1ccb4ba39c4534100fef0c57fad3f48a7a5cfb0743b508e9390822c22923fc8354f769a5a6fe5904127bc8d035450a78e148db6b1e51562afc12f8f5d7a22488331313fa196ef2801d71ac432553127f0510d6341e6c53ba94dd6c23fb9801cc268a6d23fa826afcc2c09436dbf0e9eb341ca3f416019feab9c060290cc6eacc7b2760fbf905b298463b22e9bd2f60167c41e0057563fe6c428bd0ea15dc6da0e0b70be631423e9003f6ff9bb13a84a41a47a4bccec127b6cf97479b7b81e9fa34d31c3cabefae223dab6949f48b6d9f7bcc22539d1ffbc605e4975876df57ef43e98beeb08d66b6fecc214415bf2be24287830c127a6cda1ce731e468165cff911cd1789f8307fc1344ba8af80afd02faf76ee8b373f7c4efa4d952deff5845f477e303e8a329a2e87bde21d2ba8aafa7d8098dcad0d2d80c3c3db6fe8da489b2b7c7c5413c21a76a1fb5afd56b1044f83ea5e22b77de21074b3c61de32eebd6bbbbab24ae65b1ac7b7cfb3b4b07c5573f976b3bfd4caa17bd3a8aa0b278fec5963b9f78168c05fbee38daaf62264d8e7c645b766a9fa22441d45cc7351b07fc8810dd8f275e27b5a395860d5432d954987899ad7528acd20271e3fba4ee6d7b582ca955a7b51877e2e1f31b1250de357f944cd32af4d8519d9576b572a2e834b3bbd0bb853162697bc6a343833dcb58bf1bac5d736eef355a85ea014afac1fe433839e100fdcf13338ada3e6a8c2be5e5061796993efc8082deece2ed17e3ce54e6a99ae45a2dac387f0d21e1b1557a623c78ba542bda27b538e6387e7b882be6183d4e76d2fb5760d21c324edc7e4187ff2f619c276303ce23b3eb9de262d1043e241286088ee1013a33634d3bd691a66c2fe6853cf9522e979f8d7b133d14cdd9f1cb118d8dd1d43a3def0169f713435cfd748d793bd71b7d8654d1bab97ebfbc15e25582a1893f0606b2086d0b58f9fb52c4546307759c65d53f9d60f5420b7ab841c414f4d8eb45ef930a3391bf35876e197fa660b48df572bf89bf1890ab7f43dd3e44793c13bc2149bb840aac42b40336fb6bf59b167a67f10a5d4bd6d96d8ec0715c7f1e954430fdb9853c66689ef526038c5ab897bd32824cfa3f6917a8c0d6918b52d737177e25a9b71f90808a207b9aa0ca8bf5adf67b2760b5841321178180bf8bb6f9d97a422b3c9fb0a416e954e54474b9ca7f189da80ed5800e9f7917921be8975f76d3448b7e120247e2c96b520257792e96582368d18b2e0fd69aba291f5b710010b4cb26261daa9556a69ed84f1e51a5bfaa26b949f5129fcfa11136a7efddc2766aed05e5fa4d691deecd604793163d0523f9d0e433c714a510012a160f82e287a1204752c834d966a6a58e7e3ca20375e6a20c08f937fad50f84a585924eed5894d4d5c74d94f4f6f5be7cd078bb0060836664c37092cd20433a952321a920ac87cc23e3b1d45f730b03e91e3e7190894fd5dc26f0949311f4acdb1bf44d9a8ac854e32b2faf0d648bebcb69dce06caddcf0d881ebc34c6145a5ad0d0a364298e189a8e2c964afbf8e9ae07fe4d63ce3dac53ced2ae2e8de07fa42a467b84494ad8329c3e4ba86162612469e9c7b763c69b06c6f3c76e8e18dadb57fbe8ff83bc849d4be4bfd5a8890fed5f34700b9f6492346be51f3c2c2952d71d3967f23c1e1e8f3378b7d11bf214d3899abbe018651f8df68b6fe8b9d2064d5ef28a44070787135a775da23449ba53e13683e1a82152c437467960edb31c8331c4010ec4154e80c032c4c94e8498d0dd15cbdcc73ad768f9f460d410ae94b311e59b7c117128bc3701c7a8e1fe4979d9c98ce1f05ec153d2925bd4f07b4df18ddf719b7802c4a097dd6361c012b64434bc072330d4a42040bbbdb2e4141ba3034a5f0ac9df79874e33e3e875f984111a29820b0ba89fbe6e4c992d23e8fffe75f9e8a2a6dd1944a69538371edf40b76ad6cff658726fa7d593d0c6356ecc79da965d392e46203777c0fccf1196d285e8ffba42dfea6efaa9a426f2e720a11be61aa30ea3438646fe67ef60abc278a61e69d60ee4c6f89f7d8b78a0c9ad6c35911310b24d4dadd66e16b0ee144f872673d68474aa893d142b0c585a0cdfeb4b49994785edf4d4b42512f0cecb57a1a07516df5c096681e220125bc0c35f98034edaf1f242750b35c79dcaf1b2fd84992d43496bcf500f36ff737312fae110eadad1f8b55b0262377f55e0f23f5bd435d558ffa9fae22284302b5c10b2b85c0e9e59aaddad7e210194190b0d213ffce8aa8ffa6512ff45c5bf575fb6eca9a2d64434bc8dd3876bddf98c91905ed32791e25d12f037a43bdbb4b0de695669adf177afaf78a3ddc1a25acf83a70ef42a8217a99d2816fd54a95633f5c2e36bf0a2568b63e3d1f784fd273fef22ead0cfa919347e714c4f965518ac967d402a66a2ec9aed2059bdf895ddc834da032ad2d51f58cb7479e95374c935853f07ef2bde215cd507312e2788f9ebe200e31bcd4a80b9a5e6e97f28409a444f1df81d2ebedadc091b7b28f6b45bd7e377b3d732229d09ba0a57610201c1378684c3b94be28bb888507256636aae5d15a75bb434f2215eb3a0d6aec79a7df8b6cda55bdf06fad667c4be4862e3b6f5f4aa954b8839236935721885e71bf5f4ee1cbbb6f30ecd450c0cd73abb7cc7860040b536227ca0d015aceb94da3d6f5561820cacc5b57053f98af2fc44d3b918119f7c0dade2ae7ed3e04c48fe015e188168bc2a972ecc76b366079084a2dc3a1c6abc677d0bccd8966e8c70b5f34ac06d120aeacf45a202d7254f65943dea51e3b55c81e2d178bc914693c964cd28ae8f6948cfa3ac6b7c92f9bb9920ca34c50596d5d97413dddc9fb4f2a029d02c1fddca218536b46524c8482970c626a789a5fae071c44d27b0ebeee174c77340d378ad241f0dc436aebc08570537711871259ad44be0beb8102d32d9af6a8f7606b7228746007d8c68e3a095ab62ecac6ec7812447fc541cd933702a402b83f612b5b80a2e4ed713155b77e723baafb9c0e6a119404f215117b1db5de771bbf03a99fa22c621fd4d988571af4ecb5a934f48a0dde0e19a0d70fcf36d158174fe1528c458d81b4b3b595c805f6e4a931b6925a3a8b81242bec7dcc6654d5543f93bf008135f3ec13f88666af6f74daf80dc51cbe6317bb1a2b5f30fc98b4049edc9bb3a1e0a72598028353523546bbf9dac559e5d7352bb5609a4a8f60f4377fe2988e802c67bcb9f41bf70ab779e50101b41c89bf02f50e8e3951498c0c5ded33e06e6244613b0e715d145abd909a43c74ae7cd7f6f42c1d012235f1aa7a01a69eb02c8a002a021a8e185e600138647b59079b3e54918037314fcc20beecfd31fb8cc09f5305d63026f4ae9820f4865bda89698f3c50ece1ce1fb3d8ea257be63f44aa5b6422dbdad9672431c151201805e1f4af57b8425b00395c1f76e849524a1deefbbce6db717534bb3bd0f9376af3c0be0fe1113fb470cb740546893f870985e0599cc6e088cad4b40021ca1ccafa7ca53f36dbde91543452fed034bc05e15e5d77abe6ec059b40e60b0e5efa61ff693748ccec21d85309817e2256c9d71f1411c8f5a21f310a70ac397bb11fb11a9444507fd147a435b04be0616ae8117d2e4cb26b35d153c008e5792dfeb02fb7f3636706178c6d795b640e10a63253cbddf74c7ba360a9affaddcf1275afc6ab358605ff1308deb9420aff8ad16583592428217508f6a5ff7a783ce6e49486d6f66c3163a02d871c15d6225f93355ad387ad889d01879a9ed676b9105b3eed0cda18f53b23dbeb070c41d49c51c827d028683bafd545ab3ea1cf08826395b719cb4135f71003b5a5e55efb6753f04a1fabcaed5db9255510e8b298c0f543ff6eab9f20a9bd18f839a5319b72dcba5763f49f6b6033287717c6e4a0ca2ac80c4d813c3e5946f45c028eadfb8c835d0f8ac3c10f6417277a34d468f0c8b57132fcc2bccadb3760e60dd0d5f98ebeab5ba123a7a38f4111d00a9fa6432d11eac46248147e2d1dd88646cfd170ba76eb79ebf1116eda6098b4a2ae7fb979cf43dea9693a6b9e36fa6a4d58f1ec128973d94e94374c81cab24a9d2aee819ddae281c521bf1950c5f1d93a13133902c4b8d28dbd1ab2451488435861c0af2c04d0a908505ea47dc91e88bcd4c721331102dc9e386418203d3e6a04666d430c00cc222e6c66bdcc300d77fa0bc18df47f949144da6b943bce412aaa547e7ff0eeaecad3893b073d499af375c3c19dbe3cdc8244180604438497f25f5dd7f2ec92f4c03858a4f624a38e29b174e55b89137d12293b7df92434b86990beca7df5c4ed51d048d2a321a3cc9846", 0x2000, &(0x7f0000001080)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x7, {0x7, 0x2b, 0x7, 0x20800, 0x4000, 0x4, 0xfffffff7, 0x800, 0x0, 0x0, 0x10, 0x1ff}}, &(0x7f0000000180)={0x18, 0xfffffffffffffffe, 0x40, {0x8}}, &(0x7f00000001c0)={0x18, 0x0, 0x5, {0x6}}, &(0x7f0000000200)={0x18, 0x0, 0x9, {0x5}}, &(0x7f0000000240)={0x18, 0xffffffffffffffda, 0x0, {0xfff}}, &(0x7f0000000280)={0x28, 0x0, 0x6, {{0x6, 0xe, 0x2, r3}}}, &(0x7f00000002c0)={0x60, 0xffffffffffffffda, 0x7, {{0x3, 0x0, 0xfffffffffffffffe, 0x3, 0x75, 0x6b, 0x4, 0x4}}}, &(0x7f0000000340)={0x18, 0x0, 0x80000001, {0x8}}, &(0x7f0000000380)={0x16, 0xfffffffffffffffe, 0x8000000000000001, {')/&]\a\x00'}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x0, 0x8}}, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x8001, 0xfffffffa, 0x0, {0x2, 0xfffffffffffffffd, 0xbf8c, 0x6, 0x1, 0x4, 0xc, 0xfffffff9, 0xe36b, 0x6000, 0x4b91, r4, r10, 0x7, 0x2}}}, &(0x7f0000000880)={0x90, 0x0, 0x9, {0x5, 0x1, 0x1, 0x1ff, 0x1, 0x481, {0x3, 0xed, 0x9, 0x0, 0x3, 0x81, 0x8, 0x3, 0x7, 0x2000, 0x8, r11, r12, 0x7, 0x7}}}, &(0x7f0000000940)={0x68, 0xfffffffffffffffe, 0x0, [{0x1, 0x3, 0x7, 0xad, 'nogrpid'}, {0x5, 0x0, 0x2, 0xfffffffc, '@?'}, {0x1, 0x2, 0x0, 0x7fff}]}, &(0x7f0000000b80)={0x150, 0x0, 0xe4d, [{{0x5, 0x2, 0x400, 0x8, 0x8, 0x5, {0x0, 0xfffffffffffff9b1, 0x8, 0x0, 0x9, 0x3, 0x1000, 0x9, 0x8, 0x4000, 0x3, r13, 0xee01, 0x6, 0x2}}, {0x5, 0x4, 0x5, 0x0, 'orlov'}}, {{0x3, 0x2, 0x3, 0x8, 0x8000, 0xd4, {0x6, 0x9d, 0xfff, 0x7, 0x8, 0x90, 0x7, 0xb90, 0x7ff, 0x4000, 0x7f, r14, r15, 0x10, 0x6}}, {0x2, 0xde, 0x5, 0x1, 'bsddf'}}]}, &(0x7f0000000dc0)={0xa0, 0x0, 0xfffffffffffffffa, {{0x0, 0x3, 0x0, 0x8, 0x2, 0x1, {0x6, 0x0, 0x0, 0xe, 0x2, 0x3ff, 0xfffffc00, 0x0, 0x80000001, 0x1000, 0x5, r17, r18, 0xf, 0x2}}, {0x0, 0x3}}}, &(0x7f0000000e80)={0x20, 0x0, 0x40, {0xf73, 0x0, 0x2, 0x677d}}, &(0x7f0000000f40)={0x130, 0x0, 0x8, {0x8, 0x167, 0x0, '\x00', {0x20, 0x1, 0x2, 0x5, r19, r20, 0xc000, '\x00', 0x6, 0x1b, 0x6a2b, 0x3ff, {0x2}, {0x7ff, 0x7}, {0x9d, 0x5}, {0x9e, 0x3}, 0x2, 0x0, 0x2, 0x6}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003b40)={r0, 0x80, 0x8, 0x200}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r21, 0xa71bd000) 12.480810687s ago: executing program 1 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000000)='./file0\x00', 0x0) 11.395299495s ago: executing program 1 (id=714): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socket$pppl2tp(0x18, 0x1, 0x1) 10.268645242s ago: executing program 0 (id=716): socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x8007734, 0x80, 0x0, 0x34f}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x4507, 0xe20a, 0x0, 0x0, 0x0) 9.702232728s ago: executing program 5 (id=718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xffffffffffffffff, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.886079839s ago: executing program 6 (id=719): openat$vcsu(0xffffffffffffff9c, 0x0, 0x12500, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000103ffeb00feffff", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001"], 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 8.730798473s ago: executing program 0 (id=720): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="37a9", 0x2}], 0x1}}], 0x1, 0x1) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 8.083669841s ago: executing program 5 (id=721): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) 7.818398886s ago: executing program 6 (id=722): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 7.519666987s ago: executing program 1 (id=723): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000300)={0x2, [0x79de, 0x5, 0xffff8001], [{0x7, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xe69, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x200, 0x1, 0x0, 0x1, 0x1}, {0xcfe8, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0xff, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x100}, {0x10000, 0x5, 0x0, 0x1}, {0x69, 0x7, 0x1, 0x1}, {0x5, 0x82c, 0x1}, {0x1, 0xfffffffe, 0x1, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x0, 0x1, 0x1}], 0x7}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7.123744981s ago: executing program 5 (id=724): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) 7.056344328s ago: executing program 0 (id=725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 6.215024759s ago: executing program 5 (id=726): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x5, 0x200, 0x100005, 0x800000000002, 0x8, 0x2000000000000031, 0x200, 0x1, 0x2c, 0x1, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000d40)) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 5.75422901s ago: executing program 6 (id=727): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e1effffffff"], 0x190) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) 5.542115702s ago: executing program 1 (id=728): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2b0d9de424c247e1) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 4.893131017s ago: executing program 0 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r2, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r2, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 4.556476861s ago: executing program 6 (id=730): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 4.469735796s ago: executing program 5 (id=731): r0 = gettid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) read(r1, &(0x7f0000000600)=""/73, 0x49) tkill(r0, 0x7) 4.153458881s ago: executing program 1 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x130) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 3.485746872s ago: executing program 7 (id=643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001bae", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x9, {[@eol]}}}}}}}}, 0x0) 3.369514423s ago: executing program 0 (id=733): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) 2.912356252s ago: executing program 6 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0xff, 0x5a82, &(0x7f0000001080)="$eJzs3X+QHNV9IPDXM7Pa2V39WAkcZDCrRUYJwbG14lf5RyqWc4mdAoeSyynH4mTDglZE9kqo9COATGKRA591YJedci7ByR/EhX1nW3FxZV+MQpmAOYnzLxUXH3VlU2ffYf/hK8KhMqCjXD42tTP9Zmd6p7dnZ2elBT6fkran37z59rdfv+np92Z2JwAAAPCqcPzOfaeuPvd3v/1nEy989Pf+YdftYahcK6/GCsPp8pYzlSGnU39lbW2Z7Re/9pEv/XT0ht/+1v2Dn3/x2PYLdvzwd8664cEPXXn0nr9+5PkVX3vpqaK4sT9dPLOePJOEUP3Gyb/42LHvnDNdlqyc/lk6FMLqZM0jq5NMiLFfhBC2T+cYQlibufOrL1y6Y3p5+139LeWrMvX091e36eM83bEOnrr5DeFH79h6x/fWfeXv+o48fWimSlJt6k8hrLyu+fF9IYSB9H9I+2Jo6o+x024JIQw2Pe7NBXm9vsP8N+asn5cul6XLoYI48f71mfVSpl52PerLLAcLtrdQeXl0U6/cQZ3lmfXsyWih8vKM5avT5dfT5cXzjF9O96GchFISKo30J5OZPhKajlsSktqxrDbWS41jG9L9z6wnmfVSZr3cl9mv2nbTjlZOktbyWC9THk/HlbT8guZzdRvvzSl/bbqspk/UF+N6yN6oG5p1o7FfNTGvk3PkcjqUms5B7cobBz49GENp2VCyZtZjptqI9x3beveG8rZvHh/OySO5P0njJ13FP/jd1cs/+OXDB7Kv643415XS+KWu4v/4qhPPXnP4c5/Njf+pGL/cVfxLHhp85qpH71yf2z4nY/tUuoo//tRjn1h39vVHcvO/N8avdhV/89ET/StOPfRwbv5jsX0Guor/5Nve+ZMvPvHA07nxQ4w/2FX8bUf3fLJ/5NRFufEfju0z1F3/ee7IFT8YGfnZaF78x2P8FV3F/8Khe95636q7rsw9vlti+wx3Ff/dFz54x/JTD5yfd+5M7u30FRaAds5Kr7E+nq53Nc6cys5azF/TeOGvRiv1a77l6f8VC47eJHPxOb2dlb2MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhNe84b++63+/b/iZSrren954slRfxvJlISQDIYR9+8f37t+5+8bRD910YO/u8cnR8f2jE7v377119LLfGN07sWdy/Nbpe8feeGn9cWtCUl8m58/a9kCYmioNt5bF7f2rC4/8aMOb/88/hzD2mu+PVHLz33jPrvvObvMzI9k89fZdB67+/uV/m+7XcJrXcJu8pqampkJOXv/3/b+8789P/vSiEMZ+Za68Hnvyt/6xJaFawUycVKk/1BPqTwbb5tHIOs0ntldlx87JibG523f68eWc/fjXH3n6Fztu+fQv6+1bzd2PDtt3YPPUZOkvt777///lbfWCorzO1HEvau+4FzG/2H7VtL1Xpvu1Mme/Kjn7def3Hn7iG+cezm/ogv3qSztAX/LajrYb924wWd1SXk3rx0Ti4zbu37Vn475bD75x567xGydunNj9lk2Xbbpi7PIrLt9Y2/ONvdn/5w+Fscpz6wZD3P6vdrj/vehPA9ln36ztrvrjQ1+PPzvrT615LZt3e0znVdwezRnlPf8G3/uxz7zlnkevrhcU9fNYu3E+SZeD08d5U2jqb7Pbqt1+FR2fEMJou3Z49vkrwzn/Y+cdReeh5iPT/DMj2Tz1nfU//9s3/83a36wXnJbzfHNCXZ7nG1nP5FNrr+qOnbc3111q7dsfyul+DbXNa9N3Hu27+/g//0kjv2XLwi3j+/fv3VT/uTzNdHlyXtu8sqVxv9bVfpZDenhDo5u26a/T+kI9v+z5M1bPtupQet9QsqbtfmXF+45tvXtDeds3j+e1dHJ/fYsDYUV9mbwup+Zk5oHlRsLttr9Un39F/WPkXX/ztfd97e8vm9U/Lqn/LNqvJGe/vvLEFz7z+U//27/v3X6967dODP/8f/7RhnrBkj+vlOuJNLJO80lmziuTE5eEUPT8Wxfa70fj+ffvyzFumlH7/Sl6/mW3M1O/fbzRzPpQKHf1fL3kocFnrnr0zvW5z9eTcz1fm3f2tpbHlQuer0ul/2SfX0mlNY/Fe361dJRk89S3Pn7WoUc+uuXcekHR62Wjdrt+fWkH44+c/frHa34wctPov/nvvTtvfOk3vnrtD8c3/2m9oPvjHnPpzXGvpu1bzWnfRtZx3Nncvm+64abJ7fXyonY+c9e/6bJg/BNPJftuPfjh8cnJib37OtuvTl9P43ayrdzt62k8u60p2K/SrP1avBudtFenz7eY//au26v1+TYUkq5eFw5+d/XyD3758IHhWY9KN3RdKY1f6ir+j6868ew1hz/32dz4n4rxK13FH3/qsU+sO/v6I7nx703S+NWu4m8+eqJ/xamHHs6NPxbzH+gq/pNve+dPvvjEA0/nxg8x/lBX8VM/y43/eJJuZ/oaKYSvvnDpjvp6EvrS51vMo68lr5BdTzLrpcx6uXm9FGcR0g2Uk6S1PNZLyy9oyqWdP8wpj1dh1bX15YtxPWRvzF2+1JSazv3tyouuUwEAXuni+//xGjS+/z+RXijlzzTAjG7HYT9+7sgVPxgZ+dnanLhxHDYzn9P6HuvaNH58fJwHHHlTGJte3j5av9Cf7/sI8fmQneeM27no9a0xCuc5p2rbnzXPWTT/vj6zHvOqz5dXmsahqdnjmkroYP59fSZM0fx7ZveL388a/fistEab5q2yx68vnTFr93mH0NoulekIef0jOy8WP88xsjJsqW2vw/6R/RxNPA7Zz9HE7ZybOXF2+zmavP4xPLsdWvKK/SPWm6N/1FIufj9y9vELc7TvzPFrHy17/OZxvKsh/KfPxZXFen+2B/OGbU9pncwb9rfZQryv83nDxX0/zLxkTvz0CdbBvOFLq1oed3rnDWN53I9Kh/OJ78sp79V8YjxdxLxOzpHL6WA+EXiliuP/+BoxPf6fvgD/f5l6ReOU7FVjjJf7Ob1y+3yKxh2zP6c32NXr+Lajez7ZP3LqotzrnIc7/Zzenpa1wYLP/RS144bMemE75kzQFI33stspavfs5zKGwoqu2v0Lh+55632r7royt9231F9Ii9v9My1rKwrafbE/z/ny/5yB8ULb+Ev8cwydzp+dsc8xpB98WqzxyB/klM93PDI460Zjv2qW7nhk5oW0v3UCDwCgrTj+b7x/lo7//1eskF5HFI1bL86sx3i549ac65O8cevvp8tbMvWH0t+omO9187svfPCO5aceOD933HJvp+PQ/9iyNlw4Dl3YuDl3HLGlN58Xzx1HNMZZCxsn5ubfGCcubJye8zZt0zh9YePo3PZpjKNb5wE+c6Kz+HEeIDd+Yx6gh+Pcl2Yqnb5xbsF8XWZjcbXT+bozMo5e2bqfizKOTn99drHG0e/NKZ/vOHpo1o3GftUs3XF0a7lxNADwShXH//EyLo7/H83UW+j77Lnjgh5dt2f/Hkgj/uOLMq6cid+j93+Lx32LPW7NG9cnh9ptJd7b+bh+seclXu7v/y72vNBw7Q94pvE3rewwfqfzZGfs/eWlMi5ON2pcDADAUhbH/wPpev74f2Hjk1njt776JeTM+OTlNz5vrnfmxue9et/d+Lxt/E7ft86Jv3Tmvxb3czKv+vF/XE9Xp4z/AQBYguL4P/7aY/z7f/8lXc/+3fqlN06fSi9JF+l99LQ9jNON08Mc4/S35/y+R7y/83F6j+fZYvzmzwGYBzi9n48fmKlvHgAAgDOhrzZSmv179h9Il9nfs8/7vfxrcurXdPA3USvp5fH1+/dOTFx7YM/28f0T1+6+afvEvmtv3rtz//6J3fV6Cx035o5b0iT7QiVtj/b1suO2VenEwKqcv4eQrR/Dnle7MfvvIWQ3O1DwdwRmjl9n+eYdv9Ic9dv1j7zjnRf/D3PqR43jf8MfXXLtjn3X7ty9c//O8cmdBydao083xOA8vjczSf/P6/tSH3vy3x0PoX6r9q2ZGaX5f39nPDzzzKPlx6wnUmm6RZLc4z+dR5LJY3Wayeq87z/Iyfvb/+3P//jCqV9+MYSx15RfN9+8W0NunvrP75/4/f3Hv79nOv/SnPk3aqZ5FX1fabZ+3J/K5E379r9hx00Hdme/UbI7cT6j1FhfpPmM9Olf7nB+YltO+Xx/f78868bS1PH8xLR3XH/6EgMAWOLi+//xeja+f/jp9AIqlnc+Tq9fOHb7/nHuOH2ss3F69nvJisbp2fpxfzsdp1cXOE7Pbj9/nD6QW7/dOD1v3J0X/w9y6s9X5/2ki9/HiMPPLx8+kNtPrsv2k4G29bLfZ1DUT7L159tPkgX2k+z2i+Zz2tVv10/yjnte/Pfk1M9T1B8qjf6wsN+fye0Pn+rsvPHrmfWi/pCtP9/+UFpgf8huv6g/tKvfrj/kHd+8+Ffn1O9Ua/+Y7hi1fjFx7c037f1wU73F/v6LMPsjGZ3kt2zmsYv7/R/d6rx9F/dzXwvPP4TNtZK8/Bf3c2ULz7+o/efx+18rw6zPleXm/3jOCaTn+S/u97tk5FWf/fjTNV+bngmKPn9WNI+7Nad8vvO4y2bdWJrmNY8L9FQc/8e3e+L4/6502eu3gV7+35Pme8zaxu/R95gVXce86l7Ps2+5ez0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePnrD6G/srZ28/id+05dfe7vfvvPJl746O/9w67bf+0jX/rp6A2//a37Bz//4rHtF+z44e+cdcODH7ry6D1//cjzK7720lOFsYdrPysXp6vVEJJnkhCq3zj5Fx879p1zpsuSEEI5GT4UwupkzSOrk0yEsV+EELbHVCutd371hUt3TC9vv6u/pXxVJkh2v8JQOebTnGcItxTuES9D1bSfHTx18xvCj96x9Y7vrfvK3/UdefrQTJWk2tSfQlh5XfPj+0IIA+n/UH/K1KyND06XW0IIg02Pe3NBXq/vMP+NOevnpctl6XKoIE68f31mvZSpl12P+jLLwYLtLVReHt3WK7I8s549GS1UXp6xfHW6/Hq6vHie8cvxfxJKSag00p9MZvpIaDpuSUhqx7LaWC81jm1I9z+znmTWS5n1cl9mv2rbTTtaOUlay2O9THk8HVfS8guaz9VtvDen/LXpspo+UV+M6yF7o25o1o3GftXEvE7OkUvqPxRX6V6p6RzUrrxx4NODMZSWDSVrZj1mqo1437Gtd28ob/vm8eGcPJL7kzR+0lX8g99dvfyDXz58YG1e/OtKafxSV/F/fNWJZ685/LnP5sb/VIxf7ir+JQ8NPnPVo3euz22fk7F9Kl3FH3/qsU+sO/v6I7n53xvjV7uKv/noif4Vpx56ODf/sdg+A13Ff/Jt7/zJF5944Onc+CHGH+wq/rajez7ZP3Lqotz4D8f2Gequ/zx35IofjIz8bDQv/uMx/oqu4n/h0D1vvW/VXVfmHt8tsX2Gu4r/7gsfvGP5qQfOzzt3Jvf26pUT4NXprPQa6+PperfjzIVqGi/81Wilfs23PP2/opcbypjezspFjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCvTP9122Qfe//b3bK0kISQ5dabaiPeVl23ePNrFdsefeuwT686+/khz2dou4gAAAADF4ji81CiphrXh5mQgnNe2fpwjOC+uJa3l2WWMk50j6DROyMQptYlT6iJOuUf5VHoUp69HcZb1KE5/j+JUC+JUQ2dxBuaIU5nuAR3mMzhnPp3HGepRnOU9irOiR3FW9ijOqh7FGZ4zTuf9cHWP4qzpUZyzehTn7B7FeU2P4vxKj+Kc06M42Tnl+fbDFWnNc/Pi1G6UC+NUknLjjnbz6eek2zl/gdsZmnM71akVRa/HHW5noGB/4nZen3lcqXg7h5rrVzvczq/Ofzut+9/hdn59gdspFWwn9ttbsvnF7cS1Dvv/rT2Kc7BHcT7Sozi39SjOn8wnTpv3yGKcP+1RPh9dYByATsXx/8x4bzj0V34zDKZnnOwsQBzvrqv9nP16l3dCivFelylfVhQvO1DPxFs33/yyEwiZeOsz0fpa4lUa45E54lWb423I3DnX/r5tc/vcmuNdnCnvnyNeTXZiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW0T/ddtkH3v/292wNSZj+19ZUG/G+8rLNm0e72O6xrXdvKG/75vHmsv5KF4EAAACAQnEc3tcoqYb+yqbQnyxrqVdN5wGq6Xp5uL4cWRm2TC+T0VJtfTBZPefjKunjNu7ftWfjvlsPvnHnrvEbJ26c2P2WTZdtumLs8isu37hj5+TEWP1nCP0F8UIItemHfbce/PD45OTE3n31wmz+a9PHra0lW/tXe9zIm8LY9PL2NP81Bdsrzdre4t3o6AACAAAAAAAAAADAv7Brt6GSluUDwK9nZs7MeHT/zh/fxsU9DusqVlZqx9ASzwNBgi+LByHmWCdZciXp6C66K2aTLqSmFIGysGz4oQ2TNOmLLymRLywYZgmdTUKl/FAfCi1DxQ+hTJwz88yZmTPjnAZx1+33+/C8XPd139dzPx8OXM8ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAP0WJjer4+Mzs3mUQkQ3KaA2Rj+WKa1sao+5Untv+gNPXO6d2xUmGMhQAAAICRsj58ohMpR6mQj3ycuHy3MboGYqXvBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/vcsNqbn6zOzc0cmEcmQnOYA2Vi+mKa1Meq++tZDn31paupv3bHqGOsAAAAAo2V9eK4TKUc1TomJ5MSlzr8Tzb4NrO+b38pbka2zYY15/d8OhuWdssa809aY97EReZvb55sCAAAAPvqy/r/QiVSiVFi3qh/O+v9RfX2Wd3JfXr59XvtvBYprzgQAAADeX9b/lzqRapQK1U6/vtZ+f2NfXjZ/1P/ts/mnDpk/6v/5l7bP/k8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8di43p+frM7Fw+iUiG5DQHyMbyxTStjVH37Ccn/3Hx/ts3dsdKhTEWAgAAAEbK+vCV1rscpcJkTMSRy33/1IX3PvKlRx6bjohWm18sxk1bduy4/uzWMcs76/n9E99/9vVvr8o7q3U8aBsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+MIuN6fn6zOzcEUlEMiSnOUA2li+maW2Muq98/ot/eeDFx1/rjlXHWAcAAAAYLevDV3r/clSjGMU4fvmuu9dfkuubP+ybAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD4uOGbN39jy8LC1utdHJyLZj7iEHgMFy56Lw72XyYAAOCDdnIk0fwvnXDZwX5qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgULDYmJ6vz8zOlZOIZEhOs9nctXTolo3li2laG6Nu+sQLpXXvPPl0d6w6xjoAAADAaFkfvtL7l6MaEzERxy3fDfomsNz/Vz7EhwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKYuN6fn6zOzcuiQiGZLTHCAbyxfTtDZG3ft37f3cfUd/76LuWKkwxkIAAADASFkfXuxEylEqfDxKcVL7fqF3QpJvnwd/F1iZt71n2uSa5zW6ZhUjv+Z5d/btrNDeTWteuR3NV1rnzrzayrxce16ta141OuVrnXnLL2t3T7V1I55z0LsHAACAD0vW/5c6kUqUCqWu/v+nPfkVfS4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMMRiY3q+PjM7lyQRyZCc5gDZWL6YprUx6t782/8/6qs/u2tnd6w6xjoAAADAaFkfvtL7l6MaG+L/YsNy3x+V3vws75/1d++7519/PT3izOMPTBX6l/1RdvHrVy54qv8QkevNzkUc3a6XDKn3m9/fc+Om5rsPRJx5XP6kVfXi/ev1Lpk2H61vvXTHswe2j3g5AAAAcJjI+v+JTqQSpcJ1Q/v/rPMe0f93LDfgR9+46xfHto/tjrxvRq7SrpcbUu8Lmx7686nn/v31pf5/db1Pdq4+vffa+47tKdiK9EnS5sy1OzcfOGdfLtt1q36+r372Xr78rdf+ffVNd7/bql+Ocju+vu9RWtVWH/vKR9pcyO2Zu+S9PY3e+oUh+7/9d0+/+Kv1d729VP+tkyc79U+LQfVbOy8MrR9HpM3Jy+/Yfd7e/Zt760dELfKr67/x9kVxwh+vua1//5N9C3e/+e5j/wtIm89vfHPfufdWz++tnyzV75K9/5+/eP/un9z93cey+tlvRU4/Za31c331n7vzmF3P3HrZ+t76ub762f6fuuKlqW217/yhf/9X9axaGPoUq/f/4BkPX/nylvSW/iEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDDy2Jjer4+MzuXSyKSITnNAbKxfDFNa2PUffXiF9644q4f/7A7Vh1jHQAAAGC0rA9f6f3LUY1iFGNyue9/tL710h3PHtgeldZo0j4XFrbdsOMTV2/bed1VB+nJAQAAgLV69eJkuf8vdCKVKBU2xUS7/5+5dufmA+fsy2X9f27pnETE1dcsbD0zOnnP3XnMrmduvWx95ztBxPLPAspLeZ9Zybvwghcqb/7p66cOzDt7Je/5jW/uO/fe6vlZXnTnnRWd7xMPnvHwlS9vSW/pPF933qe+tm2h/XkiW3fy8jt2n7d3/+Zc9h2jfZ5sr5vlLeT2zF3y3p5GrhKlpfF8O6/c3jcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNpiY3q+PjM7F/mIZEhOs1s7kI3li2laG6PuJZt+edtR7zy+oTtWKoyxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAfduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBffyFSlX0cwJ9nZvbd2Z1d3dUX2orW1YrCLpSCiLqpqAiNELoyJCzNiygIIgq7aA2NxIpugqwbiQqqLQSD3CTRYo3+STddVFBgXQQiLdQu0kXGzjxnnD3OaXS2AunzgeHZ5znnfM/vnOeZM3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LzSWxmpt0d2PDJ750W3fvbU/TNP3v7BQ9uueOKtn8Y23fzp3v7XT05tXr7l21uWbjrwwJrJ3a8c/m3wvT+OdQx+vNGsTN1qCPFEDKH64fSLT099fsHcWAwhlOPQeAjDccnh4ZhLWP17CGFzs875G/fNXLNlrt22q3fe+OJcSP66Qq2c1dMwNL/eVqfyYZx3qmmdbZ197Krw/U3rt3+57N13eiaOj5/eJc7tU07rKYRFG1uP7wkh9KXPnGy1jWQHp3ZdCKG/5bjrOtR16VnWv6qgf3Fq/5faWoecbPuKXL+U2y/fz/Tk2v4O51uoojq63a+TgVw//zBaqGadq9qPD6f2/dSuPMf8cvaJoRRDpVn+g/H0Ggkt8xZDrM9ltdkvZXNbCen6e1qOiyHEXL+U65d7ctdVP29aaOUY549n++XGs8dxJY0vb31Wt3FXwfiFqa2mL+rJrB/yfzTUzvijeV11WV3Tf1HLv6HU8gxqN96c+DQZtTRWi0vOOOZUG9m2qfXPXl7e8NGRoYI64t6Y8mNX+Vu/GB645+2dj44U5W8spfxSV/k/rD36y907X325MP+FLL/cVf7VB/tPrP14x4rC+zOd3Z/KWeXH1M+23Xvsk+eW/f++iXZzXc/fk+VXu6r/xsmjvYOzBw8V1r86uz99XeV/d8NtP7759f7jhfkhy+/vKn/D5MPP947OXlmYf6jxVajVV2gX6+fXiWu/GR39eawo/6vs/g+2yY8d898Y3339a4t3rSlcn+uy+zOU8vvOqf47LjuwfWB2/yVFz8645+/65QT4b1qa/sd6JvU7vWfumym1fc9cqJb3hZfGKo1foIH06fRuuBBz51n0D+YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJztwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVAAAAP//y70YrQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r1, &(0x7f0000008b80)={0x2020}, 0x2020) 2.730665592s ago: executing program 7 (id=735): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.265202174s ago: executing program 0 (id=736): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f0000000200)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 1.147652677s ago: executing program 5 (id=737): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 257.364945ms ago: executing program 1 (id=738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, &(0x7f00000009c0)="1858b036410f017d0048b8dc4b13b61e0b813a66b820000f00d00f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c0000000066baa00066b8000066ef3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x5b}], 0x1, 0x11, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0xc0085508, &(0x7f0000000040)=0x3) 228.946554ms ago: executing program 7 (id=739): r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r1, 0x2) 0s ago: executing program 6 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1295800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r2) kernel console output (not intermixed with test programs): is is the maximum supported by transport fd [ 375.411428][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 375.418701][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 375.426756][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 375.433495][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 375.489674][ T6808] loop2: detected capacity change from 0 to 32768 [ 375.505123][ T6808] XFS: ikeep mount option is deprecated. [ 375.539760][ T6808] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 375.774903][ T6808] XFS (loop2): Ending clean mount [ 375.809192][ T6808] XFS (loop2): Quotacheck needed: Please wait. [ 375.891772][ T6808] XFS (loop2): Quotacheck: Done. [ 376.210969][ T5807] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 378.715805][ T6839] loop4: detected capacity change from 0 to 32768 [ 378.789165][ T6839] [ 378.789165][ T6839] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.789165][ T6839] [ 378.824711][ T6839] ERROR: (device loop4): diWrite: ixpxd invalid [ 378.824711][ T6839] [ 378.844691][ T6839] ERROR: (device loop4): txAbort: [ 378.844691][ T6839] [ 378.949194][ T5801] [ 378.949194][ T5801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 378.949194][ T5801] [ 379.042838][ T5801] [ 379.042838][ T5801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 379.042838][ T5801] [ 380.403195][ T6855] loop4: detected capacity change from 0 to 32768 [ 380.561098][ T6855] JBD2: Ignoring recovery information on journal [ 380.715687][ T6855] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 381.000974][ T5801] ocfs2: Unmounting device (7,4) on (node local) [ 381.201838][ T6866] loop2: detected capacity change from 0 to 64 [ 383.412919][ T6883] loop1: detected capacity change from 0 to 512 [ 383.496369][ T6883] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 383.569724][ T6883] EXT4-fs (loop1): 1 truncate cleaned up [ 383.579250][ T6883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.815947][ T6883] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.265: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 383.962988][ T6883] EXT4-fs (loop1): Remounting filesystem read-only [ 383.969820][ T6883] EXT4-fs warning (device loop1): ext4_rename_delete:3726: inode #2: comm syz.1.265: Deleting old file: nlink 5, error=-117 [ 384.449602][ T6897] loop2: detected capacity change from 0 to 64 [ 384.515166][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.146520][ T5807] hfs: node 4:3 still has 2 user(s)! [ 385.452432][ T6900] loop4: detected capacity change from 0 to 32768 [ 386.779591][ T6915] loop2: detected capacity change from 0 to 16 [ 386.859827][ T6915] erofs (device loop2): mounted with root inode @ nid 36. [ 387.877321][ T5889] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 388.349914][ T6927] loop1: detected capacity change from 0 to 64 [ 388.401381][ T5889] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 388.410856][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.513718][ T5889] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 388.523712][ T5889] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 388.532558][ T5889] usb 1-1: Manufacturer: syz [ 388.615899][ T5889] usb 1-1: config 0 descriptor?? [ 388.748262][ T6929] loop3: detected capacity change from 0 to 1024 [ 389.386953][ T5889] rc_core: IR keymap rc-hauppauge not found [ 389.393610][ T5889] Registered IR keymap rc-empty [ 389.401858][ T5889] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 389.417566][ T5889] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 389.475751][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.510792][ T6936] loop4: detected capacity change from 0 to 256 [ 389.611047][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 389.986103][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.468099][ T5857] usb 1-1: USB disconnect, device number 4 [ 393.130060][ T6965] loop3: detected capacity change from 0 to 32768 [ 393.143156][ T6965] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.294 (6965) [ 393.190955][ T6965] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 393.201684][ T6965] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 393.213345][ T6965] BTRFS info (device loop3): using free-space-tree [ 393.418941][ T6974] loop1: detected capacity change from 0 to 256 [ 393.799907][ T5799] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 394.509838][ C0] Unknown status report in ack skb [ 395.108044][ T7000] loop2: detected capacity change from 0 to 8 [ 395.437632][ T6997] loop1: detected capacity change from 0 to 32768 [ 395.554682][ T6997] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc [ 395.554829][ T6997] allowing incompatible features above 0.0: (unknown version) [ 395.554925][ T6997] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 395.596486][ T6997] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 395.606400][ T6997] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=usage in superblock: invalid journal entry usage: bad size, fixing [ 395.622425][ T6997] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 395.631659][ T6997] bcachefs (loop1): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 395.631659][ T6997] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive [ 395.631659][ T6997] running recovery passes: check_extents_to_backpointers,check_inodes [ 395.665865][ T6997] bcachefs (loop1): dropping and reconstructing all alloc info [ 395.791026][ T6997] bcachefs (loop1): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 395.854098][ T6997] bcachefs (loop1): btree node read error at btree xattrs level 0/0 [ 395.854207][ T6997] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 395.854315][ T6997] loop1 node offset 0/16: got wrong btree node: got [ 395.854395][ T6997] btree=xattrs level=0 seq ded0abe32 1 [ 395.856617][ T6997] min: POS_MIN [ 395.856682][ T6997] max: SPOS_MAX [ 395.856748][ T6997] flagging btree xattrs lost data [ 395.856823][ T6997] ret btree_node_read_validate_error [ 395.912974][ T6997] bcachefs (loop1): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 396.027661][ T6997] bcachefs (loop1): check_topology... [ 396.028688][ T6997] bcachefs (loop1): btree root dirents unreadable, must recover from scan [ 396.044421][ T6997] bcachefs (loop1): no nodes found for btree dirents, continuing [ 396.053343][ T6997] bcachefs (loop1): btree root xattrs unreadable, must recover from scan [ 396.064134][ T6997] bcachefs (loop1): no nodes found for btree xattrs, continuing [ 396.078472][ T6997] done [ 396.081496][ T6997] bcachefs (loop1): accounting_read... done [ 396.091241][ T6997] bcachefs (loop1): alloc_read... done [ 396.099741][ T6997] bcachefs (loop1): snapshots_read... done [ 396.108918][ T6997] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 396.124253][ T6997] bcachefs (loop1): done starting filesystem [ 396.178182][ T7009] loop4: detected capacity change from 0 to 1024 [ 396.283824][ T5803] bcachefs (loop1): shutting down [ 396.333232][ T7009] hfsplus: Unknown parameter '01777777777777777777777ÿÿÿÿ' [ 396.500306][ T5803] bcachefs (loop1): shutdown complete [ 396.733707][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 396.769216][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 397.001283][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 397.054948][ T5889] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 397.064878][ T5889] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 397.077701][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 397.088840][ T5889] usb 5-1: config 1 has no interface number 0 [ 397.095634][ T5889] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.107008][ T5889] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 397.120482][ T5889] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 397.130095][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.539055][ T5889] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 397.729833][ T5889] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 397.770364][ T7019] netlink: 44 bytes leftover after parsing attributes in process `syz.2.310'. [ 397.816177][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 398.271013][ T5889] usb 5-1: USB disconnect, device number 4 [ 398.312463][ T5889] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 398.725538][ T7027] loop2: detected capacity change from 0 to 64 [ 398.786935][ T5857] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 398.794891][ T5857] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 398.802830][ T5857] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 398.810828][ T5857] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 398.818767][ T5857] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 398.826579][ T5857] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 399.137946][ T5857] hid-generic FFFC:0003:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 400.063391][ T7030] fido_id[7030]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 402.187585][ T7054] loop1: detected capacity change from 0 to 1024 [ 402.240516][ T7054] /dev/loop1: Can't open blockdev [ 404.217018][ T30] audit: type=1326 audit(2000000037.474:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.3.330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d9f78e929 code=0x0 [ 404.759878][ T7071] loop4: detected capacity change from 0 to 40427 [ 404.831393][ T7071] F2FS-fs (loop4): build fault injection rate: 690 [ 404.866748][ T7071] F2FS-fs (loop4): invalid crc value [ 405.212638][ T7071] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 405.399163][ T5801] syz-executor: attempt to access beyond end of device [ 405.399163][ T5801] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 405.414068][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 405.414229][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.414320][ T5801] Call Trace: [ 405.414377][ T5801] [ 405.414432][ T5801] __dump_stack+0x26/0x30 [ 405.414635][ T5801] dump_stack_lvl+0x1df/0x270 [ 405.414859][ T5801] dump_stack+0x1e/0x25 [ 405.415026][ T5801] f2fs_handle_critical_error+0xa6f/0xc20 [ 405.415285][ T5801] f2fs_stop_checkpoint+0x65/0x80 [ 405.415503][ T5801] f2fs_write_end_io+0xb4b/0x1920 [ 405.415669][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.415911][ T5801] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 405.416061][ T5801] bio_endio+0xe24/0xf80 [ 405.416263][ T5801] submit_bio_noacct+0x214/0x2710 [ 405.416520][ T5801] submit_bio+0x5a9/0x5d0 [ 405.416728][ T5801] f2fs_submit_write_bio+0x92/0x250 [ 405.416932][ T5801] __submit_merged_bio+0x16f/0x6a0 [ 405.417119][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.417335][ T5801] __submit_merged_write_cond+0x458/0x9a0 [ 405.417558][ T5801] f2fs_write_data_pages+0x4bb2/0x5480 [ 405.417930][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 405.418138][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 405.418342][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.418560][ T5801] ? __pfx_folios_put_refs+0x1/0x10 [ 405.418711][ T5801] ? filter_irq_stacks+0x49/0x190 [ 405.418872][ T5801] ? stack_depot_save_flags+0x35/0x7b0 [ 405.419061][ T5801] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 405.419260][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 405.419463][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.419672][ T5801] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 405.419897][ T5801] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 405.420112][ T5801] do_writepages+0x3f2/0x860 [ 405.420288][ T5801] ? _raw_spin_unlock+0x30/0x50 [ 405.420473][ T5801] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 405.420660][ T5801] filemap_fdatawrite+0x207/0x260 [ 405.420967][ T5801] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 405.421168][ T5801] f2fs_write_checkpoint+0xfe2/0x2b00 [ 405.421490][ T5801] kill_f2fs_super+0x2ff/0x970 [ 405.421678][ T5801] ? __pfx_kill_f2fs_super+0x10/0x10 [ 405.421852][ T5801] deactivate_locked_super+0xcb/0x3c0 [ 405.422054][ T5801] deactivate_super+0x12f/0x140 [ 405.422241][ T5801] cleanup_mnt+0x6fb/0x780 [ 405.422391][ T5801] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 405.422599][ T5801] ? __pfx___cleanup_mnt+0x10/0x10 [ 405.422766][ T5801] __cleanup_mnt+0x22/0x30 [ 405.422916][ T5801] task_work_run+0x209/0x2b0 [ 405.423103][ T5801] exit_to_user_mode_loop+0x2a6/0x330 [ 405.423297][ T5801] do_syscall_64+0x1e3/0x210 [ 405.423454][ T5801] ? irqentry_exit+0x16/0x60 [ 405.423588][ T5801] ? clear_bhb_loop+0x40/0x90 [ 405.423756][ T5801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.423923][ T5801] RIP: 0033:0x7f5f30b8fc57 [ 405.424035][ T5801] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 405.424159][ T5801] RSP: 002b:00007ffdfa927448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 405.424298][ T5801] RAX: 0000000000000000 RBX: 00007f5f30c10925 RCX: 00007f5f30b8fc57 [ 405.424396][ T5801] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfa927500 [ 405.424487][ T5801] RBP: 00007ffdfa927500 R08: 0000000000000000 R09: 0000000000000000 [ 405.424578][ T5801] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdfa928590 [ 405.424675][ T5801] R13: 00007f5f30c10925 R14: 0000000000064a19 R15: 00007ffdfa9285d0 [ 405.424818][ T5801] [ 405.785169][ T5801] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 405.811280][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 405.811440][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.811524][ T5801] Call Trace: [ 405.811576][ T5801] [ 405.811630][ T5801] __dump_stack+0x26/0x30 [ 405.811822][ T5801] dump_stack_lvl+0x1df/0x270 [ 405.812008][ T5801] dump_stack+0x1e/0x25 [ 405.812168][ T5801] f2fs_handle_critical_error+0xa6f/0xc20 [ 405.812440][ T5801] f2fs_stop_checkpoint+0x65/0x80 [ 405.812633][ T5801] f2fs_write_end_io+0xb4b/0x1920 [ 405.812833][ T5801] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 405.812982][ T5801] bio_endio+0xe24/0xf80 [ 405.813184][ T5801] submit_bio_noacct+0x214/0x2710 [ 405.813430][ T5801] submit_bio+0x5a9/0x5d0 [ 405.813632][ T5801] f2fs_submit_write_bio+0x92/0x250 [ 405.813847][ T5801] __submit_merged_bio+0x16f/0x6a0 [ 405.814050][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.814274][ T5801] __submit_merged_write_cond+0x458/0x9a0 [ 405.814503][ T5801] f2fs_write_data_pages+0x4bb2/0x5480 [ 405.814884][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 405.815090][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 405.815290][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.815509][ T5801] ? __pfx_folios_put_refs+0x1/0x10 [ 405.815665][ T5801] ? filter_irq_stacks+0x49/0x190 [ 405.815831][ T5801] ? stack_depot_save_flags+0x35/0x7b0 [ 405.816028][ T5801] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 405.816228][ T5801] ? kmsan_get_metadata+0xfb/0x160 [ 405.816431][ T5801] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 405.816641][ T5801] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 405.816865][ T5801] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 405.817090][ T5801] do_writepages+0x3f2/0x860 [ 405.817276][ T5801] ? _raw_spin_unlock+0x30/0x50 [ 405.817459][ T5801] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 405.817647][ T5801] filemap_fdatawrite+0x207/0x260 [ 405.817935][ T5801] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 405.818129][ T5801] f2fs_write_checkpoint+0xfe2/0x2b00 [ 405.818453][ T5801] kill_f2fs_super+0x2ff/0x970 [ 405.818651][ T5801] ? __pfx_kill_f2fs_super+0x10/0x10 [ 405.818841][ T5801] deactivate_locked_super+0xcb/0x3c0 [ 405.819038][ T5801] deactivate_super+0x12f/0x140 [ 405.819221][ T5801] cleanup_mnt+0x6fb/0x780 [ 405.819373][ T5801] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 405.819586][ T5801] ? __pfx___cleanup_mnt+0x10/0x10 [ 405.819755][ T5801] __cleanup_mnt+0x22/0x30 [ 405.819908][ T5801] task_work_run+0x209/0x2b0 [ 405.820106][ T5801] exit_to_user_mode_loop+0x2a6/0x330 [ 405.820294][ T5801] do_syscall_64+0x1e3/0x210 [ 405.820446][ T5801] ? irqentry_exit+0x16/0x60 [ 405.820577][ T5801] ? clear_bhb_loop+0x40/0x90 [ 405.820741][ T5801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.820894][ T5801] RIP: 0033:0x7f5f30b8fc57 [ 405.820997][ T5801] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 405.821114][ T5801] RSP: 002b:00007ffdfa927448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 405.821233][ T5801] RAX: 0000000000000000 RBX: 00007f5f30c10925 RCX: 00007f5f30b8fc57 [ 405.821323][ T5801] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfa927500 [ 405.821406][ T5801] RBP: 00007ffdfa927500 R08: 0000000000000000 R09: 0000000000000000 [ 405.821483][ T5801] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdfa928590 [ 405.821573][ T5801] R13: 00007f5f30c10925 R14: 0000000000064a19 R15: 00007ffdfa9285d0 [ 405.821700][ T5801] [ 406.185084][ T5801] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 406.955980][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.962721][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 407.698007][ T7100] loop3: detected capacity change from 0 to 128 [ 407.720131][ T7093] loop1: detected capacity change from 0 to 1024 [ 407.819871][ T7093] EXT4-fs: Ignoring removed orlov option [ 407.826285][ T7093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 407.916025][ T30] audit: type=1800 audit(2000000041.551:159): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.340" name="file0" dev="loop3" ino=1048613 res=0 errno=0 [ 408.093479][ T7093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.531058][ T7100] syz.3.340: attempt to access beyond end of device [ 408.531058][ T7100] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 408.723135][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.039528][ T6154] kworker/u8:33: attempt to access beyond end of device [ 409.039528][ T6154] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 410.865608][ T7125] loop4: detected capacity change from 0 to 512 [ 410.961268][ T7125] EXT4-fs (loop4): Test dummy encryption mode enabled [ 410.968987][ T7125] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 410.971797][ T7123] loop1: detected capacity change from 0 to 2048 [ 411.119137][ T7127] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.151476][ T7125] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.346: bad orphan inode 131083 [ 411.216912][ T7125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.225145][ T7123] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 411.327162][ T7123] Remounting filesystem read-only [ 411.627257][ T7125] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 412.194946][ T7130] loop3: detected capacity change from 0 to 32768 [ 412.361058][ T7130] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 412.361215][ T7130] allowing incompatible features above 0.0: (unknown version) [ 412.361306][ T7130] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 412.407150][ T7130] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 412.415657][ T7130] bcachefs (loop3): initializing new filesystem [ 412.441214][ T7130] bcachefs (loop3): going read-write [ 412.596294][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.748962][ T7130] bcachefs (loop3): marking superblocks [ 412.806109][ T7130] bcachefs (loop3): initializing freespace [ 412.840147][ T7130] bcachefs (loop3): done initializing freespace [ 412.862031][ T7130] bcachefs (loop3): reading snapshots table [ 412.868585][ T7130] bcachefs (loop3): reading snapshots done [ 413.181394][ T7130] bcachefs (loop3): done starting filesystem [ 413.695115][ T7144] loop1: detected capacity change from 0 to 32768 [ 413.795350][ T7144] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 413.795515][ T7144] allowing incompatible features above 0.0: (unknown version) [ 413.795845][ T7144] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 413.843788][ T7144] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 413.852417][ T7144] bcachefs (loop1): initializing new filesystem [ 413.880815][ T7144] bcachefs (loop1): going read-write [ 414.044167][ T7144] bcachefs (loop1): marking superblocks [ 414.105051][ T7144] bcachefs (loop1): initializing freespace [ 414.121810][ T5799] bcachefs (loop3): shutting down [ 414.127253][ T5799] bcachefs (loop3): going read-only [ 414.133183][ T5799] bcachefs (loop3): finished waiting for writes to stop [ 414.137001][ T7144] bcachefs (loop1): done initializing freespace [ 414.165410][ T7144] bcachefs (loop1): reading snapshots table [ 414.171936][ T7144] bcachefs (loop1): reading snapshots done [ 414.287032][ T5799] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 414.353903][ T7144] bcachefs (loop1): done starting filesystem [ 414.566014][ T5799] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 414.638169][ T5799] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 414.691655][ T5799] bcachefs (loop3): marking filesystem clean [ 414.809386][ T5803] bcachefs (loop1): shutting down [ 414.814931][ T5803] bcachefs (loop1): going read-only [ 414.823624][ T5803] bcachefs (loop1): finished waiting for writes to stop [ 415.069117][ T5799] bcachefs (loop3): shutdown complete [ 415.815465][ T7160] loop2: detected capacity change from 0 to 32768 [ 415.863149][ T5803] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 416.049590][ T5803] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 416.169724][ T5803] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 416.207129][ T5803] bcachefs (loop1): marking filesystem clean [ 416.377496][ T5803] bcachefs (loop1): shutdown complete [ 417.859515][ T30] audit: type=1326 audit(2000000052.227:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7171 comm="syz.4.357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f30b8e929 code=0x0 [ 421.652801][ T5857] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 421.756037][ T5889] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 421.891278][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 421.933164][ T5857] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 421.942073][ T5857] usb 2-1: config 179 has no interface number 0 [ 421.948757][ T5857] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 421.952336][ T5889] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 421.960177][ T5857] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 421.960348][ T5857] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 421.960512][ T5857] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 421.960733][ T5857] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 421.960880][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.970187][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.266539][ T5889] usb 4-1: config 0 descriptor?? [ 422.288204][ T5889] cp210x 4-1:0.0: cp210x converter detected [ 422.381498][ T7187] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 422.855764][ T5889] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 423.013840][ T5857] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 423.043383][ T5889] usb 4-1: cp210x converter now attached to ttyUSB0 [ 423.187565][ T5889] usb 4-1: USB disconnect, device number 3 [ 423.290509][ T24] usb 2-1: USB disconnect, device number 3 [ 423.290594][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 423.355825][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 423.380931][ T24] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 423.457984][ T5889] cp210x 4-1:0.0: device disconnected [ 424.483150][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 425.364178][ T7212] lo: entered promiscuous mode [ 425.366295][ C0] hrtimer: interrupt took 358434 ns [ 425.381447][ T7212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.453615][ T7233] loop4: detected capacity change from 0 to 32768 [ 427.746940][ T7233] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 427.803531][ T30] audit: type=1800 audit(2000000062.870:161): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.379" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 427.923510][ T7233] (syz.4.379,7233,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 428.061424][ T5801] (syz-executor,5801,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 428.192628][ T5801] ocfs2: Unmounting device (7,4) on (node local) [ 428.947083][ T5861] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 429.076839][ T7246] loop2: detected capacity change from 0 to 32768 [ 429.123198][ T7246] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.381 (7246) [ 429.149808][ T7246] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 429.160597][ T7246] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 429.172118][ T7246] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 429.236863][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 429.272154][ T7246] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 429.320903][ T7246] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 429.321093][ T5861] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 429.345761][ T5861] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.345923][ T7246] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 429.356385][ T5861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.424113][ T7246] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 429.467889][ T7246] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 429.481695][ T7262] loop1: detected capacity change from 0 to 16 [ 429.547867][ T7246] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 429.642591][ T7262] erofs (device loop1): too large lz4 pclusterblks 16832 [ 429.678824][ T5861] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.689629][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.698419][ T5861] usb 4-1: Product: syz [ 429.702870][ T5861] usb 4-1: Manufacturer: syz [ 429.710815][ T5861] usb 4-1: SerialNumber: syz [ 429.882046][ T7246] BTRFS info (device loop2): rebuilding free space tree [ 429.987239][ T7246] BTRFS info (device loop2): disabling free space tree [ 429.998813][ T7246] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 430.009427][ T7246] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 430.393121][ T5861] usb 4-1: 0:2 : does not exist [ 430.881183][ T5807] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 431.002063][ T5857] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 431.256572][ T5861] usb 4-1: USB disconnect, device number 4 [ 431.471213][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.965739][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 432.399561][ T5857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 432.474910][ T5857] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 432.484212][ T5857] usb 5-1: can't read configurations, error -71 [ 433.590189][ T7305] loop4: detected capacity change from 0 to 512 [ 433.671146][ T7305] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.047060][ T7305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.061015][ T7305] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 434.399765][ T7317] EXT4-fs (loop4): shut down requested (1) [ 434.436863][ T30] audit: type=1800 audit(2000000069.973:162): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.393" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 434.514328][ T30] audit: type=1800 audit(2000000070.091:163): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.393" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 434.957186][ T7321] loop2: detected capacity change from 0 to 128 [ 434.969531][ T7319] syzkaller1: entered promiscuous mode [ 434.975572][ T7319] syzkaller1: entered allmulticast mode [ 434.995218][ T7321] EXT4-fs (loop2): Test dummy encryption mode enabled [ 435.038233][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.115137][ T7321] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.152221][ T7321] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 435.174711][ T7321] EXT4-fs warning (device loop2): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 435.374610][ T5807] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.399522][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.400'. [ 437.020605][ T7345] loop4: detected capacity change from 0 to 47 [ 438.490131][ T7351] loop2: detected capacity change from 0 to 2048 [ 438.594139][ T7357] loop4: detected capacity change from 0 to 128 [ 439.161006][ T6042] udevd[6042]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 439.216594][ T7357] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 439.288342][ T7357] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 439.318283][ T7351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.654517][ T5801] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 442.289761][ T7375] loop3: detected capacity change from 0 to 1024 [ 442.309281][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.404022][ T7375] EXT4-fs: Ignoring removed nobh option [ 442.410207][ T7375] EXT4-fs: Ignoring removed bh option [ 442.788728][ T7375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.975994][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.410'. [ 442.985517][ T7380] netlink: 'syz.4.410': attribute type 7 has an invalid length. [ 442.993525][ T7380] netlink: 'syz.4.410': attribute type 8 has an invalid length. [ 443.001718][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 443.029150][ T7380] erspan0: entered promiscuous mode [ 443.193801][ T7375] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.412: Allocating blocks 481-513 which overlap fs metadata [ 443.224187][ T7380] gretap0: entered promiscuous mode [ 443.236514][ T7380] erspan0: left promiscuous mode [ 443.244951][ T7384] EXT4-fs (loop3): shut down requested (1) [ 443.289931][ T7380] gretap0: left promiscuous mode [ 443.466228][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 443.496483][ T7331] Set syz1 is full, maxelem 65536 reached [ 443.604128][ T7385] ip6gre1: entered allmulticast mode [ 444.000131][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.546160][ T7406] loop4: detected capacity change from 0 to 1024 [ 445.622390][ T7406] EXT4-fs: Ignoring removed orlov option [ 445.629097][ T7406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 445.686230][ T7405] loop3: detected capacity change from 0 to 2048 [ 445.802057][ T7406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.907103][ T7405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.103139][ T7405] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 446.608784][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.027559][ T7425] loop4: detected capacity change from 0 to 32768 [ 448.041821][ T7425] BTRFS warning: excessive commit interval 2147483647, use with care [ 448.094586][ T7425] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.424 (7425) [ 448.433306][ T7425] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 448.444297][ T7425] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 448.453731][ T7425] BTRFS info (device loop4): disk space caching is enabled [ 448.461318][ T7425] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 448.546170][ T7426] loop2: detected capacity change from 0 to 40427 [ 448.570543][ T7426] F2FS-fs (loop2): Invalid segment/section count (24 != 1 * 1) [ 448.578738][ T7426] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 448.681607][ T7426] F2FS-fs (loop2): invalid crc value [ 448.881788][ T7425] BTRFS info (device loop4): rebuilding free space tree [ 448.955395][ T7425] BTRFS info (device loop4): disabling free space tree [ 448.963575][ T7425] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 448.973745][ T7425] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 449.099328][ T7426] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 449.107015][ T7426] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 449.289608][ T5807] syz-executor: attempt to access beyond end of device [ 449.289608][ T5807] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 449.305724][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 449.305882][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.305968][ T5807] Call Trace: [ 449.306021][ T5807] [ 449.306081][ T5807] __dump_stack+0x26/0x30 [ 449.306264][ T5807] dump_stack_lvl+0x1df/0x270 [ 449.306454][ T5807] dump_stack+0x1e/0x25 [ 449.306623][ T5807] f2fs_handle_critical_error+0xa6f/0xc20 [ 449.306852][ T5807] f2fs_stop_checkpoint+0x65/0x80 [ 449.307051][ T5807] f2fs_write_end_io+0xb4b/0x1920 [ 449.307199][ T5807] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 449.307408][ T5807] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 449.307541][ T5807] bio_endio+0xe24/0xf80 [ 449.307721][ T5807] submit_bio_noacct+0x214/0x2710 [ 449.307940][ T5807] submit_bio+0x5a9/0x5d0 [ 449.308129][ T5807] f2fs_submit_write_bio+0x92/0x250 [ 449.308315][ T5807] __submit_merged_bio+0x16f/0x6a0 [ 449.308493][ T5807] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 449.308690][ T5807] __submit_merged_write_cond+0x458/0x9a0 [ 449.308897][ T5807] f2fs_write_data_pages+0x4bb2/0x5480 [ 449.309226][ T5807] ? kmsan_get_metadata+0xfb/0x160 [ 449.309411][ T5807] ? kmsan_get_metadata+0xfb/0x160 [ 449.309594][ T5807] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 449.309788][ T5807] ? __pfx_folios_put_refs+0x1/0x10 [ 449.309921][ T5807] ? filter_irq_stacks+0x49/0x190 [ 449.310072][ T5807] ? stack_depot_save_flags+0x35/0x7b0 [ 449.310244][ T5807] ? kmsan_get_metadata+0xfb/0x160 [ 449.310428][ T5807] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 449.310610][ T5807] ? kmsan_get_metadata+0xfb/0x160 [ 449.310796][ T5807] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 449.311027][ T5807] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 449.311253][ T5807] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 449.311464][ T5807] do_writepages+0x3f2/0x860 [ 449.311656][ T5807] ? _raw_spin_unlock+0x30/0x50 [ 449.311849][ T5807] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 449.312047][ T5807] filemap_fdatawrite+0x207/0x260 [ 449.312353][ T5807] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 449.312556][ T5807] f2fs_write_checkpoint+0xfe2/0x2b00 [ 449.312887][ T5807] kill_f2fs_super+0x2ff/0x970 [ 449.313183][ T5807] ? __pfx_kill_f2fs_super+0x10/0x10 [ 449.313364][ T5807] deactivate_locked_super+0xcb/0x3c0 [ 449.313562][ T5807] deactivate_super+0x12f/0x140 [ 449.313736][ T5807] cleanup_mnt+0x6fb/0x780 [ 449.313888][ T5807] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 449.314093][ T5807] ? __pfx___cleanup_mnt+0x10/0x10 [ 449.314241][ T5807] __cleanup_mnt+0x22/0x30 [ 449.314393][ T5807] task_work_run+0x209/0x2b0 [ 449.314568][ T5807] exit_to_user_mode_loop+0x2a6/0x330 [ 449.314750][ T5807] do_syscall_64+0x1e3/0x210 [ 449.314895][ T5807] ? irqentry_exit+0x16/0x60 [ 449.315022][ T5807] ? clear_bhb_loop+0x40/0x90 [ 449.315182][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.315360][ T5807] RIP: 0033:0x7ff602f8fc57 [ 449.315472][ T5807] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 449.315596][ T5807] RSP: 002b:00007ffdc11887e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 449.315734][ T5807] RAX: 0000000000000000 RBX: 00007ff603010925 RCX: 00007ff602f8fc57 [ 449.315831][ T5807] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc11888a0 [ 449.315924][ T5807] RBP: 00007ffdc11888a0 R08: 0000000000000000 R09: 0000000000000000 [ 449.316014][ T5807] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc1189930 [ 449.316110][ T5807] R13: 00007ff603010925 R14: 0000000000070222 R15: 00007ffdc1189970 [ 449.316246][ T5807] [ 449.681192][ T5807] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 449.855622][ T7452] loop1: detected capacity change from 0 to 2048 [ 450.296918][ T5801] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 450.755087][ T7452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.174073][ T7452] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 451.445967][ T7452] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28 [ 451.459161][ T7452] EXT4-fs (loop1): This should not happen!! Data will be lost [ 451.459161][ T7452] [ 451.472287][ T7452] EXT4-fs (loop1): Total free blocks count 0 [ 451.479595][ T7452] EXT4-fs (loop1): Free/Dirty block details [ 451.485896][ T7452] EXT4-fs (loop1): free_blocks=2415919104 [ 451.491902][ T7452] EXT4-fs (loop1): dirty_blocks=16 [ 451.497588][ T7452] EXT4-fs (loop1): Block reservation details [ 451.503829][ T7452] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 452.212298][ T1312] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 454.018844][ T7481] loop1: detected capacity change from 0 to 256 [ 454.274478][ T7481] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 455.303752][ T7490] loop2: detected capacity change from 0 to 4096 [ 456.231538][ T7503] loop3: detected capacity change from 0 to 512 [ 456.339578][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 456.407494][ T7503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 456.546151][ T7503] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.441: Unimplemented hash flags: 0x0001 [ 456.558280][ T7503] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.441: Corrupt directory, running e2fsck is recommended [ 456.651793][ T7503] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.441: path /102/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 457.341821][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.421314][ T1312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.618004][ T7511] loop4: detected capacity change from 0 to 2048 [ 457.698248][ T7511] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 457.732533][ T1312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.903915][ T7511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.993534][ T1312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.267183][ T1312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.103773][ T1312] bridge_slave_1: left allmulticast mode [ 459.110729][ T1312] bridge_slave_1: left promiscuous mode [ 459.117510][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.252958][ T1312] bridge_slave_0: left allmulticast mode [ 459.259027][ T1312] bridge_slave_0: left promiscuous mode [ 459.265778][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.109202][ T1312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.198435][ T1312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.267112][ T1312] bond0 (unregistering): Released all slaves [ 460.937776][ T1312] hsr_slave_0: left promiscuous mode [ 460.955229][ T1312] hsr_slave_1: left promiscuous mode [ 460.963630][ T1312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.971589][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.996333][ T1312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.004914][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.121273][ T1312] veth1_macvtap: left promiscuous mode [ 461.128667][ T1312] veth0_macvtap: left promiscuous mode [ 461.134893][ T1312] veth1_vlan: left promiscuous mode [ 461.140514][ T1312] veth0_vlan: left promiscuous mode [ 461.551891][ T5889] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 461.747622][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 461.764508][ T5889] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.777902][ T5889] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 461.790310][ T5889] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.801574][ T5889] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 461.987010][ T5889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.997618][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.008230][ T5889] usb 4-1: Product: syz [ 462.012678][ T5889] usb 4-1: Manufacturer: syz [ 462.018702][ T5889] usb 4-1: SerialNumber: syz [ 462.264082][ T5889] usb 4-1: bad CDC descriptors [ 462.338204][ T1312] team0 (unregistering): Port device team_slave_1 removed [ 462.390247][ T1312] team0 (unregistering): Port device team_slave_0 removed [ 462.482803][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 462.662465][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 462.682639][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 462.704269][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 462.720995][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 462.841393][ T7537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.449'. [ 462.871452][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz.0.449'. [ 462.883257][ T5889] usb 4-1: USB disconnect, device number 5 [ 463.272877][ T7551] syz_tun: entered allmulticast mode [ 463.459776][ T7548] syz_tun: left allmulticast mode [ 464.153485][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.162524][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.720792][ T5818] Bluetooth: hci2: command tx timeout [ 465.296298][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 466.366749][ T7598] bond0: entered promiscuous mode [ 466.372230][ T7598] bond_slave_0: entered promiscuous mode [ 466.379661][ T7598] bond_slave_1: entered promiscuous mode [ 466.390705][ T7598] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 466.483477][ T7598] bond0: left promiscuous mode [ 466.488579][ T7598] bond_slave_0: left promiscuous mode [ 466.495693][ T7598] bond_slave_1: left promiscuous mode [ 466.661226][ T5818] Bluetooth: hci2: command tx timeout [ 467.277130][ T7609] netlink: 80 bytes leftover after parsing attributes in process `syz.3.469'. [ 467.291756][ T7609] netlink: 80 bytes leftover after parsing attributes in process `syz.3.469'. [ 467.513748][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.521752][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.531347][ T7546] bridge_slave_0: entered allmulticast mode [ 467.541159][ T7546] bridge_slave_0: entered promiscuous mode [ 467.691774][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.699689][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.707809][ T7546] bridge_slave_1: entered allmulticast mode [ 467.717894][ T7546] bridge_slave_1: entered promiscuous mode [ 468.153917][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.270536][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.626219][ T5818] Bluetooth: hci2: command tx timeout [ 468.687656][ T7546] team0: Port device team_slave_0 added [ 468.851019][ T7546] team0: Port device team_slave_1 added [ 469.395299][ T7624] loop2: detected capacity change from 0 to 32768 [ 469.568118][ T7624] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 469.641656][ T30] audit: type=1800 audit(2000000107.763:164): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.474" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 469.663275][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.671701][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.700358][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.728056][ T7624] (syz.2.474,7624,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 470.006577][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.013848][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.040806][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.051152][ T7637] loop3: detected capacity change from 0 to 2048 [ 470.129779][ T5807] (syz-executor,5807,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 470.226982][ T5807] ocfs2: Unmounting device (7,2) on (node local) [ 470.263381][ T7637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.278533][ T7637] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.546050][ T5818] Bluetooth: hci2: command tx timeout [ 470.609454][ T7637] fs-verity: sha512 using implementation "sha512-generic" [ 470.634509][ T30] audit: type=1800 audit(2000000108.825:165): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.477" name="file0" dev="loop3" ino=19 res=0 errno=0 [ 471.107001][ T7546] hsr_slave_0: entered promiscuous mode [ 471.117697][ T7546] hsr_slave_1: entered promiscuous mode [ 471.130869][ T7546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.139027][ T7546] Cannot create hsr debugfs directory [ 471.228415][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.565120][ T7682] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 474.684812][ T7684] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 474.802705][ T7546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 474.890601][ T7546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 474.992234][ T7546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 475.068593][ T7546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 475.143168][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 476.360168][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.525050][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 476.608218][ T7546] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.687176][ T7704] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 476.805626][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.813427][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.821866][ T7709] loop2: detected capacity change from 0 to 512 [ 476.888258][ T7709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.952908][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.960628][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.154020][ T7709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.167574][ T7709] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 477.256980][ T30] audit: type=1800 audit(2000000115.950:166): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.496" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 477.865603][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.229581][ T7723] sd 0:0:1:0: device reset [ 479.516658][ T7744] netlink: 596 bytes leftover after parsing attributes in process `syz.0.502'. [ 479.532638][ T7734] netlink: 'syz.0.502': attribute type 29 has an invalid length. [ 479.595950][ T7737] netlink: 'syz.0.502': attribute type 29 has an invalid length. [ 480.179120][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.942754][ T7546] veth0_vlan: entered promiscuous mode [ 481.087132][ T7546] veth1_vlan: entered promiscuous mode [ 481.468861][ T7546] veth0_macvtap: entered promiscuous mode [ 481.545417][ T7546] veth1_macvtap: entered promiscuous mode [ 481.773958][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.918300][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.313452][ T1317] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.527495][ T1317] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.881168][ T1317] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.957590][ T7768] loop3: detected capacity change from 0 to 32768 [ 483.085511][ T7546] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.095890][ T7546] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.105133][ T7546] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.114501][ T7546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.216962][ T7768] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 483.217131][ T7768] allowing incompatible features above 0.0: (unknown version) [ 483.217215][ T7768] features: [ 483.253610][ T7768] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 483.262920][ T7768] bcachefs (loop3): initializing new filesystem [ 483.282357][ T7768] bcachefs (loop3): going read-write [ 483.441306][ T1317] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.685059][ T7768] bcachefs (loop3): marking superblocks [ 483.753926][ T7768] bcachefs (loop3): initializing freespace [ 483.783294][ T7768] bcachefs (loop3): done initializing freespace [ 483.804830][ T7768] bcachefs (loop3): reading snapshots table [ 483.811366][ T7768] bcachefs (loop3): reading snapshots done [ 483.963498][ T1317] bridge_slave_1: left allmulticast mode [ 483.969712][ T1317] bridge_slave_1: left promiscuous mode [ 483.976847][ T1317] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.997829][ T1317] bridge_slave_0: left allmulticast mode [ 484.011140][ T1317] bridge_slave_0: left promiscuous mode [ 484.018561][ T1317] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.074284][ T7768] bcachefs (loop3): done starting filesystem [ 484.762490][ T5799] bcachefs (loop3): shutting down [ 484.768356][ T5799] bcachefs (loop3): going read-only [ 484.775835][ T5799] bcachefs (loop3): finished waiting for writes to stop [ 484.973735][ T5799] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 484.996179][ T1317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.092911][ T1317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.138295][ T1317] bond0 (unregistering): Released all slaves [ 485.167752][ T1317] bond1 (unregistering): Released all slaves [ 485.330832][ T5799] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 485.387498][ T5799] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 485.432838][ T5799] bcachefs (loop3): marking filesystem clean [ 485.618248][ T5799] bcachefs (loop3): shutdown complete [ 486.219017][ T1317] hsr_slave_0: left promiscuous mode [ 486.248339][ T1317] hsr_slave_1: left promiscuous mode [ 486.257039][ T1317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.265677][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.345496][ T1317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.354815][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.457856][ T1317] veth1_macvtap: left promiscuous mode [ 486.463702][ T1317] veth0_macvtap: left promiscuous mode [ 486.470195][ T1317] veth1_vlan: left promiscuous mode [ 486.475977][ T1317] veth0_vlan: left promiscuous mode [ 487.807910][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.819387][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.829832][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.966117][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.978149][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.150172][ T1317] team0 (unregistering): Port device team_slave_1 removed [ 488.277369][ T1317] team0 (unregistering): Port device team_slave_0 removed [ 489.263623][ T1317] IPVS: stop unused estimator thread 0... [ 489.947294][ T5818] Bluetooth: hci1: command tx timeout [ 490.519091][ T7815] chnl_net:caif_netlink_parms(): no params data found [ 491.869779][ T5818] Bluetooth: hci1: command tx timeout [ 493.254306][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.262195][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.270147][ T7815] bridge_slave_0: entered allmulticast mode [ 493.348348][ T7815] bridge_slave_0: entered promiscuous mode [ 493.486644][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 493.808425][ T5818] Bluetooth: hci1: command tx timeout [ 494.065019][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.073180][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.081180][ T7815] bridge_slave_1: entered allmulticast mode [ 494.091202][ T7815] bridge_slave_1: entered promiscuous mode [ 494.110818][ T7875] bridge_slave_1: left allmulticast mode [ 494.117127][ T7875] bridge_slave_1: left promiscuous mode [ 494.124173][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.182590][ T7875] bridge_slave_0: left allmulticast mode [ 494.188570][ T7875] bridge_slave_0: left promiscuous mode [ 494.195863][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.711101][ T7884] netlink: 'syz.3.531': attribute type 12 has an invalid length. [ 494.986193][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.060860][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.524827][ T7815] team0: Port device team_slave_0 added [ 495.611196][ T7815] team0: Port device team_slave_1 added [ 495.746808][ T5818] Bluetooth: hci1: command tx timeout [ 495.870042][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.878297][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.880652][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.893113][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.919730][ T7815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.097419][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.106422][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.177493][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.185126][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.214144][ T7815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.756653][ T7815] hsr_slave_0: entered promiscuous mode [ 496.767481][ T7815] hsr_slave_1: entered promiscuous mode [ 496.779627][ T7815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.788052][ T7815] Cannot create hsr debugfs directory [ 499.097828][ T7815] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 499.206138][ T7815] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 499.355227][ T7815] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 499.390840][ T7934] loop3: detected capacity change from 0 to 2048 [ 499.495338][ T7815] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 499.631615][ T7934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.644689][ T7934] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.904451][ T7946] netlink: 'syz.2.547': attribute type 10 has an invalid length. [ 499.941717][ T7947] input: syz0 as /devices/virtual/input/input8 [ 499.984401][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 500.016923][ T7934] loop3: detected capacity change from 2048 to 0 [ 500.062444][ T7946] syz_tun: entered promiscuous mode [ 500.095625][ T7946] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 500.117077][ T7949] syz.3.544: attempt to access beyond end of device [ 500.117077][ T7949] loop3: rw=12288, sector=32, nr_sectors = 8 limit=0 [ 500.131048][ T7949] EXT4-fs error (device loop3): ext4_get_inode_loc:4930: inode #18: block 4: comm syz.3.544: unable to read itable block [ 500.131772][ C0] I/O error, dev loop3, sector 40 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 500.148286][ T7949] syz.3.544: attempt to access beyond end of device [ 500.148286][ T7949] loop3: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 500.168295][ T7949] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 500.177140][ T7949] EXT4-fs (loop3): I/O error while writing superblock [ 500.184444][ T7949] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: IO failure [ 500.193659][ T7949] syz.3.544: attempt to access beyond end of device [ 500.193659][ T7949] loop3: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 500.207472][ T7949] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 500.219579][ T7949] EXT4-fs (loop3): I/O error while writing superblock [ 500.233870][ T7949] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.544: mark_inode_dirty error [ 500.248394][ T7949] syz.3.544: attempt to access beyond end of device [ 500.248394][ T7949] loop3: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 500.262828][ T7949] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 500.271555][ T7949] EXT4-fs (loop3): I/O error while writing superblock [ 500.279260][ T7949] syz.3.544: attempt to access beyond end of device [ 500.279260][ T7949] loop3: rw=524288, sector=40, nr_sectors = 8 limit=0 [ 500.293017][ T7949] syz.3.544: attempt to access beyond end of device [ 500.293017][ T7949] loop3: rw=12288, sector=32, nr_sectors = 8 limit=0 [ 500.309123][ T7949] EXT4-fs error (device loop3): ext4_get_inode_loc:4930: inode #18: block 4: comm syz.3.544: unable to read itable block [ 500.323751][ T7949] syz.3.544: attempt to access beyond end of device [ 500.323751][ T7949] loop3: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 500.340633][ T7949] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 500.352579][ T7949] EXT4-fs (loop3): I/O error while writing superblock [ 500.359664][ T7949] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: IO failure [ 500.369268][ T7949] syz.3.544: attempt to access beyond end of device [ 500.369268][ T7949] loop3: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 500.383129][ T7949] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 500.392058][ T7949] EXT4-fs (loop3): I/O error while writing superblock [ 500.401714][ T7949] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.544: mark_inode_dirty error [ 500.414389][ T7949] syz.3.544: attempt to access beyond end of device [ 500.414389][ T7949] loop3: rw=145409, sector=0, nr_sectors = 8 limit=0 [ 500.431872][ T7949] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 500.441536][ T7949] EXT4-fs (loop3): I/O error while writing superblock [ 500.507996][ T7949] syz.3.544: attempt to access beyond end of device [ 500.507996][ T7949] loop3: rw=536576, sector=16, nr_sectors = 8 limit=0 [ 500.590058][ T7949] EXT4-fs error (device loop3): ext4_wait_block_bitmap:584: comm syz.3.544: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 500.608812][ T7949] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 500.622416][ T7949] EXT4-fs (loop3): I/O error while writing superblock [ 500.703292][ T7949] EXT4-fs error (device loop3): ext4_wait_block_bitmap:584: comm syz.3.544: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 500.722365][ T7949] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 500.731893][ T7949] EXT4-fs (loop3): I/O error while writing superblock [ 500.740197][ T7949] EXT4-fs error (device loop3): ext4_get_inode_loc:4930: inode #18: block 4: comm syz.3.544: unable to read itable block [ 500.753623][ T7949] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 500.762461][ T7949] EXT4-fs (loop3): I/O error while writing superblock [ 500.769499][ T7949] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: IO failure [ 500.779072][ T7949] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 501.428790][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.718266][ T7815] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.840344][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.848118][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.930373][ T7962] netlink: 'syz.1.551': attribute type 12 has an invalid length. [ 501.940300][ T7962] netlink: 'syz.1.551': attribute type 29 has an invalid length. [ 501.948649][ T7962] netlink: 148 bytes leftover after parsing attributes in process `syz.1.551'. [ 501.962723][ T7962] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 501.970902][ T7962] netlink: 'syz.1.551': attribute type 2 has an invalid length. [ 501.978994][ T7962] netlink: 39 bytes leftover after parsing attributes in process `syz.1.551'. [ 502.000761][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.008409][ T6156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.036887][ T7963] netlink: 'syz.1.551': attribute type 12 has an invalid length. [ 502.045585][ T7963] netlink: 'syz.1.551': attribute type 29 has an invalid length. [ 502.053927][ T7963] netlink: 148 bytes leftover after parsing attributes in process `syz.1.551'. [ 502.063310][ T7963] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 502.071450][ T7963] netlink: 'syz.1.551': attribute type 2 has an invalid length. [ 502.079496][ T7963] netlink: 39 bytes leftover after parsing attributes in process `syz.1.551'. [ 503.267304][ T7976] syzkaller1: entered promiscuous mode [ 503.275866][ T7976] syzkaller1: entered allmulticast mode [ 504.472948][ T7815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.771061][ T8003] loop1: detected capacity change from 0 to 1024 [ 506.077282][ T8003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.151351][ T8005] loop2: detected capacity change from 0 to 4096 [ 506.278738][ T30] audit: type=1800 audit(2000000147.098:167): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.559" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 506.599542][ T8010] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 506.782659][ T7815] veth0_vlan: entered promiscuous mode [ 506.993637][ T7815] veth1_vlan: entered promiscuous mode [ 507.355896][ T7546] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.693238][ T7815] veth0_macvtap: entered promiscuous mode [ 507.768261][ T7815] veth1_macvtap: entered promiscuous mode [ 507.929434][ T8013] syz_tun: entered allmulticast mode [ 508.001668][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 508.007933][ T8012] syz_tun: left allmulticast mode [ 508.022268][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.063568][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 508.100221][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 508.137198][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 508.151593][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.170283][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.262442][ T7815] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.273731][ T7815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.284168][ T7815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.293399][ T7815] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.565718][ T8019] 9pnet_fd: Insufficient options for proto=fd [ 509.461448][ T8031] pim6reg1: entered promiscuous mode [ 509.470329][ T8031] pim6reg1: entered allmulticast mode [ 509.843183][ T8039] loop2: detected capacity change from 0 to 128 [ 510.009169][ T8039] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 510.111108][ T8039] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 510.128966][ T5818] Bluetooth: hci0: command tx timeout [ 510.314456][ T8014] chnl_net:caif_netlink_parms(): no params data found [ 512.219033][ T8057] loop1: detected capacity change from 0 to 32768 [ 512.232269][ T5818] Bluetooth: hci0: command tx timeout [ 512.310248][ T5807] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 512.443993][ T8057] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 512.444167][ T8057] allowing incompatible features above 0.0: (unknown version) [ 512.444262][ T8057] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 512.498280][ T8057] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 512.506888][ T8057] bcachefs (loop1): initializing new filesystem [ 512.526459][ T8057] bcachefs (loop1): going read-write [ 512.663705][ T8057] bcachefs (loop1): marking superblocks [ 512.719024][ T8057] bcachefs (loop1): initializing freespace [ 512.750104][ T8057] bcachefs (loop1): done initializing freespace [ 512.771510][ T8057] bcachefs (loop1): reading snapshots table [ 512.778181][ T8057] bcachefs (loop1): reading snapshots done [ 512.932183][ T8057] bcachefs (loop1): done starting filesystem [ 513.011394][ T8073] loop2: detected capacity change from 0 to 8 [ 513.229292][ T8073] SQUASHFS error: Failed to read block 0x4de: -5 [ 513.237079][ T8073] SQUASHFS error: Failed to read block 0x4de: -5 [ 513.244649][ T8073] SQUASHFS error: Failed to read block 0x4de: -5 [ 513.252031][ T8073] SQUASHFS error: Failed to read block 0x4de: -5 [ 513.259384][ T8073] SQUASHFS error: Failed to read block 0x4de: -5 [ 513.399114][ T30] audit: type=1800 audit(2000000154.597:168): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.569" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 513.421491][ T30] audit: type=1800 audit(2000000154.608:169): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.570" name="file1" dev="loop1" ino=4098 res=0 errno=0 [ 514.182761][ T5818] Bluetooth: hci0: command tx timeout [ 514.286675][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.294421][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.302284][ T8014] bridge_slave_0: entered allmulticast mode [ 514.399578][ T8014] bridge_slave_0: entered promiscuous mode [ 514.491243][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.499149][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.507023][ T8014] bridge_slave_1: entered allmulticast mode [ 514.517288][ T8014] bridge_slave_1: entered promiscuous mode [ 514.874351][ T5889] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 515.079241][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.090523][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 515.104989][ T30] audit: type=1800 audit(2000000156.507:170): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.570" name="file1" dev="loop1" ino=4098 res=0 errno=0 [ 515.127084][ T5889] usb 3-1: config 0 has no interfaces? [ 515.177977][ T5889] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 515.187991][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.198413][ T5889] usb 3-1: Product: syz [ 515.202884][ T5889] usb 3-1: Manufacturer: syz [ 515.208575][ T5889] usb 3-1: SerialNumber: syz [ 515.246721][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.310392][ T5889] usb 3-1: config 0 descriptor?? [ 515.492970][ T8014] team0: Port device team_slave_0 added [ 515.559791][ T8014] team0: Port device team_slave_1 added [ 515.568744][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.659946][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.701874][ T8091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.713120][ T8091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.808660][ T5928] usb 3-1: USB disconnect, device number 3 [ 515.848471][ T7546] bcachefs (loop1): shutting down [ 515.854064][ T7546] bcachefs (loop1): going read-only [ 515.859923][ T7546] bcachefs (loop1): finished waiting for writes to stop [ 515.942608][ T7546] bcachefs (loop1): flushing journal and stopping allocators, journal seq 6 [ 515.986595][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.994539][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.022646][ T8014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.093101][ T5818] Bluetooth: hci0: command tx timeout [ 516.138541][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.146015][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.177533][ T8014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.222223][ T7546] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 7 [ 516.319628][ T7546] bcachefs (loop1): clean shutdown complete, journal seq 8 [ 516.384127][ T7546] bcachefs (loop1): marking filesystem clean [ 516.715321][ T7546] bcachefs (loop1): shutdown complete [ 516.788799][ T8014] hsr_slave_0: entered promiscuous mode [ 516.799543][ T8014] hsr_slave_1: entered promiscuous mode [ 516.808980][ T8014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.819143][ T8014] Cannot create hsr debugfs directory [ 518.469430][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.477446][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.825783][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.834242][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.987192][ T8014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 519.116432][ T8014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 519.232095][ T8014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 519.314823][ T8014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 519.815593][ T8129] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 520.857554][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 521.244522][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.426354][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 521.433228][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 521.543404][ T8014] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.646477][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.654236][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.835924][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.843686][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.398267][ T8165] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 524.582058][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.937751][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 525.170856][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 525.199597][ T5928] usb 2-1: config 162 has an invalid interface number: 251 but max is 1 [ 525.208588][ T5928] usb 2-1: config 162 has an invalid interface number: 209 but max is 1 [ 525.218495][ T5928] usb 2-1: config 162 has no interface number 0 [ 525.225062][ T5928] usb 2-1: config 162 has no interface number 1 [ 525.232234][ T5928] usb 2-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 525.245942][ T5928] usb 2-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 525.257264][ T5928] usb 2-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 525.269539][ T5928] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 525.281687][ T5928] usb 2-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 525.292642][ T5928] usb 2-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 525.306469][ T5928] usb 2-1: config 162 interface 251 has no altsetting 0 [ 525.314680][ T5928] usb 2-1: config 162 interface 209 has no altsetting 0 [ 525.530138][ T5928] usb 2-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 525.541245][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.549763][ T5928] usb 2-1: Product: syz [ 525.554307][ T5928] usb 2-1: Manufacturer: syz [ 525.559199][ T5928] usb 2-1: SerialNumber: syz [ 525.742989][ T8192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.891244][ T5928] io_edgeport 2-1:162.251: required endpoints missing [ 526.069687][ T5928] io_edgeport 2-1:162.209: Edgeport 2 port adapter converter detected [ 526.468422][ T5928] usb 2-1: у detected [ 526.709890][ T5928] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 526.848410][ T5928] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 526.971902][ C0] usb 2-1: edge_interrupt_callback - Error -19 submitting control urb [ 526.980632][ T5928] usb 2-1: USB disconnect, device number 4 [ 527.014181][ T5928] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 527.093170][ T5928] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 527.107529][ T5928] io_edgeport 2-1:162.209: device disconnected [ 528.637559][ T8014] veth0_vlan: entered promiscuous mode [ 528.921371][ T8216] loop5: detected capacity change from 0 to 32768 [ 528.945445][ T8216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.604 (8216) [ 528.971932][ T8014] veth1_vlan: entered promiscuous mode [ 528.996372][ T8216] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 529.007228][ T8216] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 529.017255][ T8216] BTRFS info (device loop5): disk space caching is enabled [ 529.024969][ T8216] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 529.396350][ T8014] veth0_macvtap: entered promiscuous mode [ 529.561606][ T8216] BTRFS info (device loop5): rebuilding free space tree [ 529.601824][ T8014] veth1_macvtap: entered promiscuous mode [ 529.622237][ T8216] BTRFS info (device loop5): disabling free space tree [ 529.633068][ T8216] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 529.645065][ T8216] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 530.071034][ T7815] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 530.096898][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.323362][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.491359][ T8014] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.502390][ T8014] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.511729][ T8014] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.520939][ T8014] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.063961][ T5889] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 532.241621][ T5889] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 532.356396][ T5859] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 532.601532][ T5859] usb 2-1: config 0 has no interfaces? [ 532.660616][ T5859] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 532.670269][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.678820][ T5859] usb 2-1: Product: syz [ 532.685678][ T5859] usb 2-1: Manufacturer: syz [ 532.690568][ T5859] usb 2-1: SerialNumber: syz [ 532.909704][ T5859] usb 2-1: config 0 descriptor?? [ 533.283763][ T5859] usb 2-1: USB disconnect, device number 5 [ 533.335321][ T8273] loop2: detected capacity change from 0 to 2048 [ 533.408538][ T8270] fido_id[8270]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 533.505490][ T8273] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 533.690323][ T8273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.692246][ T5859] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 535.041715][ T5859] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.054956][ T5859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.279646][ T5859] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 535.290003][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 535.298618][ T5859] usb 6-1: SerialNumber: syz [ 535.778510][ T5859] usb 6-1: 0:2 : does not exist [ 536.059743][ T5859] usb 6-1: USB disconnect, device number 2 [ 536.358471][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.578400][ T8307] loop5: detected capacity change from 0 to 256 [ 537.934319][ T8307] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 538.055500][ T8312] loop1: detected capacity change from 0 to 128 [ 538.257627][ T8312] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 538.557573][ T8312] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 539.546823][ T7546] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 540.461842][ T8329] loop5: detected capacity change from 0 to 128 [ 540.569496][ T8329] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 540.739283][ T8329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.602186][ T5857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 542.343596][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 542.453068][ T5857] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 542.462769][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.471358][ T5857] usb 2-1: Product: syz [ 542.475800][ T5857] usb 2-1: Manufacturer: syz [ 542.480790][ T5857] usb 2-1: SerialNumber: syz [ 542.742597][ T5857] usb 2-1: config 0 descriptor?? [ 542.800687][ T5857] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 542.970831][ T8341] input: syz0 as /devices/virtual/input/input9 [ 544.150046][ T5857] gspca_stk1135: reg_w 0x5 err -71 [ 544.156872][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 544.163457][ T5857] gspca_stk1135: Sensor write failed [ 544.169250][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 544.175927][ T5857] gspca_stk1135: Sensor write failed [ 544.181531][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 544.188353][ T5857] gspca_stk1135: Sensor read failed [ 544.193951][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 544.200611][ T5857] gspca_stk1135: Sensor read failed [ 544.207599][ T5857] gspca_stk1135: Detected sensor type unknown (0x0) [ 544.215169][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 544.221848][ T5857] gspca_stk1135: Sensor read failed [ 544.227349][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 544.234031][ T5857] gspca_stk1135: Sensor read failed [ 544.240214][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 544.246808][ T5857] gspca_stk1135: Sensor write failed [ 544.252586][ T5857] gspca_stk1135: serial bus timeout: status=0x00 [ 544.259332][ T5857] gspca_stk1135: Sensor write failed [ 544.265252][ T5857] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 544.634741][ T5857] usb 2-1: USB disconnect, device number 6 [ 545.268719][ T8353] loop5: detected capacity change from 0 to 512 [ 545.378629][ T8353] EXT4-fs: Ignoring removed oldalloc option [ 545.516064][ T8353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 545.602701][ T8359] loop1: detected capacity change from 0 to 512 [ 545.655497][ T8353] EXT4-fs (loop5): orphan cleanup on readonly fs [ 545.933778][ T8353] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 545.944300][ T8353] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 545.954657][ T8353] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.634: Failed to acquire dquot type 1 [ 545.972721][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.980837][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.175627][ T8353] EXT4-fs (loop5): 1 truncate cleaned up [ 546.254953][ T8353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 546.332124][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.341567][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.640729][ T6454] bond0: (slave syz_tun): Releasing backup interface [ 546.870152][ T7815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.081978][ T6154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.399657][ T6154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.049647][ T8368] loop1: detected capacity change from 0 to 32768 [ 548.186932][ T8368] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.640 (8368) [ 548.293363][ T6154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.545985][ T8368] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 548.563834][ T8368] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 548.708893][ T8371] loop5: detected capacity change from 0 to 40427 [ 548.725396][ T8371] F2FS-fs (loop5): build fault injection rate: 690 [ 548.732665][ T8371] F2FS-fs (loop5): Image doesn't support compression [ 548.740120][ T8371] F2FS-fs (loop5): Image doesn't support compression [ 548.750338][ T6154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.818741][ T8371] F2FS-fs (loop5): invalid crc value [ 549.245347][ T8371] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 549.315010][ T8368] BTRFS info (device loop1): rebuilding free space tree [ 549.417936][ T8368] BTRFS info (device loop1): disabling free space tree [ 549.429137][ T8368] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 549.439303][ T8368] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 549.561584][ T8371] bio_check_eod: 25 callbacks suppressed [ 549.561659][ T8371] syz.5.641: attempt to access beyond end of device [ 549.561659][ T8371] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 549.589460][ T8371] syz.5.641: attempt to access beyond end of device [ 549.589460][ T8371] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 549.606048][ T8371] syz.5.641: attempt to access beyond end of device [ 549.606048][ T8371] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 549.705789][ T6154] bridge_slave_1: left allmulticast mode [ 549.712101][ T6154] bridge_slave_1: left promiscuous mode [ 549.718906][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.755683][ T7815] syz-executor: attempt to access beyond end of device [ 549.755683][ T7815] loop5: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 549.773533][ T7815] CPU: 1 UID: 0 PID: 7815 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 549.773701][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 549.773793][ T7815] Call Trace: [ 549.773853][ T7815] [ 549.773907][ T7815] __dump_stack+0x26/0x30 [ 549.774094][ T7815] dump_stack_lvl+0x1df/0x270 [ 549.774288][ T7815] dump_stack+0x1e/0x25 [ 549.774453][ T7815] f2fs_handle_critical_error+0xa6f/0xc20 [ 549.774708][ T7815] f2fs_stop_checkpoint+0x65/0x80 [ 549.774914][ T7815] f2fs_write_end_io+0xb4b/0x1920 [ 549.775092][ T7815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.775326][ T7815] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 549.775477][ T7815] bio_endio+0xe24/0xf80 [ 549.775672][ T7815] submit_bio_noacct+0x214/0x2710 [ 549.775928][ T7815] submit_bio+0x5a9/0x5d0 [ 549.776129][ T7815] f2fs_submit_write_bio+0x92/0x250 [ 549.776332][ T7815] __submit_merged_bio+0x16f/0x6a0 [ 549.776529][ T7815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.776750][ T7815] __submit_merged_write_cond+0x458/0x9a0 [ 549.776988][ T7815] f2fs_write_data_pages+0x4bb2/0x5480 [ 549.777346][ T7815] ? kmsan_get_metadata+0xfb/0x160 [ 549.777552][ T7815] ? kmsan_get_metadata+0xfb/0x160 [ 549.777758][ T7815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.777987][ T7815] ? __pfx_folios_put_refs+0x1/0x10 [ 549.778145][ T7815] ? filter_irq_stacks+0x49/0x190 [ 549.778307][ T7815] ? stack_depot_save_flags+0x35/0x7b0 [ 549.778503][ T7815] ? kmsan_get_metadata+0xfb/0x160 [ 549.778705][ T7815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.778925][ T7815] ? kmsan_get_metadata+0xfb/0x160 [ 549.779130][ T7815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.779340][ T7815] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 549.779555][ T7815] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 549.779770][ T7815] do_writepages+0x3f2/0x860 [ 549.779969][ T7815] ? _raw_spin_unlock+0x30/0x50 [ 549.780159][ T7815] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 549.780349][ T7815] filemap_fdatawrite+0x207/0x260 [ 549.780645][ T7815] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 549.780847][ T7815] f2fs_write_checkpoint+0xfe2/0x2b00 [ 549.781156][ T7815] kill_f2fs_super+0x2ff/0x970 [ 549.781341][ T7815] ? __pfx_kill_f2fs_super+0x10/0x10 [ 549.781506][ T7815] deactivate_locked_super+0xcb/0x3c0 [ 549.781718][ T7815] deactivate_super+0x12f/0x140 [ 549.781910][ T7815] cleanup_mnt+0x6fb/0x780 [ 549.782063][ T7815] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 549.782276][ T7815] ? __pfx___cleanup_mnt+0x10/0x10 [ 549.782439][ T7815] __cleanup_mnt+0x22/0x30 [ 549.782615][ T7815] task_work_run+0x209/0x2b0 [ 549.782800][ T7815] exit_to_user_mode_loop+0x2a6/0x330 [ 549.783008][ T7815] do_syscall_64+0x1e3/0x210 [ 549.783166][ T7815] ? irqentry_exit+0x16/0x60 [ 549.783304][ T7815] ? clear_bhb_loop+0x40/0x90 [ 549.783469][ T7815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.783631][ T7815] RIP: 0033:0x7faaf498fc57 [ 549.783743][ T7815] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 549.783883][ T7815] RSP: 002b:00007ffe47aa6b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 549.784030][ T7815] RAX: 0000000000000000 RBX: 00007faaf4a10925 RCX: 00007faaf498fc57 [ 549.784133][ T7815] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47aa6c10 [ 549.784229][ T7815] RBP: 00007ffe47aa6c10 R08: 0000000000000000 R09: 0000000000000000 [ 549.784325][ T7815] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe47aa7ca0 [ 549.784425][ T7815] R13: 00007faaf4a10925 R14: 000000000008a6fd R15: 00007ffe47aa7ce0 [ 549.784568][ T7815] [ 550.156250][ T7815] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 550.295113][ T6154] bridge_slave_0: left allmulticast mode [ 550.301267][ T6154] bridge_slave_0: left promiscuous mode [ 550.308099][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.731662][ T7546] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 551.669309][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.911445][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.930273][ T6154] bond0 (unregistering): Released all slaves [ 551.957269][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 552.004809][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 552.017536][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 552.140459][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 552.167887][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 552.187038][ T8401] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 553.480084][ T8404] loop5: detected capacity change from 0 to 32768 [ 553.615997][ T8404] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 553.785580][ T6154] hsr_slave_0: left promiscuous mode [ 553.831914][ T6154] hsr_slave_1: left promiscuous mode [ 553.841127][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.852606][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.970616][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.978729][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.134912][ T5818] Bluetooth: hci4: command tx timeout [ 554.159178][ T6154] veth1_macvtap: left promiscuous mode [ 554.165244][ T6154] veth0_macvtap: left promiscuous mode [ 554.171253][ T6154] veth1_vlan: left promiscuous mode [ 554.177068][ T6154] veth0_vlan: left promiscuous mode [ 555.044105][ T8404] XFS (loop5): Ending clean mount [ 555.104222][ T8404] XFS (loop5): Quotacheck needed: Please wait. [ 555.262470][ T8404] XFS (loop5): Quotacheck: Done. [ 555.428051][ T7815] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 556.058371][ T5818] Bluetooth: hci4: command tx timeout [ 556.495094][ T5857] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 556.552740][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 556.696984][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 556.712677][ T5857] usb 7-1: Using ep0 maxpacket: 32 [ 556.766302][ T5857] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 556.775131][ T5857] usb 7-1: config 0 has no interface number 0 [ 556.884950][ T5857] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 556.894581][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.905899][ T5857] usb 7-1: Product: syz [ 556.910381][ T5857] usb 7-1: Manufacturer: syz [ 556.916388][ T5857] usb 7-1: SerialNumber: syz [ 557.186320][ T5857] usb 7-1: config 0 descriptor?? [ 557.273987][ T5857] smsc95xx v2.0.0 [ 557.728343][ T5857] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 557.739921][ T5857] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 558.012020][ T5818] Bluetooth: hci4: command tx timeout [ 558.490827][ T8398] chnl_net:caif_netlink_parms(): no params data found [ 558.849158][ T5857] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 558.861291][ T5857] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 559.870373][ T5857] usb 7-1: USB disconnect, device number 2 [ 559.947201][ T5818] Bluetooth: hci4: command tx timeout [ 559.972028][ T8453] loop1: detected capacity change from 0 to 40427 [ 559.986843][ T8453] F2FS-fs (loop1): Corrupted extension count (720933 + 1 > 64) [ 559.994933][ T8453] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 560.006830][ T8453] F2FS-fs (loop1): build fault injection rate: 690 [ 560.014145][ T8453] F2FS-fs (loop1): Image doesn't support compression [ 560.021728][ T8453] F2FS-fs (loop1): Image doesn't support compression [ 560.034482][ T8453] F2FS-fs (loop1): invalid crc value [ 560.462727][ T8453] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 560.471639][ T8453] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 560.559359][ T30] audit: type=1326 audit(2000000205.305:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.5.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf498e929 code=0x7fc00000 [ 560.582228][ T30] audit: type=1326 audit(2000000205.316:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.5.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf498e929 code=0x7fc00000 [ 560.670338][ T8463] 9pnet_fd: Insufficient options for proto=fd [ 560.680267][ T8453] syz.1.658: attempt to access beyond end of device [ 560.680267][ T8453] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 560.839112][ T7546] syz-executor: attempt to access beyond end of device [ 560.839112][ T7546] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 560.854972][ T7546] CPU: 1 UID: 0 PID: 7546 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 560.855141][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.855228][ T7546] Call Trace: [ 560.855280][ T7546] [ 560.855335][ T7546] __dump_stack+0x26/0x30 [ 560.855518][ T7546] dump_stack_lvl+0x1df/0x270 [ 560.855720][ T7546] dump_stack+0x1e/0x25 [ 560.855890][ T7546] f2fs_handle_critical_error+0xa6f/0xc20 [ 560.856153][ T7546] f2fs_stop_checkpoint+0x65/0x80 [ 560.856371][ T7546] f2fs_write_end_io+0xb4b/0x1920 [ 560.856537][ T7546] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 560.856776][ T7546] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 560.856928][ T7546] bio_endio+0xe24/0xf80 [ 560.857128][ T7546] submit_bio_noacct+0x214/0x2710 [ 560.857382][ T7546] submit_bio+0x5a9/0x5d0 [ 560.857585][ T7546] f2fs_submit_write_bio+0x92/0x250 [ 560.857799][ T7546] __submit_merged_bio+0x16f/0x6a0 [ 560.858000][ T7546] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 560.858226][ T7546] __submit_merged_write_cond+0x458/0x9a0 [ 560.858458][ T7546] f2fs_write_data_pages+0x4bb2/0x5480 [ 560.858815][ T7546] ? kmsan_get_metadata+0xfb/0x160 [ 560.859014][ T7546] ? kmsan_get_metadata+0xfb/0x160 [ 560.859216][ T7546] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 560.859432][ T7546] ? __pfx_folios_put_refs+0x1/0x10 [ 560.859589][ T7546] ? filter_irq_stacks+0x49/0x190 [ 560.859755][ T7546] ? stack_depot_save_flags+0x35/0x7b0 [ 560.859949][ T7546] ? kmsan_get_metadata+0xfb/0x160 [ 560.860154][ T7546] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 560.860367][ T7546] ? kmsan_get_metadata+0xfb/0x160 [ 560.860566][ T7546] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 560.860775][ T7546] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 560.860983][ T7546] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 560.861191][ T7546] do_writepages+0x3f2/0x860 [ 560.861378][ T7546] ? _raw_spin_unlock+0x30/0x50 [ 560.861589][ T7546] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 560.861782][ T7546] filemap_fdatawrite+0x207/0x260 [ 560.862082][ T7546] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 560.862285][ T7546] f2fs_write_checkpoint+0xfe2/0x2b00 [ 560.862595][ T7546] kill_f2fs_super+0x2ff/0x970 [ 560.862789][ T7546] ? __pfx_kill_f2fs_super+0x10/0x10 [ 560.862957][ T7546] deactivate_locked_super+0xcb/0x3c0 [ 560.863167][ T7546] deactivate_super+0x12f/0x140 [ 560.863356][ T7546] cleanup_mnt+0x6fb/0x780 [ 560.863507][ T7546] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 560.863726][ T7546] ? __pfx___cleanup_mnt+0x10/0x10 [ 560.863889][ T7546] __cleanup_mnt+0x22/0x30 [ 560.864040][ T7546] task_work_run+0x209/0x2b0 [ 560.864229][ T7546] exit_to_user_mode_loop+0x2a6/0x330 [ 560.864415][ T7546] do_syscall_64+0x1e3/0x210 [ 560.864576][ T7546] ? irqentry_exit+0x16/0x60 [ 560.864717][ T7546] ? clear_bhb_loop+0x40/0x90 [ 560.864887][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.865043][ T7546] RIP: 0033:0x7fc7b5d8fc57 [ 560.865156][ T7546] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 560.865288][ T7546] RSP: 002b:00007ffd5b5b9838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 560.865431][ T7546] RAX: 0000000000000000 RBX: 00007fc7b5e10925 RCX: 00007fc7b5d8fc57 [ 560.865528][ T7546] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5b5b98f0 [ 560.865623][ T7546] RBP: 00007ffd5b5b98f0 R08: 0000000000000000 R09: 0000000000000000 [ 560.865726][ T7546] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5b5ba980 [ 560.865826][ T7546] R13: 00007fc7b5e10925 R14: 000000000008d59d R15: 00007ffd5b5ba9c0 [ 560.865959][ T7546] [ 561.231673][ T7546] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 561.475078][ T30] audit: type=1326 audit(2000000206.293:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8457 comm="syz.5.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf498e929 code=0x7fc00000 [ 562.689183][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.697351][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.705478][ T8398] bridge_slave_0: entered allmulticast mode [ 562.715631][ T8398] bridge_slave_0: entered promiscuous mode [ 562.746676][ T8478] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 562.803908][ T8480] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 562.861551][ T8480] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 562.925496][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.939484][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.947791][ T8398] bridge_slave_1: entered allmulticast mode [ 562.957962][ T8398] bridge_slave_1: entered promiscuous mode [ 563.505784][ T8484] evm: overlay not supported [ 563.616246][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.707096][ T5857] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 563.723264][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.943261][ T5857] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.953648][ T5857] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 563.965863][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.066468][ T5857] usb 7-1: config 0 descriptor?? [ 564.277713][ T8398] team0: Port device team_slave_0 added [ 564.346351][ T8398] team0: Port device team_slave_1 added [ 564.365039][ T8486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.375944][ T8486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.777773][ T24] usb 7-1: USB disconnect, device number 3 [ 564.892511][ T5857] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 565.120337][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 565.188042][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 565.337067][ T5857] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 565.347039][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.355686][ T5857] usb 1-1: Product: syz [ 565.360253][ T5857] usb 1-1: Manufacturer: syz [ 565.365134][ T5857] usb 1-1: SerialNumber: syz [ 565.657956][ T5857] usb 1-1: config 0 descriptor?? [ 565.720777][ T8501] loop1: detected capacity change from 0 to 32768 [ 565.799210][ T5857] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 565.809166][ T5857] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 565.983715][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.991495][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.018403][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.059211][ T8501] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 566.154172][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.164840][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.193480][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.344990][ T7546] (syz-executor,7546,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 566.457516][ T7546] ocfs2: Unmounting device (7,1) on (node local) [ 566.478081][ T5857] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 566.831080][ T5928] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 567.037085][ T5928] usb 7-1: Using ep0 maxpacket: 16 [ 567.086301][ T5928] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 567.095844][ T5928] usb 7-1: config 0 has no interface number 0 [ 567.146161][ T5857] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 567.156573][ T5857] em28xx 1-1:0.0: board has no eeprom [ 567.184114][ T5928] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 567.193713][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.202447][ T5928] usb 7-1: Product: syz [ 567.210215][ T5928] usb 7-1: Manufacturer: syz [ 567.216099][ T5928] usb 7-1: SerialNumber: syz [ 567.216467][ T8398] hsr_slave_0: entered promiscuous mode [ 567.232734][ T8398] hsr_slave_1: entered promiscuous mode [ 567.243448][ T8398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.251483][ T8398] Cannot create hsr debugfs directory [ 567.295043][ T8515] loop5: detected capacity change from 0 to 1024 [ 567.374539][ T5857] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 567.383059][ T5857] em28xx 1-1:0.0: dvb set to bulk mode. [ 567.390980][ T8456] em28xx 1-1:0.0: Binding DVB extension [ 567.405049][ T8515] EXT4-fs: Ignoring removed orlov option [ 567.411892][ T8515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 567.458000][ T5928] usb 7-1: config 0 descriptor?? [ 567.580776][ T5928] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 567.629297][ T8515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.664159][ T5857] usb 1-1: USB disconnect, device number 5 [ 567.672484][ T5857] em28xx 1-1:0.0: Disconnecting em28xx [ 568.048810][ T8456] em28xx 1-1:0.0: Registering input extension [ 568.057217][ T5857] em28xx 1-1:0.0: Closing input extension [ 568.271974][ T5857] em28xx 1-1:0.0: Freeing device [ 568.847284][ T7815] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.078506][ T5857] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 569.166493][ T5928] gspca_spca1528: reg_r err -71 [ 569.172296][ T5928] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 569.213665][ T5928] usb 7-1: USB disconnect, device number 4 [ 569.281824][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.294209][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.304543][ T5857] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 569.316668][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.550420][ T5857] usb 1-1: config 0 descriptor?? [ 570.174503][ T5857] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 570.280918][ T5857] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 570.362446][ T5857] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 570.367944][ T8398] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 570.682924][ T8398] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 570.850089][ T8398] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 570.982983][ T5857] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 571.041459][ T8398] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 571.111489][ T5857] usb 1-1: USB disconnect, device number 6 [ 571.552835][ T8541] fido_id[8541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 571.593401][ T8545] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 573.064046][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.345900][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.421917][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.429714][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.443122][ T5818] Bluetooth: hci2: command 0x0401 tx timeout [ 573.515639][ T3946] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.523435][ T3946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.407538][ T8572] loop1: detected capacity change from 0 to 2048 [ 574.740801][ T8572] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 575.677963][ T8578] sctp: failed to load transform for md5: -2 [ 576.018105][ T8588] loop5: detected capacity change from 0 to 32768 [ 576.100265][ T8456] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 576.271243][ T8588] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 576.271401][ T8588] allowing incompatible features above 0.0: (unknown version) [ 576.271491][ T8588] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 576.320808][ T8588] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 576.329882][ T8588] bcachefs (loop5): initializing new filesystem [ 576.350268][ T8588] bcachefs (loop5): going read-write [ 576.501431][ T8456] usb 1-1: config 0 has no interfaces? [ 576.507774][ T8456] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 576.517508][ T8456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.579417][ T8456] usb 1-1: config 0 descriptor?? [ 576.709388][ T8588] bcachefs (loop5): marking superblocks [ 576.777140][ T8588] bcachefs (loop5): initializing freespace [ 576.806747][ T8588] bcachefs (loop5): done initializing freespace [ 576.828204][ T8588] bcachefs (loop5): reading snapshots table [ 576.834714][ T8588] bcachefs (loop5): reading snapshots done [ 577.034564][ T8588] bcachefs (loop5): done starting filesystem [ 577.277492][ T30] audit: type=1800 audit(2000000223.277:174): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.691" name="file1" dev="loop5" ino=4098 res=0 errno=0 [ 577.334133][ T8600] sctp: failed to load transform for md5: -2 [ 577.444310][ T7815] bcachefs (loop5): shutting down [ 577.450011][ T7815] bcachefs (loop5): going read-only [ 577.456250][ T7815] bcachefs (loop5): finished waiting for writes to stop [ 577.663217][ T7815] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 578.026945][ T8618] loop1: detected capacity change from 0 to 16 [ 578.068827][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.105545][ T8618] erofs (device loop1): mounted with root inode @ nid 36. [ 578.170807][ T7815] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 578.297894][ T7815] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 578.370552][ T7815] bcachefs (loop5): marking filesystem clean [ 578.583200][ T24] usb 1-1: USB disconnect, device number 7 [ 578.683161][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.690948][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.799552][ T7815] bcachefs (loop5): shutdown complete [ 580.665109][ T5802] Bluetooth: hci2: command 0x0401 tx timeout [ 581.685650][ T8398] veth0_vlan: entered promiscuous mode [ 581.806968][ T8398] veth1_vlan: entered promiscuous mode [ 582.169418][ T8398] veth0_macvtap: entered promiscuous mode [ 582.337286][ T8398] veth1_macvtap: entered promiscuous mode [ 582.639495][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.770433][ T8398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.882438][ T8398] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.891926][ T8398] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.901290][ T8398] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.910588][ T8398] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.677111][ T8668] loop1: detected capacity change from 0 to 512 [ 583.786239][ T8668] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 583.926186][ T8668] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.705: corrupted xattr entries [ 584.031442][ T8668] EXT4-fs (loop1): 1 truncate cleaned up [ 584.043192][ T8668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.829331][ T7546] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.991250][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'. [ 585.286775][ T8686] loop6: detected capacity change from 0 to 256 [ 585.430883][ T8686] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 585.445447][ T8686] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 585.662165][ T8686] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 586.839219][ T8698] loop5: detected capacity change from 0 to 2048 [ 587.101233][ T8698] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 587.110757][ T8698] UDF-fs: Scanning with blocksize 512 failed [ 587.351019][ T8698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 587.851548][ T8714] xt_hashlimit: size too large, truncated to 1048576 [ 590.802813][ T8745] netlink: 'syz.5.721': attribute type 4 has an invalid length. [ 590.890122][ T8746] netlink: 'syz.5.721': attribute type 4 has an invalid length. [ 593.978151][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.986561][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.450596][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.459198][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.748215][ T8795] netlink: 'syz.0.733': attribute type 4 has an invalid length. [ 595.911449][ T8795] netlink: 'syz.0.733': attribute type 4 has an invalid length. [ 596.204363][ T8790] loop1: detected capacity change from 0 to 40427 [ 596.349492][ T8790] F2FS-fs (loop1): invalid crc value [ 596.831965][ T8790] F2FS-fs (loop1): Start checkpoint disabled! [ 596.953580][ T8790] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 597.053979][ T8798] loop6: detected capacity change from 0 to 32768 [ 597.214721][ T8798] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 597.214850][ T8798] allowing incompatible features above 0.0: (unknown version) [ 597.214955][ T8798] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 597.252767][ T8798] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 597.261580][ T8798] bcachefs (loop6): initializing new filesystem [ 597.287003][ T8798] bcachefs (loop6): going read-write [ 597.329826][ T8790] syz.1.732: attempt to access beyond end of device [ 597.329826][ T8790] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 597.345387][ T8790] syz.1.732: attempt to access beyond end of device [ 597.345387][ T8790] loop1: rw=2049, sector=45112, nr_sectors = 24 limit=40427 [ 597.346739][ T30] audit: type=1800 audit(2000000244.758:175): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.732" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 597.360760][ T8790] syz.1.732: attempt to access beyond end of device [ 597.360760][ T8790] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 597.400909][ T8790] syz.1.732: attempt to access beyond end of device [ 597.400909][ T8790] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 597.416208][ T8790] syz.1.732: attempt to access beyond end of device [ 597.416208][ T8790] loop1: rw=2049, sector=45208, nr_sectors = 24 limit=40427 [ 597.431255][ T8790] syz.1.732: attempt to access beyond end of device [ 597.431255][ T8790] loop1: rw=2049, sector=45256, nr_sectors = 16 limit=40427 [ 597.446388][ T8790] syz.1.732: attempt to access beyond end of device [ 597.446388][ T8790] loop1: rw=2049, sector=45280, nr_sectors = 16 limit=40427 [ 597.467820][ T8790] syz.1.732: attempt to access beyond end of device [ 597.467820][ T8790] loop1: rw=2049, sector=45312, nr_sectors = 16 limit=40427 [ 597.482821][ T8790] syz.1.732: attempt to access beyond end of device [ 597.482821][ T8790] loop1: rw=2049, sector=45344, nr_sectors = 8 limit=40427 [ 597.502601][ T8790] syz.1.732: attempt to access beyond end of device [ 597.502601][ T8790] loop1: rw=2049, sector=45352, nr_sectors = 16 limit=40427 [ 597.901441][ T8798] bcachefs (loop6): marking superblocks [ 597.969600][ T8798] bcachefs (loop6): initializing freespace [ 597.999379][ T8798] bcachefs (loop6): done initializing freespace [ 598.020613][ T8798] bcachefs (loop6): reading snapshots table [ 598.027267][ T8798] bcachefs (loop6): reading snapshots done [ 598.138942][ T8798] bcachefs (loop6): done starting filesystem [ 598.153560][ T30] audit: type=1800 audit(2000000244.962:176): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.732" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 598.629516][ T6156] CPU: 1 UID: 0 PID: 6156 Comm: kworker/u8:34 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 598.629696][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.629841][ T6156] Workqueue: writeback wb_workfn (flush-7:1) [ 598.630031][ T6156] Call Trace: [ 598.630084][ T6156] [ 598.630137][ T6156] __dump_stack+0x26/0x30 [ 598.630325][ T6156] dump_stack_lvl+0x1df/0x270 [ 598.630531][ T6156] dump_stack+0x1e/0x25 [ 598.630693][ T6156] f2fs_handle_critical_error+0xa6f/0xc20 [ 598.630950][ T6156] f2fs_stop_checkpoint+0x65/0x80 [ 598.631163][ T6156] f2fs_write_end_io+0xb4b/0x1920 [ 598.631304][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 598.631515][ T6156] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.631735][ T6156] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 598.631884][ T6156] bio_endio+0xe24/0xf80 [ 598.632082][ T6156] submit_bio_noacct+0x214/0x2710 [ 598.632327][ T6156] submit_bio+0x5a9/0x5d0 [ 598.632521][ T6156] f2fs_submit_write_bio+0x92/0x250 [ 598.632721][ T6156] __submit_merged_bio+0x16f/0x6a0 [ 598.632920][ T6156] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.633150][ T6156] __submit_merged_write_cond+0x458/0x9a0 [ 598.633382][ T6156] f2fs_write_data_pages+0x4bb2/0x5480 [ 598.633763][ T6156] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 598.633961][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 598.634167][ T6156] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.634388][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 598.634587][ T6156] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 598.634796][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 598.634985][ T6156] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.635190][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 598.635388][ T6156] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.635593][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 598.635794][ T6156] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.636001][ T6156] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 598.636225][ T6156] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 598.636446][ T6156] do_writepages+0x3f2/0x860 [ 598.636636][ T6156] ? stack_depot_save_flags+0x35/0x7b0 [ 598.636816][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 598.637016][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 598.637254][ T6156] __writeback_single_inode+0x101/0x1190 [ 598.637456][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 598.637676][ T6156] writeback_sb_inodes+0xaa9/0x1c90 [ 598.638034][ T6156] wb_writeback+0x4ce/0xc00 [ 598.638233][ T6156] ? queue_io+0x411/0x790 [ 598.638439][ T6156] wb_workfn+0x397/0x1910 [ 598.638599][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 598.638840][ T6156] ? __pfx_wb_workfn+0x10/0x10 [ 598.638991][ T6156] process_scheduled_works+0xb91/0x1d80 [ 598.639271][ T6156] worker_thread+0xedf/0x1590 [ 598.639523][ T6156] kthread+0xd5c/0xf00 [ 598.639680][ T6156] ? __pfx_worker_thread+0x10/0x10 [ 598.639907][ T6156] ? __pfx_kthread+0x10/0x10 [ 598.640049][ T6156] ret_from_fork+0x1e0/0x310 [ 598.640194][ T6156] ? __pfx_kthread+0x10/0x10 [ 598.640339][ T6156] ret_from_fork_asm+0x1a/0x30 [ 598.640553][ T6156] [ 598.951043][ T6156] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 599.328959][ T6156] ===================================================== [ 599.336910][ T6156] BUG: KMSAN: uninit-value in bch2_alloc_sectors_start_trans+0x750/0x3560 [ 599.345914][ T6156] bch2_alloc_sectors_start_trans+0x750/0x3560 [ 599.352510][ T6156] __bch2_write+0x7ff/0x6bc0 [ 599.357535][ T6156] bch2_write+0xcc5/0x1860 [ 599.362202][ T6156] __bch2_writepage+0x197a/0x3c90 [ 599.367560][ T6156] write_cache_pages+0xc5/0x270 [ 599.378216][ T6156] bch2_writepages+0x153/0x570 [ 599.383227][ T6156] do_writepages+0x3f2/0x860 [ 599.388799][ T6156] __writeback_single_inode+0x101/0x1190 [ 599.394863][ T6156] writeback_sb_inodes+0xaa9/0x1c90 [ 599.400308][ T6156] wb_writeback+0x4ce/0xc00 [ 599.405141][ T6156] wb_workfn+0x397/0x1910 [ 599.409686][ T6156] process_scheduled_works+0xb91/0x1d80 [ 599.416168][ T6156] worker_thread+0xedf/0x1590 [ 599.421120][ T6156] kthread+0xd5c/0xf00 [ 599.425551][ T6156] ret_from_fork+0x1e0/0x310 [ 599.430366][ T6156] ret_from_fork_asm+0x1a/0x30 [ 599.435529][ T6156] [ 599.437988][ T6156] Uninit was stored to memory at: [ 599.443615][ T6156] __bch2_writepage+0x2b40/0x3c90 [ 599.448888][ T6156] write_cache_pages+0xc5/0x270 [ 599.454162][ T6156] bch2_writepages+0x153/0x570 [ 599.459140][ T6156] do_writepages+0x3f2/0x860 [ 599.468563][ T6156] __writeback_single_inode+0x101/0x1190 [ 599.475879][ T6156] writeback_sb_inodes+0xaa9/0x1c90 [ 599.481448][ T6156] wb_writeback+0x4ce/0xc00 [ 599.486191][ T6156] wb_workfn+0x397/0x1910 [ 599.490855][ T6156] process_scheduled_works+0xb91/0x1d80 [ 599.496685][ T6156] worker_thread+0xedf/0x1590 [ 599.501843][ T6156] kthread+0xd5c/0xf00 [ 599.506129][ T6156] ret_from_fork+0x1e0/0x310 [ 599.511019][ T6156] ret_from_fork_asm+0x1a/0x30 [ 599.516116][ T6156] [ 599.518582][ T6156] Uninit was created at: [ 599.523135][ T6156] kmem_cache_alloc_lru_noprof+0x822/0xed0 [ 599.531239][ T6156] __bch2_new_inode+0x9b/0x4b0 [ 599.536878][ T6156] __bch2_create+0x286/0x1650 [ 599.541789][ T6156] bch2_create+0xba/0x1c0 [ 599.546473][ T6156] path_openat+0x2d44/0x6760 [ 599.551326][ T6156] do_filp_open+0x280/0x660 [ 599.556323][ T6156] do_sys_openat2+0x1bb/0x2f0 [ 599.565833][ T6156] __x64_sys_openat+0x240/0x300 [ 599.572273][ T6156] x64_sys_call+0x213/0x3db0 [ 599.577133][ T6156] do_syscall_64+0xd9/0x210 [ 599.581993][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.588122][ T6156] [ 599.590710][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: kworker/u8:34 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 599.603406][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.615200][ T6156] Workqueue: writeback wb_workfn (flush-bcachefs-17) [ 599.622334][ T6156] ===================================================== [ 599.629552][ T6156] Disabling lock debugging due to kernel taint [ 599.635862][ T6156] Kernel panic - not syncing: kmsan.panic set ... [ 599.642476][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: kworker/u8:34 Tainted: G B 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 599.656749][ T6156] Tainted: [B]=BAD_PAGE [ 599.661051][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.671320][ T6156] Workqueue: writeback wb_workfn (flush-bcachefs-17) [ 599.678327][ T6156] Call Trace: [ 599.681770][ T6156] [ 599.684847][ T6156] __dump_stack+0x26/0x30 [ 599.689440][ T6156] dump_stack_lvl+0x53/0x270 [ 599.694285][ T6156] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 599.700385][ T6156] dump_stack+0x1e/0x25 [ 599.704798][ T6156] panic+0x4bd/0xd50 [ 599.709001][ T6156] kmsan_report+0x31c/0x320 [ 599.713781][ T6156] ? __msan_warning+0x1b/0x30 [ 599.718721][ T6156] ? bch2_alloc_sectors_start_trans+0x750/0x3560 [ 599.725345][ T6156] ? __bch2_write+0x7ff/0x6bc0 [ 599.730375][ T6156] ? bch2_write+0xcc5/0x1860 [ 599.735217][ T6156] ? __bch2_writepage+0x197a/0x3c90 [ 599.740641][ T6156] ? write_cache_pages+0xc5/0x270 [ 599.745936][ T6156] ? bch2_writepages+0x153/0x570 [ 599.751081][ T6156] ? do_writepages+0x3f2/0x860 [ 599.756090][ T6156] ? __writeback_single_inode+0x101/0x1190 [ 599.762161][ T6156] ? writeback_sb_inodes+0xaa9/0x1c90 [ 599.767782][ T6156] ? wb_writeback+0x4ce/0xc00 [ 599.772692][ T6156] ? wb_workfn+0x397/0x1910 [ 599.777405][ T6156] ? process_scheduled_works+0xb91/0x1d80 [ 599.783402][ T6156] ? worker_thread+0xedf/0x1590 [ 599.788512][ T6156] ? kthread+0xd5c/0xf00 [ 599.793011][ T6156] ? ret_from_fork+0x1e0/0x310 [ 599.798002][ T6156] ? ret_from_fork_asm+0x1a/0x30 [ 599.803220][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 599.808613][ T6156] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 599.815218][ T6156] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 599.821564][ T6156] ? __msan_memset+0xf6/0x1b0 [ 599.826501][ T6156] ? __bch2_trans_kmalloc+0xc36/0xff0 [ 599.832121][ T6156] ? bch2_alloc_sectors_start_trans+0x3035/0x3560 [ 599.838831][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 599.844229][ T6156] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 599.850337][ T6156] __msan_warning+0x1b/0x30 [ 599.855095][ T6156] bch2_alloc_sectors_start_trans+0x750/0x3560 [ 599.861588][ T6156] ? bch2_alloc_sectors_start_trans+0x82/0x3560 [ 599.868188][ T6156] __bch2_write+0x7ff/0x6bc0 [ 599.873032][ T6156] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 599.879171][ T6156] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 599.885269][ T6156] ? __writeback_single_inode+0x101/0x1190 [ 599.891345][ T6156] ? writeback_sb_inodes+0xaa9/0x1c90 [ 599.896970][ T6156] ? wb_workfn+0x397/0x1910 [ 599.901697][ T6156] ? kthread+0xd5c/0xf00 [ 599.906248][ T6156] ? ret_from_fork+0x1e0/0x310 [ 599.911231][ T6156] ? ret_from_fork_asm+0x1a/0x30 [ 599.916443][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 599.921877][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 599.927282][ T6156] ? kmsan_internal_set_shadow_origin+0x1/0x110 [ 599.933832][ T6156] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 599.940209][ T6156] bch2_write+0xcc5/0x1860 [ 599.944925][ T6156] __bch2_writepage+0x197a/0x3c90 [ 599.950286][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 599.955833][ T6156] write_cache_pages+0xc5/0x270 [ 599.960954][ T6156] ? __pfx___bch2_writepage+0x10/0x10 [ 599.966573][ T6156] bch2_writepages+0x153/0x570 [ 599.971571][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 599.976975][ T6156] ? __pfx_bch2_writepages+0x10/0x10 [ 599.982483][ T6156] do_writepages+0x3f2/0x860 [ 599.987326][ T6156] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 599.993455][ T6156] ? queue_io+0x711/0x790 [ 599.998033][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 600.003466][ T6156] __writeback_single_inode+0x101/0x1190 [ 600.009391][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 600.014809][ T6156] writeback_sb_inodes+0xaa9/0x1c90 [ 600.020371][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 600.025805][ T6156] wb_writeback+0x4ce/0xc00 [ 600.030559][ T6156] ? queue_io+0x411/0x790 [ 600.035124][ T6156] wb_workfn+0x397/0x1910 [ 600.039676][ T6156] ? kmsan_get_metadata+0xfb/0x160 [ 600.045084][ T6156] ? __pfx_wb_workfn+0x10/0x10 [ 600.050052][ T6156] process_scheduled_works+0xb91/0x1d80 [ 600.055914][ T6156] worker_thread+0xedf/0x1590 [ 600.060879][ T6156] kthread+0xd5c/0xf00 [ 600.065128][ T6156] ? __pfx_worker_thread+0x10/0x10 [ 600.070566][ T6156] ? __pfx_kthread+0x10/0x10 [ 600.075369][ T6156] ret_from_fork+0x1e0/0x310 [ 600.080164][ T6156] ? __pfx_kthread+0x10/0x10 [ 600.084952][ T6156] ret_from_fork_asm+0x1a/0x30 [ 600.089989][ T6156] [ 600.093555][ T6156] Kernel Offset: disabled [ 600.098028][ T6156] Rebooting in 86400 seconds..