last executing test programs: 1m33.986745703s ago: executing program 5 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x601, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x1800) 1m33.765225007s ago: executing program 5 (id=206): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xf03c, 0x7, 0x2, 0xd, "a85c45a2c25cc646300200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 1m33.640027916s ago: executing program 5 (id=208): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000180)={0x3, 0x1, 0x1, 0x9, 0x3, 0x9}) 1m31.854889505s ago: executing program 5 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 1m31.621764122s ago: executing program 5 (id=232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 1m31.230465161s ago: executing program 5 (id=236): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m30.598010864s ago: executing program 32 (id=236): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.954034459s ago: executing program 6 (id=1081): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) 4.554363205s ago: executing program 6 (id=1084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002980)={@in6={{0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x4}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000b5e79f04109000000000000000061c425a7519cc275d04e6205abd307a0c407c7988d13000000000000008000000000000000020000000000000000000000e200"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 4.265276214s ago: executing program 6 (id=1088): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc/sys/net/\x00\x00\f\x89\xe2T\a\xcdu`\'a\xec\x97\x0f\xf0j\x00l'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 4.013150832s ago: executing program 6 (id=1091): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r0, 0x0, 0x0, 0x9000f3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 3.821219623s ago: executing program 3 (id=1094): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x1000f) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) lseek(r0, 0x1, 0x4) 3.623525897s ago: executing program 1 (id=1096): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.467066246s ago: executing program 1 (id=1097): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001080)={r2, 0x0, 0x20}, 0xc) 3.196778112s ago: executing program 3 (id=1099): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 3.147116491s ago: executing program 2 (id=1101): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e22, 0x7, @private1, 0xd5}}}, 0x32) 2.84473626s ago: executing program 4 (id=1102): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="e6a96f41a322260a56c4fff9e69dd8", 0xf}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) recvmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/182, 0xb6}], 0x1}, 0xc45a}], 0x1, 0x10102, 0x0) 2.843904359s ago: executing program 0 (id=1114): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.843280847s ago: executing program 3 (id=1103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000700)={@val={0x0, 0xf7}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x10, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 2.805596246s ago: executing program 4 (id=1104): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a, 0x40010, r1, 0xab233000) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) 2.654487438s ago: executing program 4 (id=1105): socket(0x10, 0x803, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8,check=relaxed\x00norock,norock,map=oode=0x0000000000000003Asession=0x0000000000000038,unhide,unhide,check=strict,norock,gid=\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',check=relaxed,\x00'], 0x2, 0x699, &(0x7f0000000140)="$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") faccessat2(0xffffffffffffff9c, &(0x7f00000029c0)='./file0\x00', 0x2, 0x0) 2.484260529s ago: executing program 2 (id=1106): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) 2.329216561s ago: executing program 6 (id=1107): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x83, 0x0, 0x413}}}, 0x7) fanotify_init(0x8, 0x0) 2.328961921s ago: executing program 1 (id=1108): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x1, 0x7a5, &(0x7f0000000f80)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x4e7d, 0x8, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc) 2.328668346s ago: executing program 3 (id=1109): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0xf8}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x80000, 0x0) getdents64(r1, &(0x7f0000000300)=""/150, 0x96) 2.304401305s ago: executing program 0 (id=1110): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x885, &(0x7f00000000c0)={[{@allow_utime={'allow_utime', 0x3d, 0x10}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@dmask={'dmask', 0x3d, 0x9}}, {@errors_remount}, {@utf8}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}, 0x29, 0x1506, &(0x7f00000002c0)="$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") mount$nfs(&(0x7f0000000000)='.\xec\xbf.\\', 0x0, 0x0, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) 2.283498901s ago: executing program 4 (id=1111): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd70000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1.964418381s ago: executing program 2 (id=1112): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.772865419s ago: executing program 1 (id=1113): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.362063351s ago: executing program 6 (id=1115): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.358663538s ago: executing program 0 (id=1116): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r1, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x7f, 0xc19, 0x8, 0x36, 0x200}, 0x9c) 1.349892177s ago: executing program 1 (id=1117): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r2, 0x6}, &(0x7f0000001540)=0x8) 1.233177472s ago: executing program 2 (id=1118): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x80) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x10, 0x7, 0x1, 0x2, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe}) 1.151073714s ago: executing program 0 (id=1119): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e22, 0x7, @private1, 0xd5}}}, 0x32) 1.097939492s ago: executing program 2 (id=1120): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) 817.750873ms ago: executing program 2 (id=1121): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000005040)=""/169, 0xa9}, {&(0x7f0000001c00)=""/4092, 0xffc}, {&(0x7f0000002c40)=""/171, 0xab}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f0000000840)=""/249, 0xf9}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x10122, 0x0) 817.458864ms ago: executing program 3 (id=1122): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x1, 0x0, 0x1001f0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 579.113092ms ago: executing program 4 (id=1123): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 281.001047ms ago: executing program 1 (id=1124): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 280.188785ms ago: executing program 0 (id=1125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) unshare(0x4000400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000180)=0x8, 0x4) 135.829949ms ago: executing program 3 (id=1126): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) 850.926µs ago: executing program 4 (id=1127): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180), 0x1, 0x979b, &(0x7f0000009780)="$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") setxattr$security_ima(&(0x7f0000000400)='./file1\x00', &(0x7f0000000140), &(0x7f0000000440)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f00000002c0)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) llistxattr(&(0x7f0000000740)='./file1\x00', 0x0, 0x0) 0s ago: executing program 0 (id=1139): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5, 0x11, r0, 0x0) madvise(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x19) kernel console output (not intermixed with test programs): mode_work+0x5e/0x80 [ 139.644876][ T5826] syscall_exit_to_user_mode+0x9a/0x120 [ 139.644906][ T5826] do_syscall_64+0x103/0x210 [ 139.644936][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 139.644972][ T5826] ? exc_page_fault+0x91/0x110 [ 139.645002][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.645025][ T5826] RIP: 0033:0x7f7485b8fc97 [ 139.645047][ T5826] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 139.645067][ T5826] RSP: 002b:00007ffc437bab18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 139.645091][ T5826] RAX: 0000000000000000 RBX: 00007f7485c1089d RCX: 00007f7485b8fc97 [ 139.645108][ T5826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc437babd0 [ 139.645123][ T5826] RBP: 00007ffc437babd0 R08: 0000000000000000 R09: 0000000000000000 [ 139.645138][ T5826] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc437bbc60 [ 139.645154][ T5826] R13: 00007f7485c1089d R14: 0000000000022108 R15: 00007ffc437bbca0 [ 139.645198][ T5826] [ 140.115880][ T5826] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 140.210946][ T6630] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 140.613599][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 140.646465][ T24] IPVS: starting estimator thread 0... [ 140.838296][ T7313] IPVS: using max 24 ests per chain, 57600 per kthread [ 140.901007][ T7310] loop1: detected capacity change from 0 to 4096 [ 141.121235][ T7319] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.346519][ T30] audit: type=1800 audit(1746206822.661:150): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.459" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 141.653582][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 142.170936][ T7350] loop2: detected capacity change from 0 to 1024 [ 142.229333][ T7350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.485198][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.519097][ T7364] loop3: detected capacity change from 0 to 512 [ 142.542004][ T7364] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 142.592068][ T7364] netlink: 48 bytes leftover after parsing attributes in process `syz.3.480'. [ 142.693586][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 142.838299][ T7377] loop6: detected capacity change from 0 to 2048 [ 142.941398][ T7377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.942110][ T7340] loop0: detected capacity change from 0 to 32768 [ 143.178908][ T7340] non-latin1 character 0x172 found in JFS file name [ 143.190197][ T6630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.192357][ T7340] mount with iocharset=utf8 to access [ 143.236738][ T7340] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 143.236738][ T7340] [ 143.301418][ T7340] ERROR: (device loop0): remounting filesystem as read-only [ 143.343755][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.356764][ T7340] read_mapping_page failed! [ 143.361338][ T7340] bread failed! [ 143.527535][ T5888] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 143.548593][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.568264][ T5888] usb 4-1: Product: syz [ 143.582967][ T5888] usb 4-1: Manufacturer: syz [ 143.588831][ T5888] usb 4-1: SerialNumber: syz [ 143.623703][ T5888] usb 4-1: config 0 descriptor?? [ 143.632644][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 143.679378][ T7416] loop2: detected capacity change from 0 to 512 [ 143.690894][ T7416] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.724172][ T7418] loop6: detected capacity change from 0 to 512 [ 143.733613][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.752779][ T7416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.770414][ T7418] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 143.787672][ T7416] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.823118][ T7418] EXT4-fs (loop6): 1 truncate cleaned up [ 143.841976][ T7418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.890067][ T7418] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 143.959040][ T30] audit: type=1800 audit(1746206825.271:151): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.504" name="file1" dev="loop6" ino=16 res=0 errno=0 [ 144.020813][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.056512][ T6630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.190913][ T7434] loop6: detected capacity change from 0 to 64 [ 144.231113][ T30] audit: type=1800 audit(1746206825.531:152): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.509" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 144.263014][ T30] audit: type=1800 audit(1746206825.571:153): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.509" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 144.273111][ T7434] syz.6.509: attempt to access beyond end of device [ 144.273111][ T7434] loop6: rw=34817, sector=14, nr_sectors = 65 limit=64 [ 144.566544][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.670495][ T5832] usb 4-1: USB disconnect, device number 5 [ 144.734722][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 144.746500][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.773566][ T9] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 144.773673][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 144.797537][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.828644][ T9] usb 2-1: config 0 descriptor?? [ 144.833590][ T7450] loop4: detected capacity change from 0 to 2048 [ 144.862384][ T7450] NILFS (loop4): invalid segment: Inconsistency found [ 144.872731][ T7450] NILFS (loop4): trying rollback from an earlier position [ 144.918403][ T7450] NILFS (loop4): recovery complete [ 144.939307][ T7447] loop0: detected capacity change from 0 to 8192 [ 144.957852][ T7454] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.036939][ T7433] loop2: detected capacity change from 0 to 32768 [ 145.078879][ T7433] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.508 (7433) [ 145.080046][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 145.107896][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 145.146576][ T9] usb 2-1: USB disconnect, device number 2 [ 145.171560][ T7433] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.221681][ T7433] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 145.245056][ T7433] BTRFS info (device loop2): using free-space-tree [ 145.497921][ T30] audit: type=1804 audit(1746206826.781:154): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.508" name="/newroot/96/file1/file1" dev="loop2" ino=260 res=1 errno=0 [ 145.679014][ T5828] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.813604][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 145.850232][ T7492] loop4: detected capacity change from 0 to 8192 [ 146.301952][ T7510] loop8: detected capacity change from 0 to 8 [ 146.320351][ T7511] input: syz1 as /devices/virtual/input/input6 [ 146.344088][ T7510] Dev loop8: unable to read RDB block 8 [ 146.350100][ T7510] loop8: unable to read partition table [ 146.364017][ T7510] loop8: partition table beyond EOD, truncated [ 146.381035][ T7510] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 146.503718][ T5832] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.687727][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 146.693390][ T7490] loop3: detected capacity change from 0 to 32768 [ 146.719472][ T5832] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 146.731421][ T7522] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 146.750163][ T5832] usb 2-1: config 0 has no interface number 0 [ 146.760313][ T7490] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 146.774276][ T7516] loop0: detected capacity change from 0 to 32768 [ 146.795394][ T5832] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 146.836208][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.854615][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 146.869617][ T5832] usb 2-1: Product: syz [ 146.886166][ T7490] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 146.910442][ T5832] usb 2-1: Manufacturer: syz [ 146.934871][ T5832] usb 2-1: SerialNumber: syz [ 146.961482][ T5832] usb 2-1: config 0 descriptor?? [ 146.978635][ T5832] smsc95xx v2.0.0 [ 147.219448][ T7490] syz.3.528 (7490) used greatest stack depth: 19512 bytes left [ 147.395283][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 147.401889][ T5832] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 147.452324][ T5832] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 147.744183][ T7537] loop4: detected capacity change from 0 to 32768 [ 147.876296][ T5832] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 147.893549][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 147.922404][ T5832] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 147.956640][ T7537] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 147.956640][ T7537] allowing incompatible features above 0.0: (unknown version) [ 147.986930][ T7537] bcachefs (loop4): initializing new filesystem [ 147.994682][ T7537] bcachefs (loop4): going read-write [ 148.004284][ T5832] usb 2-1: USB disconnect, device number 3 [ 148.026609][ T7537] bcachefs (loop4): marking superblocks [ 148.049636][ T7537] bcachefs (loop4): initializing freespace [ 148.057543][ T7537] bcachefs (loop4): done initializing freespace [ 148.069526][ T7537] bcachefs (loop4): reading snapshots table [ 148.075558][ T7537] bcachefs (loop4): reading snapshots done [ 148.119490][ T7537] bcachefs (loop4): done starting filesystem [ 148.282583][ T7553] loop2: detected capacity change from 0 to 256 [ 148.410923][ T7537] syz.4.549 (7537) used greatest stack depth: 15336 bytes left [ 148.440715][ T5821] bcachefs (loop4): shutting down [ 148.483887][ T5821] bcachefs (loop4): going read-only [ 148.489524][ T5821] bcachefs (loop4): finished waiting for writes to stop [ 148.543431][ T5821] bcachefs (loop4): flushing journal and stopping allocators, journal seq 5 [ 148.711214][ T5821] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 5 [ 148.759702][ T5821] bcachefs (loop4): clean shutdown complete, journal seq 6 [ 148.783792][ T7570] netlink: 3 bytes leftover after parsing attributes in process `syz.1.559'. [ 148.792784][ T7570] 0ªX¹¦À: renamed from caif0 [ 148.819098][ T7570] 0ªX¹¦À: entered allmulticast mode [ 148.826541][ T5821] bcachefs (loop4): marking filesystem clean [ 148.841815][ T7570] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 148.933564][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.055397][ T5821] bcachefs (loop4): shutdown complete [ 149.231012][ T7589] netlink: 184 bytes leftover after parsing attributes in process `syz.3.566'. [ 149.563319][ T7595] loop6: detected capacity change from 0 to 8192 [ 149.882367][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'. [ 149.900273][ T7617] netlink: 'syz.2.579': attribute type 7 has an invalid length. [ 149.910420][ T7617] netlink: 'syz.2.579': attribute type 8 has an invalid length. [ 149.927242][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 149.973545][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.026435][ T57] kernel read not supported for file /adsp1 (pid: 57 comm: kworker/1:1) [ 150.633298][ T7629] loop0: detected capacity change from 0 to 32768 [ 150.680545][ T7629] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 150.774073][ T7629] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 150.895833][ T7640] /dev/loop0: Can't open blockdev [ 150.917544][ T7632] loop2: detected capacity change from 0 to 40427 [ 150.940960][ T7632] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3fffff [ 150.963690][ T7632] F2FS-fs (loop2): Image doesn't support compression [ 150.993317][ T7632] F2FS-fs (loop2): Image doesn't support compression [ 151.013603][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 151.086488][ T5820] ocfs2: Unmounting device (7,0) on (node local) [ 151.132515][ T7632] F2FS-fs (loop2): invalid crc value [ 151.329298][ T7652] loop3: detected capacity change from 0 to 128 [ 151.343917][ T57] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 151.387112][ T7632] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.399312][ T30] audit: type=1800 audit(1746206832.711:155): pid=7652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.594" name="file0" dev="loop3" ino=1048623 res=0 errno=0 [ 151.494704][ T7632] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_symlink+0x23a/0x880 [ 151.560490][ T57] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.568527][ T57] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 151.603032][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.605245][ T5828] syz-executor: attempt to access beyond end of device [ 151.605245][ T5828] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 151.640129][ T57] usb 7-1: config 0 descriptor?? [ 151.672512][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 151.672550][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 151.672565][ T5828] Call Trace: [ 151.672574][ T5828] [ 151.672585][ T5828] dump_stack_lvl+0x189/0x250 [ 151.672631][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.672667][ T5828] ? __pfx_queue_work_on+0x10/0x10 [ 151.672689][ T5828] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 151.672715][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 151.672743][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.672783][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 151.672820][ T5828] f2fs_write_end_io+0x4e2/0x6d0 [ 151.672873][ T5828] __submit_merged_bio+0x27a/0x6a0 [ 151.672908][ T5828] __submit_merged_write_cond+0x255/0x530 [ 151.672961][ T5828] f2fs_write_data_pages+0x2854/0x31f0 [ 151.672999][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.673074][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 151.673166][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.673193][ T5828] ? __mod_node_page_state+0xf4/0x170 [ 151.673235][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.673262][ T5828] ? lru_gen_update_size+0x7bd/0xd20 [ 151.673307][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.673334][ T5828] ? __lock_acquire+0xaac/0xd20 [ 151.673379][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.673423][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.673449][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 151.673481][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 151.673511][ T5828] do_writepages+0x3b1/0x7b0 [ 151.673566][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.673592][ T5828] ? do_raw_spin_lock+0x121/0x290 [ 151.673619][ T5828] ? __pfx_do_writepages+0x10/0x10 [ 151.673657][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.673689][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.673716][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 151.673750][ T5828] filemap_fdatawrite+0x191/0x230 [ 151.673784][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 151.673875][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.673909][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 151.673943][ T5828] f2fs_sync_dirty_inodes+0x31f/0x830 [ 151.674006][ T5828] f2fs_write_checkpoint+0x94a/0x1de0 [ 151.674073][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 151.674169][ T5828] ? kill_f2fs_super+0x298/0x6c0 [ 151.674208][ T5828] kill_f2fs_super+0x2c3/0x6c0 [ 151.674249][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 151.674277][ T5828] ? radix_tree_delete_item+0x2b6/0x400 [ 151.674313][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.674340][ T5828] ? shrinker_free+0x2ce/0x3e0 [ 151.674369][ T5828] deactivate_locked_super+0xbc/0x130 [ 151.674397][ T5828] cleanup_mnt+0x425/0x4c0 [ 151.674434][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.674460][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.674491][ T5828] task_work_run+0x1d4/0x260 [ 151.674527][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 151.674560][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.674602][ T5828] resume_user_mode_work+0x5e/0x80 [ 151.674639][ T5828] syscall_exit_to_user_mode+0x9a/0x120 [ 151.674669][ T5828] do_syscall_64+0x103/0x210 [ 151.674699][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.674726][ T5828] ? exc_page_fault+0x91/0x110 [ 151.674756][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.674779][ T5828] RIP: 0033:0x7fe31678fc97 [ 151.674801][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 151.674821][ T5828] RSP: 002b:00007ffcf2c81fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 151.674846][ T5828] RAX: 0000000000000000 RBX: 00007fe31681089d RCX: 00007fe31678fc97 [ 151.674863][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf2c82070 [ 151.674878][ T5828] RBP: 00007ffcf2c82070 R08: 0000000000000000 R09: 0000000000000000 [ 151.674894][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf2c83100 [ 151.674910][ T5828] R13: 00007fe31681089d R14: 0000000000024fc9 R15: 00007ffcf2c83140 [ 151.674953][ T5828] [ 152.053628][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 152.103605][ T5828] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 152.123959][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 152.123994][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 152.124009][ T5828] Call Trace: [ 152.124018][ T5828] [ 152.124032][ T5828] dump_stack_lvl+0x189/0x250 [ 152.124077][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.124114][ T5828] ? __pfx_queue_work_on+0x10/0x10 [ 152.124136][ T5828] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 152.124162][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 152.124189][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.124227][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 152.124267][ T5828] f2fs_write_end_io+0x4e2/0x6d0 [ 152.124316][ T5828] __submit_merged_bio+0x27a/0x6a0 [ 152.124349][ T5828] __submit_merged_write_cond+0x255/0x530 [ 152.124398][ T5828] f2fs_write_data_pages+0x2854/0x31f0 [ 152.124427][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.124494][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 152.124575][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.124603][ T5828] ? __mod_node_page_state+0xf4/0x170 [ 152.124643][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.124671][ T5828] ? lru_gen_update_size+0x7bd/0xd20 [ 152.124713][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.124740][ T5828] ? __lock_acquire+0xaac/0xd20 [ 152.124784][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.124826][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.124853][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 152.124883][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 152.124913][ T5828] do_writepages+0x3b1/0x7b0 [ 152.124964][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.124991][ T5828] ? do_raw_spin_lock+0x121/0x290 [ 152.125018][ T5828] ? __pfx_do_writepages+0x10/0x10 [ 152.125054][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.125087][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.125115][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 152.125148][ T5828] filemap_fdatawrite+0x191/0x230 [ 152.125183][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 152.125269][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.125303][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 152.125337][ T5828] f2fs_sync_dirty_inodes+0x31f/0x830 [ 152.125386][ T5828] f2fs_write_checkpoint+0x94a/0x1de0 [ 152.125445][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 152.125531][ T5828] ? kill_f2fs_super+0x298/0x6c0 [ 152.125569][ T5828] kill_f2fs_super+0x2c3/0x6c0 [ 152.125608][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 152.125636][ T5828] ? radix_tree_delete_item+0x2b6/0x400 [ 152.125670][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.125698][ T5828] ? shrinker_free+0x2ce/0x3e0 [ 152.125727][ T5828] deactivate_locked_super+0xbc/0x130 [ 152.125753][ T5828] cleanup_mnt+0x425/0x4c0 [ 152.125791][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.125819][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.125849][ T5828] task_work_run+0x1d4/0x260 [ 152.125885][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 152.125918][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.125957][ T5828] resume_user_mode_work+0x5e/0x80 [ 152.125993][ T5828] syscall_exit_to_user_mode+0x9a/0x120 [ 152.126023][ T5828] do_syscall_64+0x103/0x210 [ 152.126053][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.126080][ T5828] ? exc_page_fault+0x91/0x110 [ 152.126109][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.126133][ T5828] RIP: 0033:0x7fe31678fc97 [ 152.126154][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 152.126175][ T5828] RSP: 002b:00007ffcf2c81fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 152.126200][ T5828] RAX: 0000000000000000 RBX: 00007fe31681089d RCX: 00007fe31678fc97 [ 152.126217][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf2c82070 [ 152.126232][ T5828] RBP: 00007ffcf2c82070 R08: 0000000000000000 R09: 0000000000000000 [ 152.126248][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf2c83100 [ 152.126270][ T5828] R13: 00007fe31681089d R14: 0000000000024fc9 R15: 00007ffcf2c83140 [ 152.126309][ T5828] [ 152.126344][ T5828] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 152.943159][ T7678] loop4: detected capacity change from 0 to 1024 [ 153.025349][ T7678] hfsplus: xattr search failed [ 153.093562][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.278511][ T57] video4linux radio48: keene_cmd_set failed (-71) [ 153.285466][ T57] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 153.299370][ T57] usb 7-1: USB disconnect, device number 2 [ 153.347053][ T7685] loop3: detected capacity change from 0 to 1024 [ 153.381568][ T7685] EXT4-fs: Ignoring removed nobh option [ 153.392961][ T7689] batadv_slave_1: entered promiscuous mode [ 153.396358][ T7685] EXT4-fs: Ignoring removed bh option [ 153.412536][ T7688] batadv_slave_1: left promiscuous mode [ 153.449586][ T7685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.510388][ T7685] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 153.562252][ T5832] kernel read not supported for file /dsp (pid: 5832 comm: kworker/0:4) [ 153.617731][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.734237][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.905574][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.924303][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.947185][ T24] usb 3-1: config 0 descriptor?? [ 153.979208][ T24] cp210x 3-1:0.0: cp210x converter detected [ 154.073875][ T5832] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 154.082026][ T7700] loop4: detected capacity change from 0 to 32768 [ 154.124493][ T7700] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 154.133567][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.157289][ T7700] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 154.199839][ T30] audit: type=1800 audit(1746206835.511:156): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.612" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 154.255804][ T5832] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.264546][ T5832] usb 2-1: not running at top speed; connect to a high speed hub [ 154.275317][ T5832] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 154.287496][ T5832] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 154.303020][ T5832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.329494][ T5832] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.343314][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.361725][ T5832] usb 2-1: Product: syz [ 154.369356][ T5832] usb 2-1: Manufacturer: syz [ 154.379927][ T5832] usb 2-1: SerialNumber: syz [ 154.448188][ T24] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 154.509151][ T24] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 154.533250][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 154.618461][ T5821] ocfs2: Unmounting device (7,4) on (node local) [ 154.630371][ T5832] usb 2-1: 0:2 : does not exist [ 154.709208][ T5832] usb 2-1: USB disconnect, device number 4 [ 154.712298][ T969] usb 3-1: USB disconnect, device number 6 [ 154.752942][ T969] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 154.792203][ T969] cp210x 3-1:0.0: device disconnected [ 154.880056][ T7711] loop3: detected capacity change from 0 to 32768 [ 154.954621][ T7711] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 155.154063][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 155.178283][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.309038][ T7743] loop0: detected capacity change from 0 to 64 [ 155.613587][ T5888] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 155.822596][ T5888] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 155.842394][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.876007][ T5888] usb 7-1: config 0 descriptor?? [ 155.909371][ T5888] cp210x 7-1:0.0: cp210x converter detected [ 156.213549][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.283698][ T7767] loop2: detected capacity change from 0 to 32768 [ 156.304518][ T7761] XFS (nullb0): Invalid superblock magic number [ 156.428915][ T7767] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io [ 156.428915][ T7767] allowing incompatible features above 0.0: (unknown version) [ 156.467250][ T7767] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 156.478016][ T7767] bcachefs (loop2): Version upgrade required: [ 156.478016][ T7767] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 156.478016][ T7767] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags [ 156.478016][ T7767] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 156.551478][ T5888] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 156.574643][ T7767] bcachefs (loop2): bcachefs (loop2): error validating btree node at btree alloc level 0/0 [ 156.574669][ T7767] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 156.574689][ T7767] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 156.617581][ T7767] bcachefs (loop2): btree_node_read_work: rewriting btree node at due to error [ 156.617581][ T7767] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 156.644995][ T7767] bcachefs (loop2): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 156.658613][ T7767] bcachefs (loop2): bcachefs (loop2): error validating btree node on loop2 at btree lru level 0/0 [ 156.658637][ T7767] u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190847 len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 156.658659][ T7767] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 156.695289][ T7767] bcachefs (loop2): flagging btree lru lost data [ 156.705705][ T7767] bcachefs (loop2): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 156.709363][ T7783] loop1: detected capacity change from 0 to 1024 [ 156.720083][ T7767] bcachefs (loop2): check_topology... done [ 156.730407][ T7767] bcachefs (loop2): accounting_read... done [ 156.740675][ T7767] bcachefs (loop2): alloc_read... done [ 156.746444][ T7767] bcachefs (loop2): snapshots_read... done [ 156.753940][ T7767] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 156.763762][ T7767] bcachefs (loop2): done starting filesystem [ 156.836437][ T7783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.850322][ T5888] usb 7-1: cp210x converter now attached to ttyUSB0 [ 156.859394][ T5828] bcachefs (loop2): shutting down [ 156.945666][ T57] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 156.969090][ T5828] bcachefs (loop2): shutdown complete [ 157.040495][ T5888] usb 7-1: USB disconnect, device number 3 [ 157.064239][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 157.090357][ T5888] cp210x 7-1:0.0: device disconnected [ 157.132060][ T57] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 157.155052][ T57] usb 5-1: config 150 has no interface number 0 [ 157.157142][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.178810][ T57] usb 5-1: config 150 interface 204 has no altsetting 0 [ 157.193774][ T57] usb 5-1: config 150 interface 1 has no altsetting 0 [ 157.207790][ T57] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 157.227336][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.243717][ T57] usb 5-1: Product: syz [ 157.253551][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.264316][ T57] usb 5-1: Manufacturer: syz [ 157.273747][ T57] usb 5-1: SerialNumber: syz [ 157.494293][ T57] xr_serial 5-1:150.204: xr_serial converter detected [ 157.603661][ T969] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.803732][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 157.821692][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.864684][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.885819][ T969] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 157.898390][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.911670][ T969] usb 1-1: config 0 descriptor?? [ 158.090219][ T7807] loop1: detected capacity change from 0 to 32768 [ 158.097652][ T7807] XFS: ikeep mount option is deprecated. [ 158.143324][ T7807] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.212174][ T7807] XFS (loop1): Ending clean mount [ 158.255916][ T7807] XFS (loop1): Quotacheck needed: Please wait. [ 158.293533][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 158.301611][ T57] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 158.309852][ T57] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 158.311350][ T7807] XFS (loop1): Quotacheck: Done. [ 158.327481][ T57] usb 5-1: USB disconnect, device number 4 [ 158.336774][ T969] gt683r_led 0003:1770:FF00.0007: collection stack underflow [ 158.346446][ T57] xr_serial 5-1:150.204: device disconnected [ 158.352564][ T969] gt683r_led 0003:1770:FF00.0007: item 0 1 0 12 parsing failed [ 158.367715][ T969] gt683r_led 0003:1770:FF00.0007: hid parsing failed [ 158.378301][ T969] gt683r_led 0003:1770:FF00.0007: probe with driver gt683r_led failed with error -22 [ 158.448424][ T5824] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.539206][ T5888] usb 1-1: USB disconnect, device number 4 [ 158.583438][ T7812] block nbd3: shutting down sockets [ 158.792584][ T7824] loop3: detected capacity change from 0 to 1024 [ 158.959606][ T7824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.996892][ T7825] loop6: detected capacity change from 0 to 32768 [ 159.058291][ T7825] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.218195][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.231558][ T7825] XFS (loop6): Ending clean mount [ 159.272212][ T7825] XFS (loop6): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 159.284097][ T7825] XFS (loop6): Unmount and run xfs_repair [ 159.289829][ T7825] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 159.302183][ T7825] 00000000: 58 41 46 4c 00 00 00 00 bf dc 47 fc 10 d8 4e ed XAFL......G...N. [ 159.312736][ T7825] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 159.321760][ T7825] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 07 00 00 08 .;.............. [ 159.330703][ T7825] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 159.339648][ T7825] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.342148][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.348869][ T7825] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.365806][ T7825] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.374696][ T7825] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 159.383940][ T7825] XFS (loop6): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 159.395213][ T7825] XFS (loop6): page discard on page ffffea000156a280, inode 0x2449, pos 0. [ 159.443110][ T6630] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.492647][ T6630] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 159.842370][ T7866] tipc: Started in network mode [ 159.874259][ T7866] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 159.895143][ T7866] tipc: Enabled bearer , priority 27 [ 159.903084][ T7866] netlink: 'syz.2.667': attribute type 10 has an invalid length. [ 159.911301][ T7868] veth0_to_bridge: entered promiscuous mode [ 159.920141][ T7867] veth0_to_bridge: left promiscuous mode [ 159.946218][ T7866] tipc: Resetting bearer [ 159.993558][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.022995][ T7866] tipc: Resetting bearer [ 160.049206][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.078658][ T7866] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 160.170825][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.218902][ T7879] loop6: detected capacity change from 0 to 1024 [ 160.225513][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.239822][ T7879] EXT4-fs: Ignoring removed orlov option [ 160.254772][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.269787][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.292651][ T7864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.325129][ T7879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.346290][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.373551][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.418306][ T30] audit: type=1804 audit(1746206841.731:157): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.672" name="/newroot/60/file1/bus" dev="loop6" ino=18 res=1 errno=0 [ 160.495259][ T6630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.578831][ T9] usb 1-1: USB disconnect, device number 5 [ 160.713690][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 160.895094][ T5832] tipc: Node number set to 8432298 [ 161.413548][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.500235][ T30] audit: type=1326 audit(1746206842.791:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.6.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7fc00000 [ 161.609440][ T30] audit: type=1326 audit(1746206842.791:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.6.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f536c78d41f code=0x7fc00000 [ 161.693659][ T30] audit: type=1326 audit(1746206842.791:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.6.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7fc00000 [ 161.773612][ T30] audit: type=1326 audit(1746206842.791:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.6.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7fc00000 [ 161.796782][ T30] audit: type=1326 audit(1746206842.791:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.6.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7fc00000 [ 161.819445][ T30] audit: type=1326 audit(1746206842.791:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.6.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7fc00000 [ 161.842000][ T30] audit: type=1326 audit(1746206842.791:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.6.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7fc00000 [ 161.904638][ T30] audit: type=1326 audit(1746206842.791:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.6.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7fc00000 [ 161.955119][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 161.959371][ T30] audit: type=1326 audit(1746206842.791:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.6.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7fc00000 [ 162.432771][ T7967] loop2: detected capacity change from 0 to 1024 [ 162.453542][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.603586][ T57] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.699724][ T6100] hfsplus: b-tree write err: -5, ino 3 [ 162.732802][ T5828] hfsplus: node 4:3 still has 1 user(s)! [ 162.778264][ T57] usb 2-1: Using ep0 maxpacket: 32 [ 162.786094][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.817813][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.851077][ T57] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 162.886797][ T7970] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.891288][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.922547][ T7974] loop2: detected capacity change from 0 to 1024 [ 162.944938][ T7974] EXT4-fs: inline encryption not supported [ 162.950825][ T7974] EXT4-fs: Ignoring removed i_version option [ 162.968917][ T57] usb 2-1: config 0 descriptor?? [ 162.992257][ T7974] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.051816][ T7974] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.709: lblock 2 mapped to illegal pblock 2 (length 1) [ 163.074509][ T7974] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.709: lblock 0 mapped to illegal pblock 48 (length 1) [ 163.104306][ T7974] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.709: Failed to acquire dquot type 0 [ 163.142458][ T7974] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 163.157092][ T7959] loop3: detected capacity change from 0 to 40427 [ 163.209335][ T7974] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.709: mark_inode_dirty error [ 163.225941][ T7970] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.244584][ T7959] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3fffff [ 163.284576][ T7974] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 163.304368][ T7974] EXT4-fs (loop2): 1 orphan inode deleted [ 163.324386][ T7959] F2FS-fs (loop3): invalid crc value [ 163.325886][ T36] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 163.356075][ T7974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.389860][ T36] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0 [ 163.454940][ T7974] EXT4-fs (loop2): shut down requested (1) [ 163.486943][ T57] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 163.498892][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.511964][ T7970] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.576860][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.759460][ T7959] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.797680][ T5832] usb 2-1: USB disconnect, device number 5 [ 163.968426][ T7970] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.287372][ T7970] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.349814][ T7970] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.418551][ T7970] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.504526][ T7970] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.533566][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 164.621976][ T7994] loop6: detected capacity change from 0 to 32768 [ 164.778241][ T7994] JBD2: Ignoring recovery information on journal [ 164.939133][ T7994] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 165.098695][ T8014] loop3: detected capacity change from 0 to 2048 [ 165.109501][ T7998] loop4: detected capacity change from 0 to 32768 [ 165.158570][ T8014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.184099][ T7998] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.244001][ T6630] ocfs2: Unmounting device (7,6) on (node local) [ 165.288285][ T7998] XFS (loop4): Ending clean mount [ 165.573539][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 165.656426][ T5821] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.676977][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 166.527996][ T8046] loop2: detected capacity change from 0 to 256 [ 166.613535][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.720432][ T8046] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 166.991032][ T8046] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 167.055982][ T8046] exFAT-fs (loop2): Filesystem has been set read-only [ 167.071207][ T8039] loop0: detected capacity change from 0 to 131072 [ 167.091095][ T8039] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 167.100669][ T8039] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 167.146475][ T8039] F2FS-fs (loop0): invalid crc value [ 167.253988][ T8039] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 167.263630][ T8039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 167.653545][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.933573][ T5888] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 168.131310][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.163251][ T5888] usb 5-1: not running at top speed; connect to a high speed hub [ 168.176525][ T5888] usb 5-1: config 6 has an invalid interface number: 30 but max is 1 [ 168.205952][ T5888] usb 5-1: config 6 has an invalid interface number: 23 but max is 1 [ 168.214638][ T5888] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 168.261416][ T5888] usb 5-1: config 6 has no interface number 0 [ 168.273800][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 168.279666][ T8103] loop2: detected capacity change from 0 to 256 [ 168.292781][ T5888] usb 5-1: config 6 has no interface number 1 [ 168.299297][ T5888] usb 5-1: config 6 interface 23 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 168.348104][ T5888] usb 5-1: config 6 interface 30 has no altsetting 0 [ 168.380231][ T8103] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.383640][ T5888] usb 5-1: config 6 interface 23 has no altsetting 0 [ 168.456060][ T5888] usb 5-1: New USB device found, idVendor=0fce, idProduct=e030, bcdDevice= 0.00 [ 168.474990][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.484675][ T8101] team0: Port device team_slave_1 removed [ 168.512237][ T5888] usb 5-1: Product: syz [ 168.523574][ T5888] usb 5-1: Manufacturer: syz [ 168.543992][ T5888] usb 5-1: SerialNumber: syz [ 168.582583][ T5888] usb-storage 5-1:6.30: USB Mass Storage device detected [ 168.632237][ T5888] usb-storage 5-1:6.30: Quirks match for vid 0fce pid e030: 30 [ 168.690074][ T8111] loop2: detected capacity change from 0 to 1024 [ 168.696530][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.754428][ T5888] usb-storage 5-1:6.23: USB Mass Storage device detected [ 168.778753][ T8111] EXT4-fs: Invalid commit interval 67108869, must be smaller than 21474836 [ 168.800833][ T5888] usb-storage 5-1:6.23: Quirks match for vid 0fce pid e030: 30 [ 168.894916][ T5888] usb 5-1: USB disconnect, device number 5 [ 169.733543][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.781530][ T8117] loop1: detected capacity change from 0 to 40427 [ 169.814286][ T8117] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 169.841327][ T8117] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 170.024805][ T8152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.053379][ T8152] batadv_slave_1: entered promiscuous mode [ 170.130230][ T8117] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 170.156654][ T8117] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 170.278874][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.6.777'. [ 170.319505][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.6.777'. [ 170.581278][ T8172] netlink: 48 bytes leftover after parsing attributes in process `syz.0.783'. [ 170.773641][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.815777][ T8141] loop4: detected capacity change from 0 to 40427 [ 170.867267][ T8141] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3fffff [ 170.921399][ T8180] loop0: detected capacity change from 0 to 1024 [ 170.939820][ T8141] F2FS-fs (loop4): invalid crc value [ 171.001342][ T8180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.270891][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.297625][ T8141] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 171.537861][ T5821] syz-executor: attempt to access beyond end of device [ 171.537861][ T5821] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 171.607324][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 171.607359][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.607374][ T5821] Call Trace: [ 171.607383][ T5821] [ 171.607394][ T5821] dump_stack_lvl+0x189/0x250 [ 171.607441][ T5821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.607478][ T5821] ? __pfx_queue_work_on+0x10/0x10 [ 171.607501][ T5821] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 171.607527][ T5821] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 171.607555][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.607595][ T5821] f2fs_handle_critical_error+0x37c/0x540 [ 171.607633][ T5821] f2fs_write_end_io+0x4e2/0x6d0 [ 171.607686][ T5821] __submit_merged_bio+0x27a/0x6a0 [ 171.607722][ T5821] __submit_merged_write_cond+0x255/0x530 [ 171.607774][ T5821] f2fs_write_data_pages+0x2854/0x31f0 [ 171.607802][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.607879][ T5821] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 171.607971][ T5821] ? unwind_get_return_address+0x4d/0x90 [ 171.608002][ T5821] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 171.608033][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.608060][ T5821] ? arch_stack_walk+0xfc/0x150 [ 171.608122][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.608149][ T5821] ? __lock_acquire+0xaac/0xd20 [ 171.608193][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.608235][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.608266][ T5821] ? do_raw_spin_unlock+0x122/0x240 [ 171.608297][ T5821] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 171.608328][ T5821] do_writepages+0x3b1/0x7b0 [ 171.608383][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.608412][ T5821] ? do_raw_spin_lock+0x121/0x290 [ 171.608440][ T5821] ? __pfx_do_writepages+0x10/0x10 [ 171.608476][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.608509][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.608535][ T5821] ? do_raw_spin_unlock+0x122/0x240 [ 171.608571][ T5821] filemap_fdatawrite+0x191/0x230 [ 171.608604][ T5821] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 171.608694][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.608729][ T5821] ? do_raw_spin_unlock+0x122/0x240 [ 171.608765][ T5821] f2fs_sync_dirty_inodes+0x31f/0x830 [ 171.608818][ T5821] f2fs_write_checkpoint+0x94a/0x1de0 [ 171.608884][ T5821] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 171.608974][ T5821] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 171.609004][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.609040][ T5821] ? kfree+0x193/0x440 [ 171.609071][ T5821] ? kill_f2fs_super+0x298/0x6c0 [ 171.609110][ T5821] kill_f2fs_super+0x2c3/0x6c0 [ 171.609150][ T5821] ? __pfx_kill_f2fs_super+0x10/0x10 [ 171.609178][ T5821] ? radix_tree_delete_item+0x2b6/0x400 [ 171.609215][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.609242][ T5821] ? shrinker_free+0x2ce/0x3e0 [ 171.609271][ T5821] deactivate_locked_super+0xbc/0x130 [ 171.609299][ T5821] cleanup_mnt+0x425/0x4c0 [ 171.609336][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.609363][ T5821] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.609395][ T5821] task_work_run+0x1d4/0x260 [ 171.609432][ T5821] ? __pfx_task_work_run+0x10/0x10 [ 171.609465][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.609508][ T5821] resume_user_mode_work+0x5e/0x80 [ 171.609542][ T5821] syscall_exit_to_user_mode+0x9a/0x120 [ 171.609573][ T5821] do_syscall_64+0x103/0x210 [ 171.609603][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.609630][ T5821] ? exc_page_fault+0x91/0x110 [ 171.609660][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.609684][ T5821] RIP: 0033:0x7f0b9898fc97 [ 171.609706][ T5821] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 171.609727][ T5821] RSP: 002b:00007ffda47fe628 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 171.609751][ T5821] RAX: 0000000000000000 RBX: 00007f0b98a1089d RCX: 00007f0b9898fc97 [ 171.609768][ T5821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda47fe6e0 [ 171.609784][ T5821] RBP: 00007ffda47fe6e0 R08: 0000000000000000 R09: 0000000000000000 [ 171.609799][ T5821] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda47ff770 [ 171.609815][ T5821] R13: 00007f0b98a1089d R14: 0000000000029d88 R15: 00007ffda47ff7b0 [ 171.609857][ T5821] [ 171.609867][ T5821] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 171.772244][ T8208] sctp: [Deprecated]: syz.1.782 (pid 8208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.772244][ T8208] Use struct sctp_sack_info instead [ 171.813582][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.017216][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 172.017249][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 172.017264][ T5821] Call Trace: [ 172.017274][ T5821] [ 172.017284][ T5821] dump_stack_lvl+0x189/0x250 [ 172.017330][ T5821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.017366][ T5821] ? __pfx_queue_work_on+0x10/0x10 [ 172.017389][ T5821] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 172.017415][ T5821] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 172.017443][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.017483][ T5821] f2fs_handle_critical_error+0x37c/0x540 [ 172.017520][ T5821] f2fs_write_end_io+0x4e2/0x6d0 [ 172.017573][ T5821] __submit_merged_bio+0x27a/0x6a0 [ 172.017608][ T5821] __submit_merged_write_cond+0x255/0x530 [ 172.017659][ T5821] f2fs_write_data_pages+0x2854/0x31f0 [ 172.017687][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.017764][ T5821] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 172.017856][ T5821] ? unwind_get_return_address+0x4d/0x90 [ 172.017885][ T5821] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 172.017911][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.017938][ T5821] ? arch_stack_walk+0xfc/0x150 [ 172.018001][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.018033][ T5821] ? __lock_acquire+0xaac/0xd20 [ 172.018079][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.018124][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.018151][ T5821] ? do_raw_spin_unlock+0x122/0x240 [ 172.018181][ T5821] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 172.018212][ T5821] do_writepages+0x3b1/0x7b0 [ 172.018269][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.018296][ T5821] ? do_raw_spin_lock+0x121/0x290 [ 172.018324][ T5821] ? __pfx_do_writepages+0x10/0x10 [ 172.018361][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.018394][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.018421][ T5821] ? do_raw_spin_unlock+0x122/0x240 [ 172.018457][ T5821] filemap_fdatawrite+0x191/0x230 [ 172.018491][ T5821] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 172.018584][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.018618][ T5821] ? do_raw_spin_unlock+0x122/0x240 [ 172.018654][ T5821] f2fs_sync_dirty_inodes+0x31f/0x830 [ 172.018708][ T5821] f2fs_write_checkpoint+0x94a/0x1de0 [ 172.018774][ T5821] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 172.018866][ T5821] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 172.018895][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.018922][ T5821] ? kfree+0x193/0x440 [ 172.018953][ T5821] ? kill_f2fs_super+0x298/0x6c0 [ 172.018992][ T5821] kill_f2fs_super+0x2c3/0x6c0 [ 172.019038][ T5821] ? __pfx_kill_f2fs_super+0x10/0x10 [ 172.019065][ T5821] ? radix_tree_delete_item+0x2b6/0x400 [ 172.019102][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.019129][ T5821] ? shrinker_free+0x2ce/0x3e0 [ 172.019159][ T5821] deactivate_locked_super+0xbc/0x130 [ 172.019187][ T5821] cleanup_mnt+0x425/0x4c0 [ 172.019225][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.019252][ T5821] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.019284][ T5821] task_work_run+0x1d4/0x260 [ 172.019321][ T5821] ? __pfx_task_work_run+0x10/0x10 [ 172.019354][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.019396][ T5821] resume_user_mode_work+0x5e/0x80 [ 172.019431][ T5821] syscall_exit_to_user_mode+0x9a/0x120 [ 172.019461][ T5821] do_syscall_64+0x103/0x210 [ 172.019491][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 172.019518][ T5821] ? exc_page_fault+0x91/0x110 [ 172.019548][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.019572][ T5821] RIP: 0033:0x7f0b9898fc97 [ 172.019593][ T5821] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 172.019614][ T5821] RSP: 002b:00007ffda47fe628 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 172.019639][ T5821] RAX: 0000000000000000 RBX: 00007f0b98a1089d RCX: 00007f0b9898fc97 [ 172.019655][ T5821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda47fe6e0 [ 172.019670][ T5821] RBP: 00007ffda47fe6e0 R08: 0000000000000000 R09: 0000000000000000 [ 172.019685][ T5821] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda47ff770 [ 172.019701][ T5821] R13: 00007f0b98a1089d R14: 0000000000029d88 R15: 00007ffda47ff7b0 [ 172.019745][ T5821] [ 172.019754][ T5821] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 172.324346][ T8208] sctp: [Deprecated]: syz.1.782 (pid 8208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.324346][ T8208] Use struct sctp_sack_info instead [ 172.756749][ T8224] loop0: detected capacity change from 0 to 128 [ 172.853531][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.910585][ T8229] loop1: detected capacity change from 0 to 1024 [ 173.026082][ T8229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.061990][ T8235] netlink: 'syz.3.810': attribute type 3 has an invalid length. [ 173.070417][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 173.423767][ T5888] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.486962][ T8251] loop4: detected capacity change from 0 to 4096 [ 173.573973][ T8251] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 173.616450][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.637791][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.665299][ T5888] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.683380][ T8251] ntfs3(loop4): ino=b, mi_enum_attr [ 173.690056][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.711465][ T8251] ntfs3(loop4): Failed to load $Extend (-22). [ 173.720004][ T8256] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.728878][ T5888] usb 1-1: SerialNumber: syz [ 173.743890][ T8251] ntfs3(loop4): Failed to initialize $Extend. [ 173.814257][ T8257] loop3: detected capacity change from 0 to 4096 [ 173.830662][ T8259] loop2: detected capacity change from 0 to 512 [ 173.885675][ T8259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 173.898321][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.934694][ T8259] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.991276][ T5888] usb 1-1: 0:2 : does not exist [ 174.002450][ T8243] loop1: detected capacity change from 0 to 32768 [ 174.048065][ T8256] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.090361][ T8243] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 174.107399][ T5888] usb 1-1: USB disconnect, device number 6 [ 174.150302][ T8243] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 174.203083][ T8267] program syz.4.820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.244292][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 174.268969][ T8256] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.353350][ T5824] ocfs2: Unmounting device (7,1) on (node local) [ 174.395893][ T8269] loop3: detected capacity change from 0 to 256 [ 174.471831][ T8271] input: syz1 as /devices/virtual/input/input8 [ 174.485591][ T8269] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 174.518630][ T8256] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.620722][ T8269] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 174.719537][ T8256] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.770618][ T8256] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.797639][ T8256] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.842339][ T8256] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.933531][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.179189][ T8293] loop1: detected capacity change from 0 to 2048 [ 175.230474][ T8292] loop2: detected capacity change from 0 to 4096 [ 175.258999][ T8293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.297910][ T8303] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.323604][ T8293] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.332159][ T8302] loop0: detected capacity change from 0 to 512 [ 175.351401][ T8290] syz.2.833: attempt to access beyond end of device [ 175.351401][ T8290] loop2: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 175.351491][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 175.351506][ T30] audit: type=1800 audit(1746206856.652:188): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.833" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 175.452548][ T8302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 175.527455][ T8302] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.552335][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.562885][ T8273] loop4: detected capacity change from 0 to 32768 [ 175.574599][ T8273] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.825 (8273) [ 175.591937][ T8309] loop3: detected capacity change from 0 to 2048 [ 175.631724][ T8273] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.658118][ T8273] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 175.675040][ T8273] BTRFS info (device loop4): disk space caching is enabled [ 175.687005][ T8309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.707538][ T8273] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 175.819790][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 175.857896][ T8333] vivid-000: disconnect [ 175.876721][ T8316] vivid-000: reconnect [ 175.973536][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 176.017386][ T30] audit: type=1326 audit(1746206857.292:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.6.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7ffc0000 [ 176.062049][ T8273] BTRFS info (device loop4): rebuilding free space tree [ 176.120187][ T30] audit: type=1326 audit(1746206857.292:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.6.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f536c78e969 code=0x7ffc0000 [ 176.150360][ T8273] BTRFS info (device loop4): disabling free space tree [ 176.172642][ T8273] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.216078][ T8273] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.434998][ T30] audit: type=1326 audit(1746206857.742:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.6.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7ffc0000 [ 176.540757][ T30] audit: type=1326 audit(1746206857.792:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.6.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536c78e969 code=0x7ffc0000 [ 176.667165][ T5821] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.797954][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.862405][ T8329] loop2: detected capacity change from 0 to 131072 [ 176.883584][ T8329] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 176.891706][ T8329] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 176.950516][ T8329] F2FS-fs (loop2): invalid crc value [ 177.013569][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.102976][ T8329] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 177.110141][ T8329] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 177.138390][ T8352] loop1: detected capacity change from 0 to 512 [ 177.170560][ T8352] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 177.172358][ T30] audit: type=1800 audit(1746206858.472:193): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.840" name="file2" dev="loop2" ino=8 res=0 errno=0 [ 177.276009][ T8352] EXT4-fs (loop1): 1 truncate cleaned up [ 177.287391][ T8352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.474203][ T8355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.550552][ T8355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.609488][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.762420][ T8372] loop0: detected capacity change from 0 to 512 [ 177.806469][ T8372] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 177.893393][ T8372] EXT4-fs (loop0): 1 truncate cleaned up [ 177.932732][ T8355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.954321][ T8372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.004884][ T8355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.053652][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 178.145169][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.218685][ T8355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.253914][ T8355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.292794][ T8363] loop4: detected capacity change from 0 to 40427 [ 178.307269][ T8363] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 178.316173][ T8363] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 178.456561][ T8355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.493672][ T8355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.587396][ T8363] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 178.614164][ T8363] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 178.753274][ T8355] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.767141][ T8395] netlink: 28 bytes leftover after parsing attributes in process `syz.6.866'. [ 178.782704][ T8355] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.803574][ T8395] netlink: 'syz.6.866': attribute type 7 has an invalid length. [ 178.816607][ T8395] netlink: 'syz.6.866': attribute type 8 has an invalid length. [ 178.860673][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.866'. [ 178.862701][ T8355] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.888236][ T8355] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.984733][ T8355] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.992985][ T8355] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.093624][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 179.098457][ T8355] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.139481][ T8355] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.585689][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.876'. [ 179.661239][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.876'. [ 179.875293][ T8399] loop0: detected capacity change from 0 to 32768 [ 179.925655][ T8399] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 180.088408][ T8399] XFS (loop0): Starting recovery (logdev: internal) [ 180.133633][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.168503][ T8399] XFS (loop0): Ending recovery (logdev: internal) [ 180.315150][ T5820] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 180.640566][ T972] kernel read not supported for file /dsp (pid: 972 comm: kworker/0:2) [ 180.793997][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 180.933831][ T57] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.972973][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.003489][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.013273][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 181.026838][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.039236][ T9] usb 7-1: config 0 descriptor?? [ 181.095706][ T57] usb 1-1: config 0 interface 0 has no altsetting 0 [ 181.102568][ T57] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 181.111816][ T57] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.124173][ T57] usb 1-1: config 0 descriptor?? [ 181.173550][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 181.468734][ T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 181.489547][ T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 181.502106][ T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 181.511413][ T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 181.522342][ T9] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 181.541913][ T9] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 181.765646][ T8498] loop4: detected capacity change from 0 to 512 [ 181.778749][ T8498] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.828454][ T8498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.853031][ T8498] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.039951][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.084247][ T9] lenovo 0003:17EF:6047.0009: Fn-lock setting failed: -71 [ 182.123648][ T9] lenovo 0003:17EF:6047.0009: Sensitivity setting failed: -71 [ 182.134538][ T9] usb 7-1: USB disconnect, device number 4 [ 182.187707][ T57] video4linux radio48: keene_cmd_set failed (-71) [ 182.203226][ T57] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 182.223343][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.244644][ T57] usb 1-1: USB disconnect, device number 7 [ 182.495394][ T8506] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.664205][ T8506] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.932291][ T8506] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.015406][ T8510] loop6: detected capacity change from 0 to 32768 [ 183.133167][ T8510] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,journal_flush_delay=1001,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,no_data_io [ 183.133167][ T8510] allowing incompatible features above 0.0: (unknown version) [ 183.165937][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.173078][ T8510] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 183.181888][ T8510] bcachefs (loop6): Version upgrade required: [ 183.181888][ T8510] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 183.181888][ T8510] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags [ 183.181888][ T8510] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 183.251636][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.253591][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.266403][ T8510] bcachefs (loop6): bcachefs (loop6): error validating btree node at btree alloc level 0/0 [ 183.266424][ T8510] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 183.266445][ T8510] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 183.308737][ T8510] bcachefs (loop6): btree_node_read_work: rewriting btree node at due to error [ 183.308737][ T8510] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 183.332803][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.344269][ T8510] bcachefs (loop6): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 183.355918][ T8510] bcachefs (loop6): bcachefs (loop6): error validating btree node on loop6 at btree lru level 0/0 [ 183.355940][ T8510] u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190847 len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 183.355962][ T8510] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 183.392998][ T8510] bcachefs (loop6): flagging btree lru lost data [ 183.399999][ T8510] bcachefs (loop6): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 183.414379][ T8510] bcachefs (loop6): check_topology... done [ 183.417303][ T8506] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.420704][ T8510] bcachefs (loop6): accounting_read... done [ 183.447927][ T8510] bcachefs (loop6): alloc_read... done [ 183.453672][ T8510] bcachefs (loop6): snapshots_read... done [ 183.459648][ T8510] bcachefs (loop6): Fixed errors, running fsck a second time to verify fs is clean [ 183.469454][ T8510] bcachefs (loop6): done starting filesystem [ 183.581901][ T6630] bcachefs (loop6): shutting down [ 183.740113][ T8508] loop1: detected capacity change from 0 to 32768 [ 183.751276][ T8506] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.780266][ T8506] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.797815][ T6630] bcachefs (loop6): shutdown complete [ 183.820736][ T8506] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.835334][ T8508] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 183.976492][ T8506] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.083162][ T5824] ocfs2: Unmounting device (7,1) on (node local) [ 184.218344][ T8547] loop4: detected capacity change from 0 to 128 [ 184.251348][ T8530] loop2: detected capacity change from 0 to 40427 [ 184.261285][ T30] audit: type=1800 audit(1746206865.562:194): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.919" name="file0" dev="loop4" ino=1048628 res=0 errno=0 [ 184.291627][ T8530] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 184.293546][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.323711][ T8530] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 184.343658][ T57] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 184.530692][ T57] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.559209][ T57] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.589507][ T57] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.609227][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.617677][ T8530] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 184.637824][ T8544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.639081][ T8530] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.657230][ T57] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.776242][ T8548] loop0: detected capacity change from 0 to 32768 [ 184.787107][ T8548] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.920 (8548) [ 184.843750][ T8548] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 184.855605][ T8548] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 184.865289][ T8548] BTRFS info (device loop0): using free-space-tree [ 184.901039][ T57] usb 4-1: USB disconnect, device number 6 [ 185.048686][ T8578] loop4: detected capacity change from 0 to 512 [ 185.056565][ T8578] EXT4-fs: Ignoring removed orlov option [ 185.072349][ T8578] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 185.119906][ T8578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 185.137286][ T8578] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.927: corrupted in-inode xattr: e_value size too large [ 185.157812][ T8578] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.927: couldn't read orphan inode 15 (err -117) [ 185.158383][ T5820] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 185.204698][ T8578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.333626][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 185.349756][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.360901][ T8559] block nbd1: shutting down sockets [ 186.115084][ T5887] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 186.177818][ T8581] loop2: detected capacity change from 0 to 32768 [ 186.189042][ T8581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.925 (8581) [ 186.221147][ T8581] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.251372][ T8581] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 186.260399][ T8581] BTRFS info (device loop2): using free-space-tree [ 186.283712][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 186.292359][ T5887] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 186.302813][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.322688][ T5887] usb 4-1: config 0 descriptor?? [ 186.337329][ T5887] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 186.373532][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.565441][ T5828] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.601349][ T8616] netlink: 'syz.1.946': attribute type 3 has an invalid length. [ 186.623604][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 186.880447][ T8618] loop6: detected capacity change from 0 to 1024 [ 186.920209][ T8618] EXT4-fs: inline encryption not supported [ 186.953911][ T8618] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.036687][ T8618] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 1: comm syz.6.936: lblock 1 mapped to illegal pblock 1 (length 1) [ 187.093075][ T8618] EXT4-fs (loop6): Remounting filesystem read-only [ 187.125799][ T8618] Quota error (device loop6): write_blk: dquota write failed [ 187.140875][ T8618] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 187.199428][ T8618] EXT4-fs (loop6): 1 orphan inode deleted [ 187.210217][ T8624] loop0: detected capacity change from 0 to 32768 [ 187.219210][ T8618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.229770][ T8624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.938 (8624) [ 187.275617][ T8627] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.290064][ T6630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.303772][ T8624] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.342598][ T8624] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 187.359595][ T5887] usb 4-1: USB disconnect, device number 7 [ 187.366314][ T8624] BTRFS info (device loop0): disk space caching is enabled [ 187.382535][ T8624] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 187.413623][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.449112][ T8627] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.579725][ T8627] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.591368][ T969] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 187.602608][ T8624] BTRFS info (device loop0): rebuilding free space tree [ 187.637994][ T8624] BTRFS info (device loop0): disabling free space tree [ 187.645288][ T8624] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.656103][ T8624] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 187.732318][ T8627] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.766592][ T969] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.785394][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.808720][ T969] usb 5-1: config 0 descriptor?? [ 187.826660][ T969] cp210x 5-1:0.0: cp210x converter detected [ 188.003896][ T5820] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.228670][ T8627] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.346848][ T8655] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 188.413761][ T8627] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.450025][ T969] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 188.460474][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.493955][ T969] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 188.515709][ T8627] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.521096][ T969] usb 5-1: cp210x converter now attached to ttyUSB0 [ 188.541148][ T8639] loop6: detected capacity change from 0 to 40427 [ 188.552656][ T8661] loop1: detected capacity change from 0 to 64 [ 188.578822][ T969] usb 5-1: USB disconnect, device number 6 [ 188.593078][ T8627] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.601928][ T969] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 188.602399][ T969] cp210x 5-1:0.0: device disconnected [ 188.613605][ T8639] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 188.657011][ T8639] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 188.821066][ T8670] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.920699][ T8639] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 188.939958][ T8639] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 188.961682][ T8673] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 189.033569][ T972] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 189.204755][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 189.220767][ T972] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.232660][ T972] usb 3-1: config 0 has no interface number 0 [ 189.248710][ T972] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 189.279151][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.301434][ T972] usb 3-1: Product: syz [ 189.306117][ T972] usb 3-1: Manufacturer: syz [ 189.307546][ T8683] loop4: detected capacity change from 0 to 256 [ 189.310716][ T972] usb 3-1: SerialNumber: syz [ 189.325026][ T972] usb 3-1: config 0 descriptor?? [ 189.334187][ T972] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 189.342002][ T8683] exfat: Deprecated parameter 'namecase' [ 189.369191][ T8683] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 189.403822][ T5832] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 189.503528][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.585715][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.627693][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.658857][ T5832] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.676733][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.692294][ T5832] usb 1-1: SerialNumber: syz [ 189.726405][ T8694] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.738020][ T8694] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.796531][ T8694] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.822478][ T8694] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.868329][ T8697] loop4: detected capacity change from 0 to 1024 [ 189.916912][ T8694] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.931124][ T5832] usb 1-1: 0:2 : does not exist [ 189.934164][ T8694] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.998733][ T5832] usb 1-1: USB disconnect, device number 8 [ 190.006397][ T6107] hfsplus: b-tree write err: -5, ino 4 [ 190.040806][ T8694] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.067943][ T8694] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.314391][ T8694] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.352977][ T972] gspca_spca1528: reg_w err -71 [ 190.358315][ T8694] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.374263][ T972] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 190.384984][ T972] usb 3-1: USB disconnect, device number 7 [ 190.448123][ T8694] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.484098][ T8694] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.533876][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.562951][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 190.584589][ T8694] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.623706][ T8694] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.715992][ T8694] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.733671][ T8694] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.008059][ T8719] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 191.137835][ T8702] loop4: detected capacity change from 0 to 40427 [ 191.161655][ T8706] loop1: detected capacity change from 0 to 32768 [ 191.229367][ T8706] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.255454][ T8702] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 191.314105][ T8702] F2FS-fs (loop4): invalid crc value [ 191.482595][ T8706] XFS (loop1): Ending clean mount [ 191.511701][ T8706] XFS (loop1): Quotacheck needed: Please wait. [ 191.580085][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.605043][ T8706] XFS (loop1): Quotacheck: Done. [ 191.641979][ T8743] loop0: detected capacity change from 0 to 4096 [ 191.716284][ T8702] F2FS-fs (loop4): Start checkpoint disabled! [ 191.747616][ T8702] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 191.798103][ T30] audit: type=1800 audit(1746206873.102:195): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.965" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 191.832239][ T5824] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.004334][ T6094] kworker/u8:8: attempt to access beyond end of device [ 192.004334][ T6094] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 192.055981][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: kworker/u8:8 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 192.056017][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.056034][ T6094] Workqueue: writeback wb_workfn (flush-7:4) [ 192.056080][ T6094] Call Trace: [ 192.056089][ T6094] [ 192.056099][ T6094] dump_stack_lvl+0x189/0x250 [ 192.056141][ T6094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.056177][ T6094] ? __pfx_queue_work_on+0x10/0x10 [ 192.056200][ T6094] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 192.056225][ T6094] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.056252][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.056290][ T6094] f2fs_handle_critical_error+0x37c/0x540 [ 192.056330][ T6094] f2fs_write_end_io+0x4e2/0x6d0 [ 192.056378][ T6094] __submit_merged_bio+0x27a/0x6a0 [ 192.056400][ T6094] ? up_write+0x1c4/0x420 [ 192.056432][ T6094] __submit_merged_write_cond+0x44c/0x530 [ 192.056481][ T6094] f2fs_sync_node_pages+0x1315/0x14a0 [ 192.056545][ T6094] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 192.056617][ T6094] ? folio_try_get+0x1c/0x340 [ 192.056659][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.056686][ T6094] ? f2fs_inode_chksum_verify+0x138/0x6c0 [ 192.056715][ T6094] ? rcu_is_watching+0x15/0xb0 [ 192.056751][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.056778][ T6094] ? blk_start_plug+0x52/0x1b0 [ 192.056811][ T6094] f2fs_write_node_pages+0x303/0x6e0 [ 192.056842][ T6094] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 192.056863][ T6094] ? read_node_page+0x2ab/0x600 [ 192.056905][ T6094] ? has_not_enough_free_secs+0xd8b/0x1640 [ 192.056942][ T6094] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 192.056966][ T6094] do_writepages+0x3b1/0x7b0 [ 192.057006][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.057034][ T6094] ? __lock_acquire+0xaac/0xd20 [ 192.057072][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.057101][ T6094] ? __pfx_do_writepages+0x10/0x10 [ 192.057135][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.057162][ T6094] ? reacquire_held_locks+0x127/0x1d0 [ 192.057184][ T6094] ? writeback_sb_inodes+0x372/0x1000 [ 192.057220][ T6094] __writeback_single_inode+0x145/0xff0 [ 192.057246][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.057273][ T6094] ? do_raw_spin_unlock+0x122/0x240 [ 192.057306][ T6094] writeback_sb_inodes+0x6b5/0x1000 [ 192.057371][ T6094] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 192.057444][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.057472][ T6094] ? rcu_is_watching+0x15/0xb0 [ 192.057508][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.057545][ T6094] wb_writeback+0x43b/0xaf0 [ 192.057579][ T6094] ? queue_io+0x3c1/0x590 [ 192.057608][ T6094] ? __pfx_wb_writeback+0x10/0x10 [ 192.057643][ T6094] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.057673][ T6094] wb_workfn+0x409/0xef0 [ 192.057727][ T6094] ? __pfx_wb_workfn+0x10/0x10 [ 192.057759][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.057786][ T6094] ? register_lock_class+0x51/0x320 [ 192.057826][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.057853][ T6094] ? __lock_acquire+0xaac/0xd20 [ 192.057898][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.057929][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.057961][ T6094] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.057983][ T6094] ? process_scheduled_works+0x9ec/0x17a0 [ 192.058020][ T6094] ? process_scheduled_works+0x9ec/0x17a0 [ 192.058060][ T6094] process_scheduled_works+0xade/0x17a0 [ 192.058133][ T6094] ? __pfx_process_scheduled_works+0x10/0x10 [ 192.058181][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.058218][ T6094] worker_thread+0x8a0/0xda0 [ 192.058274][ T6094] kthread+0x711/0x8a0 [ 192.058307][ T6094] ? __pfx_worker_thread+0x10/0x10 [ 192.058376][ T6094] ? __pfx_kthread+0x10/0x10 [ 192.058404][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.058433][ T6094] ? __pfx_kthread+0x10/0x10 [ 192.058460][ T6094] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.058482][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.058516][ T6094] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.058546][ T6094] ? __pfx_kthread+0x10/0x10 [ 192.058573][ T6094] ret_from_fork+0x4e/0x80 [ 192.058598][ T6094] ? __pfx_kthread+0x10/0x10 [ 192.058627][ T6094] ret_from_fork_asm+0x1a/0x30 [ 192.058668][ T6094] [ 192.058679][ T6094] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 192.577679][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: kworker/u8:8 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 192.577714][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.577731][ T6094] Workqueue: writeback wb_workfn (flush-7:4) [ 192.577775][ T6094] Call Trace: [ 192.577785][ T6094] [ 192.577795][ T6094] dump_stack_lvl+0x189/0x250 [ 192.577838][ T6094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.577875][ T6094] ? __pfx_queue_work_on+0x10/0x10 [ 192.577897][ T6094] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 192.577924][ T6094] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.577951][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.577991][ T6094] f2fs_handle_critical_error+0x37c/0x540 [ 192.578028][ T6094] f2fs_write_end_io+0x4e2/0x6d0 [ 192.578080][ T6094] __submit_merged_bio+0x27a/0x6a0 [ 192.578103][ T6094] ? up_write+0x1c4/0x420 [ 192.578137][ T6094] __submit_merged_write_cond+0x44c/0x530 [ 192.578189][ T6094] f2fs_sync_node_pages+0x1315/0x14a0 [ 192.578260][ T6094] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 192.578349][ T6094] ? folio_try_get+0x1c/0x340 [ 192.578392][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.578419][ T6094] ? f2fs_inode_chksum_verify+0x138/0x6c0 [ 192.578449][ T6094] ? rcu_is_watching+0x15/0xb0 [ 192.578486][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.578513][ T6094] ? blk_start_plug+0x52/0x1b0 [ 192.578548][ T6094] f2fs_write_node_pages+0x303/0x6e0 [ 192.578581][ T6094] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 192.578602][ T6094] ? read_node_page+0x2ab/0x600 [ 192.578646][ T6094] ? has_not_enough_free_secs+0xd8b/0x1640 [ 192.578685][ T6094] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 192.578710][ T6094] do_writepages+0x3b1/0x7b0 [ 192.578755][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.578782][ T6094] ? __lock_acquire+0xaac/0xd20 [ 192.578824][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.578853][ T6094] ? __pfx_do_writepages+0x10/0x10 [ 192.578889][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.578916][ T6094] ? reacquire_held_locks+0x127/0x1d0 [ 192.578938][ T6094] ? writeback_sb_inodes+0x372/0x1000 [ 192.578978][ T6094] __writeback_single_inode+0x145/0xff0 [ 192.579005][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.579032][ T6094] ? do_raw_spin_unlock+0x122/0x240 [ 192.579068][ T6094] writeback_sb_inodes+0x6b5/0x1000 [ 192.579134][ T6094] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 192.579223][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.579250][ T6094] ? rcu_is_watching+0x15/0xb0 [ 192.579287][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.579332][ T6094] wb_writeback+0x43b/0xaf0 [ 192.579370][ T6094] ? queue_io+0x3c1/0x590 [ 192.579401][ T6094] ? __pfx_wb_writeback+0x10/0x10 [ 192.579441][ T6094] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.579473][ T6094] wb_workfn+0x409/0xef0 [ 192.579533][ T6094] ? __pfx_wb_workfn+0x10/0x10 [ 192.579564][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.579591][ T6094] ? register_lock_class+0x51/0x320 [ 192.579634][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.579660][ T6094] ? __lock_acquire+0xaac/0xd20 [ 192.579707][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.579739][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.579772][ T6094] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.579794][ T6094] ? process_scheduled_works+0x9ec/0x17a0 [ 192.579832][ T6094] ? process_scheduled_works+0x9ec/0x17a0 [ 192.579875][ T6094] process_scheduled_works+0xade/0x17a0 [ 192.579958][ T6094] ? __pfx_process_scheduled_works+0x10/0x10 [ 192.580010][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.580052][ T6094] worker_thread+0x8a0/0xda0 [ 192.580143][ T6094] kthread+0x711/0x8a0 [ 192.580178][ T6094] ? __pfx_worker_thread+0x10/0x10 [ 192.580202][ T6094] ? __pfx_kthread+0x10/0x10 [ 192.580230][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.580260][ T6094] ? __pfx_kthread+0x10/0x10 [ 192.580288][ T6094] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.580310][ T6094] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.580342][ T6094] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.580370][ T6094] ? __pfx_kthread+0x10/0x10 [ 192.580398][ T6094] ret_from_fork+0x4e/0x80 [ 192.580422][ T6094] ? __pfx_kthread+0x10/0x10 [ 192.580451][ T6094] ret_from_fork_asm+0x1a/0x30 [ 192.580500][ T6094] [ 192.580510][ T6094] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 192.616347][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.951349][ T8739] loop2: detected capacity change from 0 to 40427 [ 193.030848][ T8760] loop3: detected capacity change from 0 to 512 [ 193.117832][ T8739] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3fffff [ 193.126884][ T8739] F2FS-fs (loop2): Image doesn't support compression [ 193.144531][ T8739] F2FS-fs (loop2): heap/no_heap options were deprecated [ 193.159318][ T8739] F2FS-fs (loop2): Image doesn't support compression [ 193.190036][ T8739] F2FS-fs (loop2): invalid crc value [ 193.230355][ T8760] EXT4-fs (loop3): 1 orphan inode deleted [ 193.248318][ T6094] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 193.260635][ T8760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.293664][ T6094] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 193.309633][ T8760] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.370877][ T8739] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 193.399785][ T8760] EXT4-fs (loop3): shut down requested (1) [ 193.445933][ T8739] syz.2.976: attempt to access beyond end of device [ 193.445933][ T8739] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.489437][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.507075][ T8774] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x521/0x1ed0 [ 193.519951][ T6107] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 193.537712][ T8774] F2FS-fs (loop2): invalid blkaddr: 5637, type: 6, run fsck to fix. [ 193.549763][ T8777] loop1: detected capacity change from 0 to 128 [ 193.576440][ T8774] syz.2.976: attempt to access beyond end of device [ 193.576440][ T8774] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 193.615220][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.621567][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.641666][ T8777] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.653867][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.729099][ T8777] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.827486][ T5828] syz-executor: attempt to access beyond end of device [ 193.827486][ T5828] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 193.879238][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 193.879276][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 193.879291][ T5828] Call Trace: [ 193.879300][ T5828] [ 193.879310][ T5828] dump_stack_lvl+0x189/0x250 [ 193.879364][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.879400][ T5828] ? __pfx_queue_work_on+0x10/0x10 [ 193.879422][ T5828] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 193.879448][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 193.879475][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.879513][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 193.879548][ T5828] f2fs_write_end_io+0x4e2/0x6d0 [ 193.879597][ T5828] __submit_merged_bio+0x27a/0x6a0 [ 193.879630][ T5828] __submit_merged_write_cond+0x255/0x530 [ 193.879680][ T5828] f2fs_write_data_pages+0x2854/0x31f0 [ 193.879708][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.879775][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 193.879856][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.879883][ T5828] ? __mod_node_page_state+0xf4/0x170 [ 193.879924][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.879951][ T5828] ? lru_gen_update_size+0x7bd/0xd20 [ 193.880001][ T5828] ? folios_put_refs+0x560/0x640 [ 193.880042][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.880069][ T5828] ? lru_add+0xa2f/0xd80 [ 193.880096][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 193.880125][ T5828] do_writepages+0x3b1/0x7b0 [ 193.880177][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.880203][ T5828] ? do_raw_spin_lock+0x121/0x290 [ 193.880232][ T5828] ? __pfx_do_writepages+0x10/0x10 [ 193.880268][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.880300][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.880333][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 193.880367][ T5828] filemap_fdatawrite+0x191/0x230 [ 193.880402][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 193.880484][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.880518][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 193.880551][ T5828] f2fs_sync_dirty_inodes+0x31f/0x830 [ 193.880601][ T5828] f2fs_write_checkpoint+0x94a/0x1de0 [ 193.880661][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 193.880749][ T5828] ? kill_f2fs_super+0x298/0x6c0 [ 193.880786][ T5828] kill_f2fs_super+0x2c3/0x6c0 [ 193.880825][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 193.880854][ T5828] ? radix_tree_delete_item+0x2b6/0x400 [ 193.880889][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.880915][ T5828] ? shrinker_free+0x2ce/0x3e0 [ 193.880944][ T5828] deactivate_locked_super+0xbc/0x130 [ 193.880971][ T5828] cleanup_mnt+0x425/0x4c0 [ 193.881034][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.881061][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.881092][ T5828] task_work_run+0x1d4/0x260 [ 193.881128][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 193.881160][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.881199][ T5828] resume_user_mode_work+0x5e/0x80 [ 193.881235][ T5828] syscall_exit_to_user_mode+0x9a/0x120 [ 193.881264][ T5828] do_syscall_64+0x103/0x210 [ 193.881293][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 193.881324][ T5828] ? exc_page_fault+0x91/0x110 [ 193.881352][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.881376][ T5828] RIP: 0033:0x7fe31678fc97 [ 193.881396][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 193.881416][ T5828] RSP: 002b:00007ffcf2c81fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 193.881441][ T5828] RAX: 0000000000000000 RBX: 00007fe31681089d RCX: 00007fe31678fc97 [ 193.881457][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf2c82070 [ 193.881472][ T5828] RBP: 00007ffcf2c82070 R08: 0000000000000000 R09: 0000000000000000 [ 193.881488][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf2c83100 [ 193.881504][ T5828] R13: 00007fe31681089d R14: 000000000002f482 R15: 00007ffcf2c83140 [ 193.881542][ T5828] [ 193.881551][ T5828] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 194.333249][ T5824] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.693671][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.056228][ T8798] loop6: detected capacity change from 0 to 2048 [ 195.086276][ T8798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.133579][ T8798] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 195.151122][ T8798] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 195.163982][ T8798] EXT4-fs (loop6): This should not happen!! Data will be lost [ 195.163982][ T8798] [ 195.173775][ T8798] EXT4-fs (loop6): Total free blocks count 0 [ 195.180025][ T8798] EXT4-fs (loop6): Free/Dirty block details [ 195.186071][ T8798] EXT4-fs (loop6): free_blocks=2415919504 [ 195.191952][ T8798] EXT4-fs (loop6): dirty_blocks=16 [ 195.197610][ T8798] EXT4-fs (loop6): Block reservation details [ 195.203765][ T8798] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 195.210737][ T8805] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 195.242630][ T30] audit: type=1804 audit(1746206876.548:196): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1000" name="/newroot/126/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 195.733657][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.768295][ T8825] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.901739][ T8825] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.930428][ T8821] loop2: detected capacity change from 0 to 8192 [ 195.940755][ T8821] vfat: Unknown parameter '017777777777777777777770x0000000000000000' [ 195.997911][ T8825] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.110891][ T8825] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.121260][ T5832] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.289645][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 196.313727][ T5832] usb 1-1: config 1 has no interface number 0 [ 196.348597][ T5832] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.396011][ T5832] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 196.444179][ T5832] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26232, setting to 64 [ 196.507417][ T5832] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.538366][ T8825] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.542374][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.573798][ T5832] usb 1-1: Product: syz [ 196.578029][ T5832] usb 1-1: Manufacturer: syz [ 196.589443][ T5832] usb 1-1: SerialNumber: syz [ 196.656072][ T8825] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.675047][ T8825] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.750302][ T8825] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.773791][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.988758][ T8859] loop1: detected capacity change from 0 to 2048 [ 197.011131][ T8859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.146885][ T8863] loop4: detected capacity change from 0 to 1024 [ 197.205495][ T8863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.238087][ T54] Bluetooth: hci2: link tx timeout [ 197.244882][ T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.265882][ T54] Bluetooth: hci2: link tx timeout [ 197.271958][ T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.280047][ T54] Bluetooth: hci2: link tx timeout [ 197.285441][ T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.296063][ T8870] loop1: detected capacity change from 0 to 1024 [ 197.404810][ T8848] loop3: detected capacity change from 0 to 32768 [ 197.445970][ T5832] cdc_ncm 1-1:1.1: bind() failure [ 197.446350][ T8870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.470409][ T8870] TCP: tcp_parse_options: Illegal window scaling value 224 > 14 received [ 197.487494][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.501633][ T8848] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 197.518326][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.618851][ T8848] XFS (loop3): Ending clean mount [ 197.686275][ T8848] XFS (loop3): Quotacheck needed: Please wait. [ 197.725710][ T24] usb 1-1: USB disconnect, device number 9 [ 197.808408][ T8848] XFS (loop3): Quotacheck: Done. [ 197.814045][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 197.886252][ T8892] loop2: detected capacity change from 0 to 4096 [ 197.962772][ T8896] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.042761][ T8892] overlay: filesystem on ./bus not supported as upperdir [ 198.081673][ T5826] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.199005][ T8907] netlink: 'syz.4.1038': attribute type 39 has an invalid length. [ 198.289266][ T8906] loop6: detected capacity change from 0 to 2048 [ 198.347703][ T8906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.590075][ T8912] loop2: detected capacity change from 0 to 8192 [ 198.653649][ T5832] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 198.691426][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 198.818412][ T5832] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 198.843571][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.863529][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.886146][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.897125][ T8925] loop1: detected capacity change from 0 to 1024 [ 198.943529][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 198.976419][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.019906][ T5832] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.053274][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.064780][ T8933] loop6: detected capacity change from 0 to 512 [ 199.088210][ T5832] usb 1-1: config 0 descriptor?? [ 199.107393][ T8933] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 199.135593][ T8933] System zones: 0-2, 18-18, 34-35 [ 199.148046][ T5832] usb 1-1: can't set config #0, error -71 [ 199.150145][ T8933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.166848][ T8933] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.202888][ T5832] usb 1-1: USB disconnect, device number 10 [ 199.306364][ T6630] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.334029][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 199.462119][ T8949] input: syz0 as /devices/virtual/input/input9 [ 199.786476][ T8964] loop1: detected capacity change from 0 to 64 [ 199.903520][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.983700][ T5832] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.183522][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 200.190813][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.215916][ T5832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.246166][ T5832] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.270337][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.323524][ T5832] usb 4-1: Product: syz [ 200.327748][ T5832] usb 4-1: Manufacturer: syz [ 200.332362][ T5832] usb 4-1: SerialNumber: syz [ 200.518255][ T8956] loop2: detected capacity change from 0 to 32768 [ 200.540522][ T8956] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1061 (8956) [ 200.575182][ T5832] usb 4-1: 0:2 : does not exist [ 200.605425][ T8956] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.633355][ T8956] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 200.636837][ T5832] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 200.700586][ T5832] usb 4-1: USB disconnect, device number 8 [ 200.800924][ T8999] loop0: detected capacity change from 0 to 2048 [ 200.874422][ T8999] EXT4-fs: inline encryption not supported [ 200.914217][ T8999] EXT4-fs: Ignoring removed i_version option [ 200.933531][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.953045][ T9011] loop4: detected capacity change from 0 to 512 [ 200.980520][ T9011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.999913][ T5828] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.033151][ T8999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.075395][ T9011] EXT4-fs (loop4): 1 truncate cleaned up [ 201.083715][ T9011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.104947][ T8999] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.138785][ T8999] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 201.222682][ T8999] EXT4-fs (loop0): This should not happen!! Data will be lost [ 201.222682][ T8999] [ 201.273655][ T8999] EXT4-fs (loop0): Total free blocks count 0 [ 201.303603][ T8999] EXT4-fs (loop0): Free/Dirty block details [ 201.346871][ T8999] EXT4-fs (loop0): free_blocks=2415919104 [ 201.352663][ T8999] EXT4-fs (loop0): dirty_blocks=16 [ 201.363960][ T8999] EXT4-fs (loop0): Block reservation details [ 201.370520][ T9021] batadv_slave_0: entered promiscuous mode [ 201.407497][ T8999] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 201.420208][ T9020] batadv_slave_0: left promiscuous mode [ 201.427097][ T9018] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 201.503053][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.712172][ T9033] loop4: detected capacity change from 0 to 64 [ 201.973784][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 202.191759][ T9047] loop3: detected capacity change from 0 to 1024 [ 202.230744][ T9047] EXT4-fs: Ignoring removed oldalloc option [ 202.286719][ T9047] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 202.369325][ T9047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.404453][ T9046] loop4: detected capacity change from 0 to 4096 [ 202.484030][ T9046] ntfs3: Unknown parameter '' [ 202.638627][ T9040] loop6: detected capacity change from 0 to 32768 [ 202.663808][ T9059] program syz.2.1098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.664156][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.676981][ T9040] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1091 (9040) [ 202.766538][ T9040] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.806712][ T9040] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 202.815782][ T9040] BTRFS info (device loop6): using free-space-tree [ 203.013624][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.418262][ T9094] loop4: detected capacity change from 0 to 164 [ 203.480586][ T9103] loop2: detected capacity change from 0 to 64 [ 203.563225][ T6630] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.657840][ T9109] loop0: detected capacity change from 0 to 256 [ 203.691216][ T9105] loop1: detected capacity change from 0 to 2048 [ 203.705922][ T9109] exfat: Deprecated parameter 'namecase' [ 203.722479][ T9109] exfat: Deprecated parameter 'utf8' [ 203.778391][ T9109] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 203.808382][ T9105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.063626][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 204.117948][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.376177][ T5845] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 204.735682][ T9108] loop3: detected capacity change from 0 to 32768 [ 204.788898][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'. [ 204.816764][ T9108] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 204.934020][ T5887] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 205.086796][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 205.103653][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.112568][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 205.128401][ T5887] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 205.204457][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 205.226499][ T5887] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 205.242336][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.260056][ T5887] usb 7-1: Product: syz [ 205.281695][ T5887] usb 7-1: Manufacturer: syz [ 205.289222][ T5887] usb 7-1: SerialNumber: syz [ 205.311366][ T5887] usb 7-1: config 0 descriptor?? [ 205.350193][ T5887] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 205.402109][ T5887] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 205.445008][ T9144] loop4: detected capacity change from 0 to 1024 [ 205.486089][ T9144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.546039][ T9149] loop3: detected capacity change from 0 to 2048 [ 205.564910][ T30] audit: type=1800 audit(1746206886.878:197): pid=9144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1123" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 205.596143][ T9144] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1123: Allocating blocks 497-513 which overlap fs metadata [ 205.639965][ T9149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.649530][ T9144] EXT4-fs (loop4): pa ffff888053271910: logic 256, phys. 369, len 9 [ 205.660260][ T9144] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 205.716560][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.753902][ T30] audit: type=1800 audit(1746206887.058:198): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1123" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 205.853976][ T9166] loop3: detected capacity change from 0 to 64 [ 205.886128][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.907395][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 205.914792][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 205.915686][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 205.921234][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 205.928309][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 205.948094][ T9166] ------------[ cut here ]------------ [ 205.953862][ T9166] WARNING: CPU: 1 PID: 9166 at fs/buffer.c:1186 mark_buffer_dirty+0x2a9/0x410 [ 205.962821][ T9166] Modules linked in: [ 205.966984][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.3.1126 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 205.979540][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 205.989682][ T9166] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 205.995516][ T9166] Code: 4c 89 f7 e8 79 0d de ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 34 fc ff e8 5f 18 7c ff eb 8c e8 58 18 7c ff 90 <0f> 0b 90 e9 95 fd ff ff e8 4a 18 7c ff 90 0f 0b 90 e9 bf fd ff ff [ 206.016489][ T9166] RSP: 0018:ffffc9000bcef628 EFLAGS: 00010283 [ 206.022613][ T9166] RAX: ffffffff8243a7f8 RBX: ffff88805318e3a0 RCX: 0000000000080000 [ 206.030682][ T9166] RDX: ffffc9000d096000 RSI: 0000000000000d0a RDI: 0000000000000d0b [ 206.038828][ T9166] RBP: ffff888023c9a001 R08: ffff88805318e3a7 R09: 1ffff1100a631c74 [ 206.046962][ T9166] R10: dffffc0000000000 R11: ffffed100a631c75 R12: ffff88807fbac400 [ 206.055431][ T9166] R13: ffff888053270bc8 R14: ffff88805318e3a0 R15: 000000000000000a [ 206.063666][ T9166] FS: 00007f7486ad16c0(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 206.068781][ T9169] loop0: detected capacity change from 0 to 512 [ 206.072744][ T9166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.085542][ T9166] CR2: 0000200000001000 CR3: 000000005348e000 CR4: 0000000000350ef0 [ 206.093599][ T9166] Call Trace: [ 206.096888][ T9166] [ 206.099837][ T9166] bfs_get_block+0x5da/0xae0 [ 206.104542][ T9166] __block_write_begin_int+0x6b5/0x1900 [ 206.110735][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.116920][ T9166] ? __pfx_bfs_get_block+0x10/0x10 [ 206.122078][ T9166] ? __pfx___block_write_begin_int+0x10/0x10 [ 206.128146][ T9166] ? __filemap_get_folio+0x79f/0xaf0 [ 206.133534][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.140601][ T9166] ? __pfx_bfs_get_block+0x10/0x10 [ 206.145906][ T9166] block_write_begin+0x8a/0x120 [ 206.150802][ T9166] ? bfs_write_begin+0x1e/0xd0 [ 206.155658][ T9166] bfs_write_begin+0x35/0xd0 [ 206.160295][ T9166] generic_perform_write+0x2c7/0x910 [ 206.165709][ T9166] ? __pfx_generic_perform_write+0x10/0x10 [ 206.171549][ T9166] ? file_update_time+0x2da/0x490 [ 206.176776][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.182441][ T9166] ? __generic_file_write_iter+0xf9/0x230 [ 206.188230][ T9166] ? generic_file_write_iter+0xfb/0x540 [ 206.193860][ T9166] generic_file_write_iter+0x10f/0x540 [ 206.199366][ T9166] ? __pfx_generic_file_write_iter+0x10/0x10 [ 206.205492][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.211819][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.218208][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.225030][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.232940][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.238678][ T9166] ? __lock_acquire+0xaac/0xd20 [ 206.243976][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.249642][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.255359][ T9166] ? rcu_read_lock_any_held+0xb3/0x120 [ 206.260843][ T9166] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 206.266828][ T9166] vfs_write+0x54b/0xa90 [ 206.271111][ T9166] ? __pfx_generic_file_write_iter+0x10/0x10 [ 206.277198][ T9166] ? __pfx_vfs_write+0x10/0x10 [ 206.282009][ T9166] ? __fget_files+0x2a/0x420 [ 206.286729][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.292399][ T9166] ksys_write+0x145/0x250 [ 206.296900][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.303029][ T9166] ? rcu_is_watching+0x15/0xb0 [ 206.307900][ T9166] ? __pfx_ksys_write+0x10/0x10 [ 206.313951][ T9166] ? do_syscall_64+0xba/0x210 [ 206.318677][ T9166] do_syscall_64+0xf6/0x210 [ 206.323213][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.328961][ T9166] ? exc_page_fault+0x91/0x110 [ 206.334184][ T9169] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 206.339950][ T9169] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1139: invalid indirect mapped block 2683928664 (level 1) [ 206.342182][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.362206][ T9166] RIP: 0033:0x7f7485b8e969 [ 206.366690][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.386920][ T9166] RSP: 002b:00007f7486ad1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.395843][ T9166] RAX: ffffffffffffffda RBX: 00007f7485db5fa0 RCX: 00007f7485b8e969 [ 206.403880][ T9166] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000004 [ 206.411878][ T9166] RBP: 00007f7485c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 206.421287][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.430349][ T9166] R13: 0000000000000000 R14: 00007f7485db5fa0 R15: 00007ffc437bb888 [ 206.438418][ T9166] [ 206.441456][ T9166] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 206.448749][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.3.1126 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 206.460752][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.470834][ T9166] Call Trace: [ 206.474131][ T9166] [ 206.477068][ T9166] dump_stack_lvl+0x99/0x250 [ 206.481677][ T9166] ? __asan_memcpy+0x40/0x70 [ 206.486274][ T9166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.491485][ T9166] ? __pfx__printk+0x10/0x10 [ 206.496090][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.501739][ T9166] panic+0x2db/0x790 [ 206.505656][ T9166] ? __pfx_panic+0x10/0x10 [ 206.510084][ T9166] ? show_trace_log_lvl+0x4fb/0x550 [ 206.515327][ T9166] __warn+0x31b/0x4b0 [ 206.519347][ T9166] ? mark_buffer_dirty+0x2a9/0x410 [ 206.524480][ T9166] ? mark_buffer_dirty+0x2a9/0x410 [ 206.529603][ T9166] report_bug+0x2be/0x4f0 [ 206.533937][ T9166] ? mark_buffer_dirty+0x2a9/0x410 [ 206.539058][ T9166] ? mark_buffer_dirty+0x2a9/0x410 [ 206.544177][ T9166] ? mark_buffer_dirty+0x2ab/0x410 [ 206.549303][ T9166] handle_bug+0x84/0x160 [ 206.553563][ T9166] exc_invalid_op+0x1a/0x50 [ 206.558072][ T9166] asm_exc_invalid_op+0x1a/0x20 [ 206.562919][ T9166] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 206.568650][ T9166] Code: 4c 89 f7 e8 79 0d de ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 34 fc ff e8 5f 18 7c ff eb 8c e8 58 18 7c ff 90 <0f> 0b 90 e9 95 fd ff ff e8 4a 18 7c ff 90 0f 0b 90 e9 bf fd ff ff [ 206.588272][ T9166] RSP: 0018:ffffc9000bcef628 EFLAGS: 00010283 [ 206.594365][ T9166] RAX: ffffffff8243a7f8 RBX: ffff88805318e3a0 RCX: 0000000000080000 [ 206.602349][ T9166] RDX: ffffc9000d096000 RSI: 0000000000000d0a RDI: 0000000000000d0b [ 206.610320][ T9166] RBP: ffff888023c9a001 R08: ffff88805318e3a7 R09: 1ffff1100a631c74 [ 206.618327][ T9166] R10: dffffc0000000000 R11: ffffed100a631c75 R12: ffff88807fbac400 [ 206.626330][ T9166] R13: ffff888053270bc8 R14: ffff88805318e3a0 R15: 000000000000000a [ 206.634347][ T9166] ? mark_buffer_dirty+0x2a8/0x410 [ 206.639478][ T9166] ? mark_buffer_dirty+0x2a8/0x410 [ 206.644696][ T9166] bfs_get_block+0x5da/0xae0 [ 206.649323][ T9166] __block_write_begin_int+0x6b5/0x1900 [ 206.654908][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.660558][ T9166] ? __pfx_bfs_get_block+0x10/0x10 [ 206.665688][ T9166] ? __pfx___block_write_begin_int+0x10/0x10 [ 206.671679][ T9166] ? __filemap_get_folio+0x79f/0xaf0 [ 206.676974][ T9166] ? __pfx_bfs_get_block+0x10/0x10 [ 206.682108][ T9166] block_write_begin+0x8a/0x120 [ 206.686979][ T9166] ? bfs_write_begin+0x1e/0xd0 [ 206.691768][ T9166] bfs_write_begin+0x35/0xd0 [ 206.696375][ T9166] generic_perform_write+0x2c7/0x910 [ 206.701689][ T9166] ? __pfx_generic_perform_write+0x10/0x10 [ 206.707513][ T9166] ? file_update_time+0x2da/0x490 [ 206.712564][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.718207][ T9166] ? __generic_file_write_iter+0xf9/0x230 [ 206.723936][ T9166] ? generic_file_write_iter+0xfb/0x540 [ 206.729495][ T9166] generic_file_write_iter+0x10f/0x540 [ 206.734964][ T9166] ? __pfx_generic_file_write_iter+0x10/0x10 [ 206.740950][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.746592][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.752233][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.757882][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.763533][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.769172][ T9166] ? __lock_acquire+0xaac/0xd20 [ 206.774041][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.779684][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.785320][ T9166] ? rcu_read_lock_any_held+0xb3/0x120 [ 206.790787][ T9166] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 206.796695][ T9166] vfs_write+0x54b/0xa90 [ 206.800949][ T9166] ? __pfx_generic_file_write_iter+0x10/0x10 [ 206.806943][ T9166] ? __pfx_vfs_write+0x10/0x10 [ 206.811722][ T9166] ? __fget_files+0x2a/0x420 [ 206.816328][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.821983][ T9166] ksys_write+0x145/0x250 [ 206.826323][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.831967][ T9166] ? rcu_is_watching+0x15/0xb0 [ 206.836747][ T9166] ? __pfx_ksys_write+0x10/0x10 [ 206.841608][ T9166] ? do_syscall_64+0xba/0x210 [ 206.846297][ T9166] do_syscall_64+0xf6/0x210 [ 206.850808][ T9166] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.856447][ T9166] ? exc_page_fault+0x91/0x110 [ 206.861223][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.867125][ T9166] RIP: 0033:0x7f7485b8e969 [ 206.871553][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.891184][ T9166] RSP: 002b:00007f7486ad1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.899643][ T9166] RAX: ffffffffffffffda RBX: 00007f7485db5fa0 RCX: 00007f7485b8e969 [ 206.907635][ T9166] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000004 [ 206.915613][ T9166] RBP: 00007f7485c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 206.923589][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.931568][ T9166] R13: 0000000000000000 R14: 00007f7485db5fa0 R15: 00007ffc437bb888 [ 206.939575][ T9166] [ 206.942899][ T9166] Kernel Offset: disabled [ 206.947225][ T9166] Rebooting in 86400 seconds..