last executing test programs: 6m35.137509376s ago: executing program 2 (id=180): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x4, 0x3b5f91, 0x203bac}) 6m34.299734092s ago: executing program 2 (id=183): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0xfffd, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 6m33.578877134s ago: executing program 2 (id=187): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700000005000500ee"], 0x3c}}, 0x20) 6m32.816287597s ago: executing program 2 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x5, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m30.925323177s ago: executing program 2 (id=197): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) open(0x0, 0x145142, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) 6m29.107705022s ago: executing program 2 (id=203): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000003c0)={r2}, &(0x7f0000000140)=0x8) 6m25.715304927s ago: executing program 32 (id=203): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000003c0)={r2}, &(0x7f0000000140)=0x8) 3m6.85406509s ago: executing program 1 (id=797): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xc000200a}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x29, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040810) 3m5.899160471s ago: executing program 1 (id=801): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 3m2.990417171s ago: executing program 1 (id=807): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) 2m59.440307942s ago: executing program 1 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 2m58.275057802s ago: executing program 1 (id=818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x20000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m57.63984383s ago: executing program 1 (id=821): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00014e", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB='Q'], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 2m54.879889237s ago: executing program 33 (id=821): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00014e", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB='Q'], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 1m1.660892811s ago: executing program 5 (id=1216): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 59.939708063s ago: executing program 5 (id=1223): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 58.93117245s ago: executing program 5 (id=1227): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 55.894058974s ago: executing program 5 (id=1233): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[0x7], &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 55.259604192s ago: executing program 5 (id=1235): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x609c, &(0x7f0000011b00)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000002f80)=ANY=[@ANYRES16=r2, @ANYRESOCT, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32=r1, @ANYBLOB="7b8ae4d950a510a981c78f2246d4825535c37655327112a414ee394162b6e558c36104bc2a1b47a800a92237a6148a222bcace4f74ebf7b4d63ad663b601d02146f21caf496271e9376e3f721e48caaa194f00e137096facebc4e2574ed5d094491b637c93517ded181fdf49e2daceefb5c72f3fef86df384ff03cb9820b35f281ae9b5064199b03e8e689b35f17c7e23647ccaa01c87d80ab00757848", @ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) 53.48216989s ago: executing program 5 (id=1238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.105397239s ago: executing program 34 (id=1238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.546481316s ago: executing program 6 (id=1377): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0x78) close(r0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x14000a71) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 8.316209598s ago: executing program 4 (id=1378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 8.279885328s ago: executing program 3 (id=1379): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 7.865604095s ago: executing program 6 (id=1380): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) llistxattr(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) chown(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 7.343384322s ago: executing program 4 (id=1381): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 6.583667961s ago: executing program 3 (id=1383): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) 6.263848505s ago: executing program 4 (id=1385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x2d, 0x70, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r1, 0x10, 0x253e, 0x4000) 5.978414009s ago: executing program 6 (id=1386): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.676798522s ago: executing program 0 (id=1387): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 5.165412785s ago: executing program 3 (id=1388): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="6469725f756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d5854282b2c636f6465706167653d63703836342c66696c655f756d61736b3d30303030303030303030303030303030303030303030312c696f636861727365743d63703933362c00ba1cc62fbe041529634cde88021ff0d512206543ae25eb5d122f77a94c2113ab796077de9bf46a3b2ed6ec105974f75d13331615810ad28e84c8f2bbd75c4ede6d5a1180afc5acdd01cf83c26042fcc06e0fa14c46671668ded793e0abb1906ae7dbe9e9685e464b1f1d9084009fd14442fac19683285a28a602058e1679c2eac481d62ed27f76c08da8a3e927b48e15d64c837cb723680909354543caa3aafc79fbd2f1a373e039f041072f2b67e922c7e3e492f2b60c93910734743df706deea148a3a296485c2c4f2d611428112a5592bc4eee256ddd27fafd8f3b8de832e181ef5be014215e88cdd7356cdc1bd8d7587c3d604f4f4f0b058dd1d15c6939aa1ffc162"], 0x1, 0x30e, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) 5.066183368s ago: executing program 6 (id=1389): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x245, &(0x7f0000000400)={[{@inode32}, {@qnoenforce}, {}, {@norecovery}, {@nogrpid}, {@dax}, {@nolargeio}, {@sysvgroups}, {@nolazytime}]}, 0x0, 0x97b1, &(0x7f0000009640)="$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") sync_file_range(r0, 0x6, 0x0, 0x6) 4.721838777s ago: executing program 0 (id=1390): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000240)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 3.995170847s ago: executing program 4 (id=1391): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x4) syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f00000000c0)={[{@space_cache}, {@ref_verify}, {@noflushoncommit}, {@usebackuproot}, {@notreelog}, {@nossd}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x42, 0x0, 0x67, 0x6b, 0x32, 0x67]}}]}, 0x3, 0x510e, &(0x7f00000196c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) 3.608283983s ago: executing program 0 (id=1392): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) read(r0, &(0x7f0000000180)=""/119, 0x77) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) getsockname(r0, 0x0, &(0x7f0000000000)) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)='Q', 0x1}], 0x1) 3.519399857s ago: executing program 3 (id=1393): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000280)='timerslack_ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30}, 0x30) 3.383286798s ago: executing program 6 (id=1394): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x6a0, &(0x7f0000002d00)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcjAXOIEQEhJSpHKGW8XN4lQJiUtPaQ8MmtnZ9dpdv+TVNv18otnnN/PMPPOb37x415G1AT63Lp1K+146uXTqtTvV/Pra3NL62tyNXpxkPEkraXebFDeT4oPkYrpTvlAtbIYrttvPrxfPX/7w4/WPunPtbIxXvXS2T7C9l6NYbaZMJxlp2kewabw3Hm688Y2w6FemKtjJXuFgv40mKTf58fGNnmHKkYGZbe934PAouj83B3Tv/6nkSJKJ3g+01W5n6+lnuKsHehatPrk8AAAA4MA4ev9ucieT+50HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCbN9/8XzdTqxdMpet//PzbwHftj+5zuFmNDwyEmesG91hNNCAAAAAAAAACeii/dz+8ul+Vkb74s6v/zf7meOVa/PpO3czsLWc7p3Ml8VrKS5cwmmRoYaOzO/MrK8mxvy0/Lstxmy7NDtzy7x4Q7j+OoAQAAAAAAAOD/xoWm/VkuZXKfcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE2KZKTb1NOxXjyVVjvJRJKxar3V5B+9+DC7t98JAAAAwFNw9H7u504me/NlUX/mP15/7p/I27mZlSxmJUtZyJX6dwHdT/2t9bW5pfW1uRvV9Nlxv/2fjfiPk7umUY+Y7u8ehu/5RL1GJ1ezWC85nTfyVpZyJa16y8qJ9bW5oomH5PVelVNxoass91agK01bjfurpj0YpuqKjPYrMtPkVlXj2d6ZGX6GBs/OQ+xpNq3+b36O7bynTTW/sONeiv/2zsmR3pLkme/vXvPRBzqYR7K1EmcHrr7jO1ci+cqffv+ja0s3r18rVk8dnMvoAYz/a+Ou2VqJuYFKvLjnSly9fTgrsVUrL/TjS/lefphTmc7rWc5ifpL5rGQh0/luHc0313P1OrVzpS72S1p5fbcsxprzMrIlpy8f7bY75fRyve1kFvODvJUrWcir9b+zmc03ci7ncn7gDL+wh7u+NeSu//P2yZ/8ahN0kvyyaQ+Gqq7PDtR18Jk7VfcNLmmlHO9u99xjezb2tb/YBNWZ+HnTHgz9Skyk/1Oil93zvQqMDq3Eb+rHyu2lm9eXr83f2jJusTp8f69k8+EfnAdJdb08V52sem7z1VH1PT+0b7buO9bva23t+22n37fbnTrWvIf77Ehn674Xh/bN1X0nBvo23m99WpZl9/0WAAfeka8dGev8u/P3zvudX3SudV6b+M74N8dfGsvo30a/1Z4ZeaX1UvGHvJ+fZvdP6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK5uv/Pu9fmlpYXlLUFZlne36XoiQdrJpiV//cvAOknqLwPa+4DV2hdbSb2knSZ4sMTuPtzhvPewRfhnc06eSsEfSzAx9PoZaY5jsOuTsiwPRs57CcrGQclnP4J9eyQBT8mZlRu3ztx+592vL96Yf3PhzYWb58+dOz9z/tyrc2euLi4tzHRf9ztL4EkYeAcOAAAAAAAAAAAAHBJ7++Oc4tH+tgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgEVw6lfa9FJmdOT1Tza+vzS1VUy/eWPOTJK0kxXRSfJBcTHfK1MBwxXb7WU0uf/jx+kfduXYz1eu3dtpub1abKdNJRpp2iIlhC8u7241X1OPc2n68PSr6R1gV7GSvcLDf/hcAAP//9TUTFw==") mknod$loop(&(0x7f0000005f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x0) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000b80)='./file1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2.363817958s ago: executing program 0 (id=1395): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x74, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xfffffffb, 0x3, 0x8, 0x3, 0xfffffffd, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xd9de}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x4, 0x8}}, @TCA_NETEM_CORR={0x10, 0x1, {0x80000000, 0xff, 0xe}}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1.48421438s ago: executing program 3 (id=1396): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r3, 0x3, r0}) 1.24256784s ago: executing program 7 (id=1302): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x6559, 0x4, 0x40, 0x7fffffff, 0x200, 0x7d, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfffc, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.100893336s ago: executing program 4 (id=1397): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r1 = dup(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fanotify_init(0x2, 0x40000) fanotify_mark(r2, 0x1, 0x1033, r1, 0x0) write$nbd(r1, &(0x7f0000000680)=ANY=[], 0x10) pread64(r1, &(0x7f0000000400)=""/179, 0xb3, 0x0) 1.071660105s ago: executing program 6 (id=1398): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f00003a4000/0x2000)=nil, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x0, 0x0, 0x0, 0x401, 0x7c, &(0x7f0000000740)=""/124, 0x40f00, 0x1a, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 987.372173ms ago: executing program 0 (id=1399): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x4, 0x6, r2, r3, 0x2000, '\x00', 0x1, 0x4, 0x9, 0x6, {0x6, 0x6}, {0x4}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x800007, 0x4, 0x3}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1}, 0x50) 612.501185ms ago: executing program 3 (id=1400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x5, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000c1, 0xa00) 535.479831ms ago: executing program 7 (id=1401): syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000002140)={0x0, 0x0, 0x0}, 0x0) connect$unix(r3, &(0x7f0000002840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 267.249879ms ago: executing program 4 (id=1402): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000080)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000400)=""/163, 0xa3}], 0x4}, 0x2) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1403): r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): thout journal. Quota mode: none. [ 413.195447][ T7790] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 413.573616][ T7799] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 414.067628][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.074674][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.154790][ T5812] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 415.226398][ T7797] loop5: detected capacity change from 0 to 65536 [ 415.425992][ T7797] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 415.669308][ T7806] loop4: detected capacity change from 0 to 32768 [ 415.767887][ T7797] XFS (loop5): Ending clean mount [ 415.896450][ T7797] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x1b9/0x300, xfs_agf block 0x1 [ 415.907958][ T7797] XFS (loop5): Unmount and run xfs_repair [ 415.917556][ T7797] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 415.925654][ T7797] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 415.934948][ T7797] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 415.944676][ T7797] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 415.954002][ T7797] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 415.963387][ T7797] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 415.972606][ T7797] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 415.981957][ T7797] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 415.996495][ T7797] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 416.007437][ T7797] XFS (loop5): metadata I/O error in "xfs_read_agf+0x23d/0x550" at daddr 0x1 len 1 error 74 [ 416.018319][ T7797] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x740/0xe70 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 416.034085][ T7797] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 416.123772][ T30] audit: type=1800 audit(1754127983.744:9): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.501" name="file1" dev="loop5" ino=38 res=0 errno=0 [ 416.530697][ T6689] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 417.773628][ T38] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 417.853568][ T7839] netlink: 'syz.3.511': attribute type 10 has an invalid length. [ 417.884400][ T7839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.899067][ T7839] team0: Failed to send port change of device bond0 via netlink (err -105) [ 417.909028][ T7839] team0: Failed to send options change via netlink (err -105) [ 417.917303][ T7839] team0: Port device bond0 added [ 418.012607][ T38] usb 2-1: Using ep0 maxpacket: 8 [ 418.117169][ T38] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 418.126793][ T38] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.136224][ T38] usb 2-1: Product: syz [ 418.144494][ T38] usb 2-1: Manufacturer: syz [ 418.149324][ T38] usb 2-1: SerialNumber: syz [ 418.296622][ T38] usb 2-1: config 0 descriptor?? [ 418.498354][ T7843] loop0: detected capacity change from 0 to 2048 [ 418.602882][ T38] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 418.721204][ T7843] loop0: p1 < > p3 [ 418.825587][ T7843] loop0: p3 size 134217728 extends beyond EOD, truncated [ 419.231320][ T7850] loop5: detected capacity change from 0 to 128 [ 419.423426][ T5169] loop0: p1 < > p3 [ 419.458983][ T5169] loop0: p3 size 134217728 extends beyond EOD, truncated [ 419.658745][ T7852] syz.5.515: attempt to access beyond end of device [ 419.658745][ T7852] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 419.755599][ T7852] syz.5.515: attempt to access beyond end of device [ 419.755599][ T7852] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 419.770811][ T7852] syz.5.515: attempt to access beyond end of device [ 419.770811][ T7852] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 419.858875][ T7852] syz.5.515: attempt to access beyond end of device [ 419.858875][ T7852] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 419.877159][ T38] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 420.054174][ T38] usb 2-1: USB disconnect, device number 10 [ 420.484043][ T3633] kworker/u8:14: attempt to access beyond end of device [ 420.484043][ T3633] loop5: rw=1, sector=217, nr_sectors = 1 limit=128 [ 422.419380][ T6134] udevd[6134]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 422.893055][ T6134] udevd[6134]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 424.547467][ T7390] udevd[7390]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 424.687865][ T7908] syzkaller1: entered promiscuous mode [ 424.702681][ T7908] syzkaller1: entered allmulticast mode [ 425.024714][ T7910] netlink: 'syz.4.534': attribute type 1 has an invalid length. [ 425.153394][ T7910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.641178][ T6134] udevd[6134]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 426.297178][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 426.626221][ T7926] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 426.767414][ T7926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.926864][ T7930] bond2: (slave gretap1): making interface the new active one [ 426.939141][ T7930] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 429.040539][ T7960] netlink: 44 bytes leftover after parsing attributes in process `syz.3.547'. [ 429.050233][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 429.533949][ T7963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 430.243879][ T7976] binder: 7974:7976 unknown command 0 [ 430.249516][ T7976] binder: 7974:7976 ioctl c0306201 200000000080 returned -22 [ 430.355462][ T7979] netlink: 9 bytes leftover after parsing attributes in process `syz.5.553'. [ 430.424882][ T7979] gretap0: entered promiscuous mode [ 430.541967][ T7979] netlink: 5 bytes leftover after parsing attributes in process `syz.5.553'. [ 430.552239][ T7979] 0{X: renamed from gretap0 [ 430.627308][ T7979] 0{X: left promiscuous mode [ 430.638542][ T7979] 0{X: entered allmulticast mode [ 430.655119][ T7979] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 431.598429][ T7992] netlink: 72 bytes leftover after parsing attributes in process `syz.4.558'. [ 431.608084][ T7992] netlink: 72 bytes leftover after parsing attributes in process `syz.4.558'. [ 433.261269][ T8008] loop5: detected capacity change from 0 to 32768 [ 433.288409][ T8008] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.561 (8008) [ 433.339033][ T8008] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 433.349818][ T8008] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 433.359749][ T8008] BTRFS info (device loop5): using free-space-tree [ 433.689055][ T38] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 433.762754][ T8008] BTRFS info (device loop5): balance: start -susage=34359738372,drange=7..526332,limit=0..6 [ 433.777281][ T8008] ------------[ cut here ]------------ [ 433.783135][ T8008] BTRFS: Transaction aborted (error -28) [ 433.790409][ T8008] WARNING: CPU: 0 PID: 8008 at fs/btrfs/block-group.c:2789 btrfs_create_pending_block_groups+0x149e/0x2740 [ 433.802408][ T8008] Modules linked in: [ 433.813599][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.5.561 Not tainted 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 433.828059][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.838591][ T8008] RIP: 0010:btrfs_create_pending_block_groups+0x149e/0x2740 [ 433.846332][ T8008] Code: 41 89 85 68 09 00 00 49 c7 85 80 0c 00 00 00 00 00 00 45 85 e4 0f 85 84 11 00 00 48 c7 c7 79 c5 00 92 89 de e8 e3 27 c7 fb 90 <0f> 0b 90 90 e9 31 ff ff ff 8b 7d d4 e8 a1 d4 3d fd 48 8b 45 c0 e9 [ 433.867154][ T8008] RSP: 0018:ffff88811a8f74e8 EFLAGS: 00010283 [ 433.873633][ T8008] RAX: ffffffff81207df5 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 433.882043][ T8008] RDX: ffffc90008401000 RSI: 0000000000007b3a RDI: 0000000000007b3b [ 433.890338][ T8008] RBP: ffff88811a8f7698 R08: ffffea000000000f R09: 0000000000000000 [ 433.899502][ T8008] R10: ffff888237b66028 R11: ffff88823f265640 R12: 0000000000000000 [ 433.907826][ T8008] R13: ffff8881162d8b60 R14: 0000000000000001 R15: 0000000000000000 [ 433.926989][ T8008] FS: 00007f20879186c0(0000) GS:ffff8881aa8a5000(0000) knlGS:0000000000000000 [ 433.936356][ T8008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.943394][ T8008] CR2: 00007f9f8938eb4c CR3: 000000012bd18000 CR4: 00000000003526f0 [ 433.951618][ T8008] Call Trace: [ 433.955294][ T8008] [ 433.958447][ T8008] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 433.963998][ T38] usb 2-1: Using ep0 maxpacket: 16 [ 433.965033][ T8008] ? btrfs_chunk_alloc_add_chunk_item+0x154f/0x18e0 [ 433.977035][ T8008] ? btrfs_trans_release_metadata+0x2e6/0xaa0 [ 433.983557][ T8008] __btrfs_end_transaction+0x1a1/0xb40 [ 433.989900][ T8008] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 433.996448][ T8008] btrfs_end_transaction+0x30/0x40 [ 434.002230][ T8008] btrfs_inc_block_group_ro+0xf96/0x10e0 [ 434.008230][ T8008] btrfs_relocate_block_group+0x59b/0x1c40 [ 434.021546][ T8008] btrfs_relocate_chunk+0xe5/0x670 [ 434.029485][ T8008] ? kmsan_get_metadata+0xfb/0x160 [ 434.035030][ T8008] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 434.041170][ T8008] __btrfs_balance+0x352d/0x3a30 [ 434.047058][ T8008] btrfs_balance+0x14b7/0x1e80 [ 434.052319][ T8008] btrfs_ioctl_balance+0x79d/0xdd0 [ 434.057779][ T8008] btrfs_ioctl+0xe6a/0x1340 [ 434.062779][ T8008] ? __pfx_btrfs_ioctl+0x10/0x10 [ 434.068022][ T8008] __se_sys_ioctl+0x239/0x400 [ 434.073097][ T8008] __x64_sys_ioctl+0x97/0xe0 [ 434.078020][ T8008] x64_sys_call+0x1cbc/0x3e20 [ 434.083135][ T8008] do_syscall_64+0xd9/0x210 [ 434.088048][ T8008] ? irqentry_exit+0x16/0x60 [ 434.093109][ T8008] ? clear_bhb_loop+0x40/0x90 [ 434.098117][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.103659][ T38] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.104371][ T8008] RIP: 0033:0x7f2086b8eb69 [ 434.112889][ T38] usb 2-1: config 0 has no interface number 0 [ 434.125067][ T8008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.125224][ T8008] RSP: 002b:00007f2087918038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.125388][ T8008] RAX: ffffffffffffffda RBX: 00007f2086db5fa0 RCX: 00007f2086b8eb69 [ 434.125502][ T8008] RDX: 0000200000000440 RSI: 00000000c4009420 RDI: 0000000000000003 [ 434.125608][ T8008] RBP: 00007f2086c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 434.125708][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.125805][ T8008] R13: 0000000000000000 R14: 00007f2086db5fa0 R15: 00007fffac196cf8 [ 434.125948][ T8008] [ 434.126007][ T8008] ---[ end trace 0000000000000000 ]--- [ 434.126111][ T8008] BTRFS info (device loop5 state A): dumping space info: [ 434.126231][ T8008] BTRFS info (device loop5 state A): space_info DATA+METADATA (sub-group id 0) has 1769472 free, is full [ 434.126403][ T8008] BTRFS info (device loop5 state A): space_info total=3276800, used=61440, pinned=0, reserved=0, may_use=1445888, readonly=0 zone_unusable=0 [ 434.126615][ T8008] BTRFS info (device loop5 state A): space_info SYSTEM (sub-group id 0) has 8253440 free, is not full [ 434.126777][ T8008] BTRFS info (device loop5 state A): space_info total=12451840, used=4096, pinned=0, reserved=4096, may_use=0, readonly=4190208 zone_unusable=0 [ 434.126993][ T8008] BTRFS info (device loop5 state A): global_block_rsv: size 1441792 reserved 1441792 [ 434.127134][ T8008] BTRFS info (device loop5 state A): trans_block_rsv: size 0 reserved 0 [ 434.296553][ T8008] BTRFS info (device loop5 state A): chunk_block_rsv: size 0 reserved 0 [ 434.305381][ T8008] BTRFS info (device loop5 state A): delayed_block_rsv: size 0 reserved 0 [ 434.314597][ T8008] BTRFS info (device loop5 state A): delayed_refs_rsv: size 327680 reserved 4096 [ 434.331589][ T8008] BTRFS: error (device loop5 state A) in btrfs_create_pending_block_groups:2789: errno=-28 No space left [ 434.346068][ T8008] BTRFS info (device loop5 state EA): forced readonly [ 434.353586][ T8008] BTRFS: error (device loop5 state EA) in btrfs_create_pending_block_groups:2801: errno=-28 No space left [ 434.365573][ T8008] BTRFS: error (device loop5 state EA) in __add_block_group_free_space:1434: errno=-28 No space left [ 434.377517][ T8008] BTRFS info (device loop5 state EA): balance: ended with status: -30 [ 434.634973][ T6689] BTRFS info (device loop5 state EA): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 434.661511][ T38] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 434.671461][ T38] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.681624][ T38] usb 2-1: Product: syz [ 434.686273][ T38] usb 2-1: Manufacturer: syz [ 434.691065][ T38] usb 2-1: SerialNumber: syz [ 434.907966][ T38] usb 2-1: config 0 descriptor?? [ 434.970964][ T38] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 435.184613][ T8044] netlink: 92 bytes leftover after parsing attributes in process `syz.3.570'. [ 435.616598][ T8048] io-wq is not configured for unbound workers [ 436.520710][ T38] gspca_spca1528: reg_w err -71 [ 436.533139][ T38] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 436.696270][ T38] usb 2-1: USB disconnect, device number 11 [ 438.804614][ T8086] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 438.889133][ T8079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.900062][ T8079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.004370][ T8084] netlink: 'syz.1.581': attribute type 29 has an invalid length. [ 439.008814][ T8089] netlink: 548 bytes leftover after parsing attributes in process `syz.1.581'. [ 439.280065][ T8079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.291786][ T8079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.403515][ T8088] netlink: 'syz.1.581': attribute type 29 has an invalid length. [ 439.638674][ T8079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.656111][ T8079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.875956][ T8079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.887309][ T8079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.300042][ T8100] loop1: detected capacity change from 0 to 128 [ 440.503049][ T4176] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.511578][ T4176] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.601293][ T4176] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.610642][ T4176] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.735144][ T4176] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.745474][ T4176] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.897437][ T3684] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.906937][ T3684] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.986151][ T8100] syz.1.585: attempt to access beyond end of device [ 440.986151][ T8100] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 441.060189][ T8100] syz.1.585: attempt to access beyond end of device [ 441.060189][ T8100] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 441.177054][ T8110] pimreg: entered allmulticast mode [ 441.212407][ T8100] syz.1.585: attempt to access beyond end of device [ 441.212407][ T8100] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 441.363183][ T8110] pimreg: left allmulticast mode [ 442.290678][ T8128] loop0: detected capacity change from 0 to 128 [ 442.423917][ T8128] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.581456][ T8128] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 442.889850][ T30] audit: type=1804 audit(1754128010.494:10): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.592" name="/newroot/130/mnt/file0" dev="loop0" ino=12 res=1 errno=0 [ 443.635702][ T5824] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 444.889042][ T5871] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 445.112509][ T5871] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 445.121060][ T5871] usb 6-1: config 0 has no interface number 0 [ 445.258293][ T5871] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 445.267987][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.282242][ T5871] usb 6-1: Product: syz [ 445.288764][ T5871] usb 6-1: Manufacturer: syz [ 445.293896][ T5871] usb 6-1: SerialNumber: syz [ 445.459589][ T5871] usb 6-1: config 0 descriptor?? [ 446.006002][ T5871] usb 6-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 446.240050][ T5871] usb 6-1: failed to fetch extended address, random address set [ 446.466349][ T5871] usb 6-1: USB disconnect, device number 3 [ 447.667235][ T8198] loop5: detected capacity change from 0 to 16 [ 449.894536][ T8218] trusted_key: syz.1.617 sent an empty control message without MSG_MORE. [ 450.538613][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.618'. [ 450.856516][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 452.558812][ T8242] loop4: detected capacity change from 0 to 1024 [ 452.725214][ T8242] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 453.016063][ T8242] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.623: Invalid block bitmap block 0 in block_group 0 [ 453.133561][ T8242] EXT4-fs (loop4): Remounting filesystem read-only [ 453.140913][ T8242] Quota error (device loop4): write_blk: dquota write failed [ 453.149158][ T8242] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 453.164468][ T8242] EXT4-fs (loop4): 1 orphan inode deleted [ 453.174292][ T8242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.846412][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.637113][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 455.887051][ T8266] loop1: detected capacity change from 0 to 32768 [ 456.172285][ T8269] loop4: detected capacity change from 0 to 32768 [ 456.223070][ T8266] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.630 (8266) [ 456.264075][ T8266] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 456.274870][ T8266] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 456.283955][ T8266] BTRFS info (device loop1): using free-space-tree [ 456.386551][ T110] ERROR: (device loop4): diFree: numfree > numinos [ 456.386551][ T110] [ 456.421135][ T110] ERROR: (device loop4): remounting filesystem as read-only [ 456.766566][ T8266] BTRFS info (device loop1 state M): max_inline set to 0 [ 456.884627][ T5815] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 457.803699][ T8292] netlink: 'syz.3.635': attribute type 5 has an invalid length. [ 459.127552][ T8320] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 459.759588][ T8328] program syz.4.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.772369][ T8328] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 461.529836][ T8350] netlink: 48 bytes leftover after parsing attributes in process `syz.5.653'. [ 463.580129][ T8371] use of bytesused == 0 is deprecated and will be removed in the future, [ 463.589360][ T8371] use the actual size instead. [ 467.129276][ T8402] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 467.298586][ T5872] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 467.344199][ T8409] netlink: 3 bytes leftover after parsing attributes in process `syz.4.668'. [ 467.392615][ T8402] bond3: entered promiscuous mode [ 467.409040][ T8402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.452536][ T8409] batadv1: entered promiscuous mode [ 467.457997][ T8409] batadv1: entered allmulticast mode [ 467.472346][ T8409] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 467.480034][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 467.489085][ T8409] bond3: (slave batadv1): making interface the new active one [ 467.500105][ T8409] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 467.566558][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.577928][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.588275][ T5872] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 467.603277][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.618209][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 467.767203][ T5872] usb 6-1: config 0 descriptor?? [ 469.075505][ T5872] uclogic 0003:256C:006D.0007: v1 frame probing failed: -71 [ 469.083506][ T5872] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 469.086492][ T8424] loop0: detected capacity change from 0 to 16 [ 469.091609][ T5872] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 469.220312][ T8424] erofs (device loop0): rootino(nid 36) is not a directory(i_mode 26222) [ 469.293805][ T5872] usb 6-1: USB disconnect, device number 4 [ 471.524889][ T8455] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 471.762073][ T8458] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 472.584863][ T8470] loop4: detected capacity change from 0 to 512 [ 472.635129][ T8470] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 472.672906][ T8470] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 473.322238][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 473.624336][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 473.636312][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 473.650324][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 473.661209][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.768562][ T8480] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 473.835077][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 474.642033][ T24] usb 5-1: USB disconnect, device number 7 [ 475.250580][ T8503] loop5: detected capacity change from 0 to 1024 [ 475.315536][ T8503] EXT4-fs: Ignoring removed nobh option [ 475.321934][ T8503] EXT4-fs: Ignoring removed bh option [ 475.470414][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.477310][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.575687][ T8503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.150625][ T6689] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.922465][ T8528] pim6reg1: entered allmulticast mode [ 477.180812][ T8530] loop4: detected capacity change from 0 to 256 [ 477.274845][ T8530] exfat: Bad value for 'uid' [ 477.279731][ T8530] exfat: Bad value for 'uid' [ 477.884638][ T8542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.712'. [ 477.894254][ T8542] netlink: 'syz.0.712': attribute type 7 has an invalid length. [ 477.902424][ T8542] netlink: 'syz.0.712': attribute type 8 has an invalid length. [ 477.910261][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 478.041082][ T8535] loop1: detected capacity change from 0 to 4096 [ 478.096332][ T8535] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 479.203670][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 479.491526][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 479.625935][ T24] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 479.770628][ T24] usb 4-1: string descriptor 0 read error: -22 [ 479.778364][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 479.792893][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.220881][ T24] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 480.873746][ T24] usb 4-1: device descriptor read/64, error -71 [ 481.162218][ T24] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 481.472981][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 481.515859][ T24] usb 4-1: device firmware changed [ 481.603124][ T24] usb 4-1: USB disconnect, device number 4 [ 481.998146][ T8584] loop0: detected capacity change from 0 to 64 [ 484.710117][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 484.720068][ T8616] netlink: 'syz.1.741': attribute type 15 has an invalid length. [ 484.772226][ T4312] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.842406][ T4312] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.851593][ T4312] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.973419][ T4312] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.053890][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 485.063445][ T8616] netlink: 'syz.1.741': attribute type 15 has an invalid length. [ 485.473248][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.743'. [ 487.901200][ T30] audit: type=1326 audit(1754128311.513:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 487.924008][ T30] audit: type=1326 audit(1754128311.513:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 487.949219][ T30] audit: type=1326 audit(1754128311.513:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 487.949500][ T30] audit: type=1326 audit(1754128311.533:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 488.003472][ T30] audit: type=1326 audit(1754128311.533:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 488.028111][ T30] audit: type=1326 audit(1754128311.543:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 488.110687][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 488.507158][ T30] audit: type=1326 audit(1754128311.783:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 488.530828][ T30] audit: type=1326 audit(1754128311.783:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8655 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 489.242016][ T5871] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 489.480737][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 489.553397][ T5871] usb 2-1: config 0 has no interfaces? [ 489.559197][ T5871] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 489.568821][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.675258][ T5871] usb 2-1: config 0 descriptor?? [ 489.970664][ T8682] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 489.985483][ T8682] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 489.993755][ T8682] gretap1: entered promiscuous mode [ 489.994176][ T24] usb 2-1: USB disconnect, device number 12 [ 489.999139][ T8682] gretap1: entered allmulticast mode [ 490.902734][ T8692] netlink: 24 bytes leftover after parsing attributes in process `syz.5.766'. [ 490.912316][ T8692] netlink: 24 bytes leftover after parsing attributes in process `syz.5.766'. [ 491.445124][ T8702] loop5: detected capacity change from 0 to 128 [ 491.468138][ T8698] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 491.604686][ T30] audit: type=1800 audit(1754128315.213:19): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.768" name="file1" dev="loop5" ino=1048611 res=0 errno=0 [ 491.933526][ T8702] syz.5.768: attempt to access beyond end of device [ 491.933526][ T8702] loop5: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 491.947721][ T8702] syz.5.768: attempt to access beyond end of device [ 491.947721][ T8702] loop5: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 491.962844][ T8702] syz.5.768: attempt to access beyond end of device [ 491.962844][ T8702] loop5: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 491.984217][ T8702] Buffer I/O error on dev loop5, logical block 142, lost async page write [ 491.995594][ T8702] syz.5.768: attempt to access beyond end of device [ 491.995594][ T8702] loop5: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 492.009479][ T8702] Buffer I/O error on dev loop5, logical block 143, lost async page write [ 492.018433][ T8702] syz.5.768: attempt to access beyond end of device [ 492.018433][ T8702] loop5: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 492.032147][ T8702] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 492.040926][ T8702] syz.5.768: attempt to access beyond end of device [ 492.040926][ T8702] loop5: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 492.055115][ T8702] Buffer I/O error on dev loop5, logical block 145, lost async page write [ 492.064032][ T8702] syz.5.768: attempt to access beyond end of device [ 492.064032][ T8702] loop5: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 492.084071][ T8702] Buffer I/O error on dev loop5, logical block 146, lost async page write [ 492.095329][ T8702] syz.5.768: attempt to access beyond end of device [ 492.095329][ T8702] loop5: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 492.109177][ T8702] Buffer I/O error on dev loop5, logical block 147, lost async page write [ 492.118120][ T8702] syz.5.768: attempt to access beyond end of device [ 492.118120][ T8702] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 492.131893][ T8702] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 492.140671][ T8702] syz.5.768: attempt to access beyond end of device [ 492.140671][ T8702] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 492.154470][ T8702] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 492.164131][ T8702] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 492.173067][ T8702] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 494.608730][ T8734] loop1: detected capacity change from 0 to 136 [ 494.661158][ T8734] iso9660: Unknown parameter 'E'' [ 500.052786][ T8791] loop1: detected capacity change from 0 to 512 [ 500.736834][ T8791] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.801: casefold flag without casefold feature [ 500.848137][ T8791] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.801: couldn't read orphan inode 15 (err -117) [ 500.995345][ T8791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.258108][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.802782][ T8822] netlink: 'syz.4.810': attribute type 21 has an invalid length. [ 504.818343][ T8822] netlink: 132 bytes leftover after parsing attributes in process `syz.4.810'. [ 504.882677][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.810'. [ 504.892403][ T8822] netlink: 'syz.4.810': attribute type 7 has an invalid length. [ 504.900257][ T8822] netlink: 'syz.4.810': attribute type 8 has an invalid length. [ 504.908395][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 504.935322][ T8822] gretap0: entered promiscuous mode [ 504.946652][ T8822] batadv_slave_1: entered promiscuous mode [ 504.956193][ T8822] erspan0: entered promiscuous mode [ 505.064476][ T8783] Set syz1 is full, maxelem 65536 reached [ 505.917335][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.927487][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.283386][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.321114][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.456887][ T4176] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.466648][ T4176] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.613380][ T4176] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.624161][ T4176] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.702429][ T4176] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.712393][ T4176] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.724478][ T8841] netlink: 'syz.0.819': attribute type 10 has an invalid length. [ 507.734244][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.819'. [ 507.789922][ T4176] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.799398][ T4176] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.883534][ T367] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.896168][ T367] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.121016][ T367] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.132967][ T367] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.352509][ T367] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.372062][ T367] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.500396][ T367] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.511498][ T367] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.927773][ T367] bridge_slave_1: left allmulticast mode [ 508.933863][ T367] bridge_slave_1: left promiscuous mode [ 508.940585][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.042963][ T367] bridge_slave_0: left allmulticast mode [ 509.048867][ T367] bridge_slave_0: left promiscuous mode [ 509.056346][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.646323][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.672479][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.732350][ T367] bond0 (unregistering): Released all slaves [ 510.285450][ T367] hsr_slave_0: left promiscuous mode [ 510.326025][ T367] hsr_slave_1: left promiscuous mode [ 510.334535][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.344381][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.413462][ T367] veth1_macvtap: left promiscuous mode [ 510.419382][ T367] veth0_macvtap: left promiscuous mode [ 510.425944][ T367] veth1_vlan: left promiscuous mode [ 510.431507][ T367] veth0_vlan: left promiscuous mode [ 511.374564][ T8856] netlink: 36 bytes leftover after parsing attributes in process `syz.3.826'. [ 511.742361][ T367] team0 (unregistering): Port device team_slave_1 removed [ 511.785004][ T367] team0 (unregistering): Port device team_slave_0 removed [ 512.029472][ T8866] loop4: detected capacity change from 0 to 128 [ 512.430138][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.825'. [ 512.763777][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.799059][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.809948][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.854333][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.913808][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.446694][ T8872] chnl_net:caif_netlink_parms(): no params data found [ 515.012976][ T49] Bluetooth: hci1: command tx timeout [ 515.619093][ T8916] bridge_slave_0: left allmulticast mode [ 515.630156][ T8916] bridge_slave_0: left promiscuous mode [ 515.637405][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.677737][ T8916] bridge_slave_1: left allmulticast mode [ 515.685913][ T8916] bridge_slave_1: left promiscuous mode [ 515.693449][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.821129][ T8916] bond0: (slave bond_slave_0): Releasing backup interface [ 515.907874][ T8916] bond0: (slave bond_slave_1): Releasing backup interface [ 515.979654][ T8916] team0: Port device team_slave_0 removed [ 516.043089][ T8916] team0: Port device team_slave_1 removed [ 516.051222][ T8916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.066965][ T8916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.162166][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 516.329934][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.337720][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.349683][ T8872] bridge_slave_0: entered allmulticast mode [ 516.362919][ T8872] bridge_slave_0: entered promiscuous mode [ 516.380971][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 516.413208][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 516.422411][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.433053][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.516914][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.524824][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.527128][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.533460][ T8872] bridge_slave_1: entered allmulticast mode [ 516.542122][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.557341][ T8872] bridge_slave_1: entered promiscuous mode [ 516.560126][ T24] usb 4-1: Product: syz [ 516.569291][ T24] usb 4-1: Manufacturer: syz [ 516.574328][ T24] usb 4-1: SerialNumber: syz [ 516.824378][ T8927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.092108][ T49] Bluetooth: hci1: command tx timeout [ 517.184150][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.200821][ T24] usb 4-1: 0:2 : does not exist [ 517.228917][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.553522][ T8872] team0: Port device team_slave_0 added [ 517.637212][ T8872] team0: Port device team_slave_1 added [ 518.039754][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.047287][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.074899][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.265892][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.274106][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.304493][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.420665][ T24] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 518.694132][ T24] usb 4-1: USB disconnect, device number 5 [ 518.875146][ T7914] udevd[7914]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.111966][ T8872] hsr_slave_0: entered promiscuous mode [ 519.123451][ T8872] hsr_slave_1: entered promiscuous mode [ 519.189217][ T49] Bluetooth: hci1: command tx timeout [ 521.252247][ T49] Bluetooth: hci1: command tx timeout [ 521.609670][ T8962] overlayfs: failed to clone upperpath [ 522.035179][ T8872] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 522.161164][ T8872] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 522.264518][ T8872] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 522.381154][ T8872] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 522.696740][ T8984] syzkaller0: entered promiscuous mode [ 522.702891][ T8984] syzkaller0: entered allmulticast mode [ 524.166849][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.429311][ T8872] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.472232][ T38] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 524.548404][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.556182][ T3633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.653211][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.660797][ T3633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.695281][ T38] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.707187][ T38] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 524.813011][ T38] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.823816][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.833138][ T38] usb 4-1: Product: syz [ 524.842708][ T38] usb 4-1: Manufacturer: syz [ 524.847551][ T38] usb 4-1: SerialNumber: syz [ 525.043671][ T8872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.248579][ T8999] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.954420][ T8999] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 526.227282][ T38] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 526.234488][ T38] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 526.242771][ T38] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 526.463128][ T38] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 526.510579][ T38] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 526.585892][ T38] wwan wwan0: port wwan0mbim0 attached [ 526.723035][ T9021] veth3: entered promiscuous mode [ 526.881401][ T38] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 526.993991][ T9024] loop4: detected capacity change from 0 to 512 [ 527.020753][ T9024] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8 [ 527.107763][ T38] usb 4-1: USB disconnect, device number 6 [ 527.116215][ T38] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 527.242509][ T38] wwan wwan0: port wwan0mbim0 disconnected [ 527.786600][ T8872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.256114][ T9037] loop5: detected capacity change from 0 to 1024 [ 530.671283][ T30] audit: type=1326 audit(1754128354.263:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3d8eb69 code=0x7fc00000 [ 530.697817][ T30] audit: type=1326 audit(1754128354.263:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2de3d8eb69 code=0x7fc00000 [ 530.721184][ T30] audit: type=1326 audit(1754128354.263:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3d8eb69 code=0x7fc00000 [ 530.743773][ T30] audit: type=1326 audit(1754128354.263:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3d8eb69 code=0x7fc00000 [ 530.766507][ T30] audit: type=1326 audit(1754128354.263:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3d8eb69 code=0x7fc00000 [ 530.791453][ T30] audit: type=1326 audit(1754128354.263:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3d8eb69 code=0x7fc00000 [ 530.815054][ T30] audit: type=1326 audit(1754128354.263:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3d8eb69 code=0x7fc00000 [ 530.837651][ T30] audit: type=1326 audit(1754128354.263:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3d8eb69 code=0x7fc00000 [ 530.861524][ T30] audit: type=1326 audit(1754128354.263:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3d8eb69 code=0x7fc00000 [ 530.886375][ T30] audit: type=1326 audit(1754128354.263:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de3d8eb69 code=0x7fc00000 [ 531.139298][ T8872] veth0_vlan: entered promiscuous mode [ 531.381264][ T8872] veth1_vlan: entered promiscuous mode [ 531.603930][ T9084] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.889'. [ 531.615348][ T9084] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.889'. [ 531.624851][ T9084] netlink: 584 bytes leftover after parsing attributes in process `syz.4.889'. [ 531.735995][ T9085] Illegal XDP return value 3423393042 on prog (id 107) dev syz_tun, expect packet loss! [ 531.800433][ T8872] veth0_macvtap: entered promiscuous mode [ 531.923996][ T8872] veth1_macvtap: entered promiscuous mode [ 532.064099][ T5871] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 532.105656][ T8872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.233159][ T8872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.292169][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.302906][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.303089][ T3684] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.388676][ T5871] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 532.398675][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 532.403359][ T3684] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.407157][ T5871] usb 5-1: SerialNumber: syz [ 532.498626][ T3684] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.563708][ T3684] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.838621][ T5871] usb 5-1: 0:2 : does not exist [ 532.844568][ T5871] usb 5-1: unit 255 not found! [ 533.059232][ T5871] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 533.244410][ T5871] usb 5-1: USB disconnect, device number 8 [ 533.700687][ T7914] udevd[7914]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.195389][ T9114] loop5: detected capacity change from 0 to 32768 [ 535.206068][ T9114] XFS: ikeep mount option is deprecated. [ 535.340467][ T9114] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 535.580413][ T9114] XFS (loop5): Ending clean mount [ 535.598380][ T9114] XFS (loop5): Quotacheck needed: Please wait. [ 535.711230][ T9114] XFS (loop5): Quotacheck: Done. [ 536.074164][ T6689] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 537.352606][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.359514][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.713778][ T9138] loop4: detected capacity change from 0 to 40427 [ 537.832181][ T9138] F2FS-fs (loop4): invalid crc value [ 538.196360][ T9138] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 538.383591][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 538.383677][ T30] audit: type=1804 audit(1754128361.973:36): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.903" name="/newroot/180/bus/file1" dev="loop4" ino=10 res=1 errno=0 [ 538.516954][ T5821] bio_check_eod: 4 callbacks suppressed [ 538.517043][ T5821] syz-executor: attempt to access beyond end of device [ 538.517043][ T5821] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 538.541024][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: syz-executor Tainted: G W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 538.541226][ T5821] Tainted: [W]=WARN [ 538.541278][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.541379][ T5821] Call Trace: [ 538.541432][ T5821] [ 538.541488][ T5821] __dump_stack+0x26/0x30 [ 538.541674][ T5821] dump_stack_lvl+0x1df/0x270 [ 538.541867][ T5821] dump_stack+0x1e/0x25 [ 538.542029][ T5821] f2fs_handle_critical_error+0xa6f/0xc20 [ 538.542253][ T5821] f2fs_stop_checkpoint+0x65/0x80 [ 538.542447][ T5821] f2fs_write_end_io+0xb4b/0x1920 [ 538.542645][ T5821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.542840][ T5821] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 538.543029][ T5821] bio_endio+0xe27/0xf80 [ 538.543217][ T5821] submit_bio_noacct+0x214/0x2710 [ 538.543476][ T5821] submit_bio+0x5a9/0x5d0 [ 538.543670][ T5821] f2fs_submit_write_bio+0x92/0x250 [ 538.543849][ T5821] __submit_merged_bio+0x16f/0x6a0 [ 538.544006][ T5821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.544192][ T5821] __submit_merged_write_cond+0x458/0x9a0 [ 538.544404][ T5821] f2fs_write_data_pages+0x4bb2/0x5480 [ 538.544742][ T5821] ? kmsan_get_metadata+0xfb/0x160 [ 538.544922][ T5821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.545109][ T5821] ? folios_put_refs+0x11/0xb10 [ 538.545303][ T5821] ? filter_irq_stacks+0x49/0x190 [ 538.545536][ T5821] ? stack_depot_save_flags+0x35/0x7b0 [ 538.545698][ T5821] ? lru_gen_add_folio+0xd66/0x1190 [ 538.545914][ T5821] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 538.546143][ T5821] ? kmsan_get_metadata+0xfb/0x160 [ 538.546305][ T5821] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.546483][ T5821] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 538.546668][ T5821] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 538.546845][ T5821] do_writepages+0x3f2/0x860 [ 538.546988][ T5821] ? _raw_spin_unlock+0x30/0x50 [ 538.547139][ T5821] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 538.547383][ T5821] filemap_fdatawrite+0x207/0x260 [ 538.547622][ T5821] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 538.547838][ T5821] f2fs_write_checkpoint+0xfe2/0x2b00 [ 538.548148][ T5821] kill_f2fs_super+0x2ff/0x970 [ 538.548356][ T5821] ? __pfx_kill_f2fs_super+0x10/0x10 [ 538.548541][ T5821] deactivate_locked_super+0xcb/0x3c0 [ 538.548705][ T5821] deactivate_super+0x12f/0x140 [ 538.548852][ T5821] cleanup_mnt+0x6fb/0x780 [ 538.549022][ T5821] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 538.549243][ T5821] ? __pfx___cleanup_mnt+0x10/0x10 [ 538.549434][ T5821] __cleanup_mnt+0x22/0x30 [ 538.549615][ T5821] task_work_run+0x209/0x2b0 [ 538.549783][ T5821] exit_to_user_mode_loop+0x2a6/0x330 [ 538.549944][ T5821] do_syscall_64+0x1e3/0x210 [ 538.550125][ T5821] ? irqentry_exit+0x16/0x60 [ 538.550286][ T5821] ? clear_bhb_loop+0x40/0x90 [ 538.550441][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.550592][ T5821] RIP: 0033:0x7f2de3d8fe97 [ 538.550694][ T5821] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 538.550815][ T5821] RSP: 002b:00007ffe05fbe508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 538.550945][ T5821] RAX: 0000000000000000 RBX: 00007f2de3e11bdd RCX: 00007f2de3d8fe97 [ 538.551040][ T5821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe05fbe5c0 [ 538.551125][ T5821] RBP: 00007ffe05fbe5c0 R08: 0000000000000000 R09: 0000000000000000 [ 538.551213][ T5821] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe05fbf650 [ 538.551303][ T5821] R13: 00007f2de3e11bdd R14: 00000000000836e5 R15: 00007ffe05fbf690 [ 538.551433][ T5821] [ 538.909185][ T5821] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 541.474011][ T9176] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 541.686785][ T9182] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 541.697397][ T9182] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 541.724149][ T9182] bond4: (slave vcan1): making interface the new active one [ 541.738558][ T9182] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 541.898214][ T9179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.082372][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.090733][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.467458][ T3684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.475723][ T3684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.779733][ T5169] udevd[5169]: worker [7914] terminated by signal 33 (Unknown signal 33) [ 545.810807][ T5169] udevd[5169]: worker [7914] failed while handling '/devices/virtual/block/loop5' [ 546.235774][ T9234] raw_sendmsg: syz.6.823 forgot to set AF_INET. Fix it! [ 546.259328][ T9233] geneve2: entered promiscuous mode [ 546.287570][ T5049] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.356181][ T5049] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.409188][ T5049] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.458291][ T1330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.016836][ T9241] batadv1: entered promiscuous mode [ 547.364822][ T9248] netlink: 212 bytes leftover after parsing attributes in process `syz.0.936'. [ 547.408637][ T9249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.826350][ T9254] netlink: 'syz.6.938': attribute type 1 has an invalid length. [ 547.835560][ T9254] netlink: 'syz.6.938': attribute type 4 has an invalid length. [ 547.843687][ T9254] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.938'. [ 547.892285][ T9253] bridge0: port 3(syz_tun) entered disabled state [ 548.040726][ T9253] syz_tun (unregistering): left allmulticast mode [ 548.051185][ T9253] syz_tun (unregistering): left promiscuous mode [ 548.058379][ T9253] bridge0: port 3(syz_tun) entered disabled state [ 551.365199][ T5872] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 551.603573][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 551.739374][ T5872] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 551.749828][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.759467][ T5872] usb 4-1: Product: syz [ 551.764044][ T5872] usb 4-1: Manufacturer: syz [ 551.768855][ T5872] usb 4-1: SerialNumber: syz [ 552.045069][ T5872] usb 4-1: config 0 descriptor?? [ 552.096617][ T5872] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 552.527593][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 552.750182][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 552.842868][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 552.855768][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 552.868518][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 552.882437][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 552.891943][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.015220][ T24] usb 7-1: config 0 descriptor?? [ 553.579874][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x2 [ 553.594946][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x6 [ 553.603474][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x6 [ 553.611030][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x6 [ 553.623899][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x6 [ 553.669863][ T9318] fuse: Bad value for 'fd' [ 554.094891][ T24] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 554.107148][ T24] microsoft 0003:045E:07DA.0008: no inputs found [ 554.114992][ T24] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 554.194175][ T5872] gspca_topro: reg_r err -71 [ 554.198989][ T5872] gspca_topro: Sensor soi763a [ 554.301760][ T5872] usb 4-1: USB disconnect, device number 7 [ 554.354380][ T24] usb 7-1: USB disconnect, device number 2 [ 554.709335][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'. [ 554.752061][ T3684] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.823286][ T3684] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.880607][ T3684] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.887279][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'. [ 554.958437][ T3882] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.158311][ T9327] fido_id[9327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 556.854408][ T9361] Invalid ELF header magic: != ELF [ 558.166192][ T9376] sctp: [Deprecated]: syz.3.976 (pid 9376) Use of int in maxseg socket option. [ 558.166192][ T9376] Use struct sctp_assoc_value instead [ 558.885397][ T9387] netlink: 'syz.4.981': attribute type 2 has an invalid length. [ 563.144701][ T9474] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 563.153042][ T9474] netlink: 'syz.4.989': attribute type 4 has an invalid length. [ 563.160898][ T9474] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.989'. [ 564.080419][ T9480] loop6: detected capacity change from 0 to 256 [ 564.244400][ T9479] loop3: detected capacity change from 0 to 1024 [ 564.338634][ T9479] ext3: Unknown parameter 'euid<00000000000000000000' [ 564.774529][ T9480] FAT-fs (loop6): Directory bread(block 64) failed [ 564.785308][ T9480] FAT-fs (loop6): Directory bread(block 65) failed [ 564.793591][ T9480] FAT-fs (loop6): Directory bread(block 66) failed [ 564.800354][ T9480] FAT-fs (loop6): Directory bread(block 67) failed [ 564.807520][ T9480] FAT-fs (loop6): Directory bread(block 68) failed [ 564.814472][ T9480] FAT-fs (loop6): Directory bread(block 69) failed [ 564.821499][ T9480] FAT-fs (loop6): Directory bread(block 70) failed [ 564.828544][ T9480] FAT-fs (loop6): Directory bread(block 71) failed [ 564.837209][ T9480] FAT-fs (loop6): Directory bread(block 72) failed [ 564.844447][ T9480] FAT-fs (loop6): Directory bread(block 73) failed [ 565.343192][ T9480] syz.6.991: attempt to access beyond end of device [ 565.343192][ T9480] loop6: rw=0, sector=1192, nr_sectors = 1 limit=256 [ 565.357782][ T30] audit: type=1800 audit(1754128388.953:37): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.991" name="file1" dev="loop6" ino=1048616 res=0 errno=0 [ 567.328516][ T9519] ipip0: entered promiscuous mode [ 567.584590][ T9515] loop4: detected capacity change from 0 to 4096 [ 567.789606][ T9515] NILFS (loop4): invalid segment: Inconsistency found [ 567.797098][ T9515] NILFS (loop4): trying rollback from an earlier position [ 567.922801][ T9515] NILFS (loop4): recovery complete [ 568.016319][ T9527] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 571.699937][ T9563] loop6: detected capacity change from 0 to 32768 [ 571.968433][ T9563] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 571.968600][ T9563] allowing incompatible features above 0.0: (unknown version) [ 571.968701][ T9563] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 572.012960][ T9563] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 572.021405][ T9563] bcachefs (loop6): initializing new filesystem [ 572.050936][ T9563] bcachefs (loop6): going read-write [ 572.073615][ T9563] bcachefs (loop6): marking superblocks [ 572.129908][ T9563] bcachefs (loop6): initializing freespace [ 572.166552][ T9563] bcachefs (loop6): done initializing freespace [ 572.188406][ T9563] bcachefs (loop6): reading snapshots table [ 572.194984][ T9563] bcachefs (loop6): reading snapshots done [ 572.390517][ T9563] bcachefs (loop6): done starting filesystem [ 572.443952][ T9577] fuse: Bad value for 'fd' [ 572.634177][ T9563] bcachefs (loop6): shutdown by ioctl type 1emergency read only at seq 3 [ 572.643706][ T38] bcachefs (loop6): going read-only [ 572.649143][ T38] bcachefs (loop6): finished waiting for writes to stop [ 572.835409][ T8872] bcachefs (loop6): shutting down [ 572.844163][ T38] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3 [ 572.853946][ T38] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3 [ 572.927054][ T38] bcachefs (loop6): unclean shutdown complete, journal seq 3 [ 573.009335][ T38] bcachefs (loop6): done going read-only, filesystem not clean [ 573.129702][ T8872] bcachefs (loop6): shutdown complete [ 573.359086][ T9590] loop5: detected capacity change from 0 to 16 [ 573.420578][ T9590] erofs (device loop5): mounted with root inode @ nid 36. [ 573.609965][ T9590] erofs (device loop5): readahead error at folio 86 @ nid 36 [ 573.618289][ T9590] erofs (device loop5): readahead error at folio 84 @ nid 36 [ 573.626883][ T9590] erofs (device loop5): readahead error at folio 80 @ nid 36 [ 573.635168][ T9590] erofs (device loop5): readahead error at folio 74 @ nid 36 [ 573.643032][ T9590] erofs (device loop5): readahead error at folio 72 @ nid 36 [ 573.650984][ T9590] erofs (device loop5): readahead error at folio 70 @ nid 36 [ 573.659613][ T9590] erofs (device loop5): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 573.668543][ T9590] erofs (device loop5): readahead error at folio 63 @ nid 36 [ 573.676391][ T9590] erofs (device loop5): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 573.688745][ T9590] erofs (device loop5): readahead error at folio 62 @ nid 36 [ 573.698203][ T9590] erofs (device loop5): readahead error at folio 58 @ nid 36 [ 573.706298][ T9590] erofs (device loop5): readahead error at folio 57 @ nid 36 [ 573.714660][ T9590] erofs (device loop5): readahead error at folio 54 @ nid 36 [ 573.722665][ T9590] erofs (device loop5): readahead error at folio 53 @ nid 36 [ 573.730396][ T9590] erofs (device loop5): readahead error at folio 52 @ nid 36 [ 573.738318][ T9590] erofs (device loop5): readahead error at folio 51 @ nid 36 [ 573.746118][ T9590] erofs (device loop5): bogus lookback distance 363 @ lcn 50 of nid 36 [ 573.755193][ T9590] erofs (device loop5): readahead error at folio 50 @ nid 36 [ 573.763181][ T9590] erofs (device loop5): readahead error at folio 47 @ nid 36 [ 573.770826][ T9590] erofs (device loop5): readahead error at folio 46 @ nid 36 [ 573.779246][ T9590] erofs (device loop5): readahead error at folio 40 @ nid 36 [ 573.790538][ T9590] erofs (device loop5): readahead error at folio 39 @ nid 36 [ 573.799490][ T9590] erofs (device loop5): readahead error at folio 38 @ nid 36 [ 573.807974][ T9590] erofs (device loop5): readahead error at folio 34 @ nid 36 [ 573.816353][ T9590] erofs (device loop5): readahead error at folio 32 @ nid 36 [ 573.824573][ T9590] erofs (device loop5): readahead error at folio 30 @ nid 36 [ 573.832596][ T9590] erofs (device loop5): readahead error at folio 27 @ nid 36 [ 573.840228][ T9590] erofs (device loop5): readahead error at folio 26 @ nid 36 [ 573.848001][ T9590] erofs (device loop5): readahead error at folio 25 @ nid 36 [ 573.856221][ T9590] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 573.864003][ T9590] erofs (device loop5): readahead error at folio 23 @ nid 36 [ 573.872321][ T9590] erofs (device loop5): readahead error at folio 22 @ nid 36 [ 573.880594][ T9590] erofs (device loop5): readahead error at folio 21 @ nid 36 [ 573.888381][ T9590] erofs (device loop5): readahead error at folio 20 @ nid 36 [ 573.899102][ T9590] erofs (device loop5): readahead error at folio 18 @ nid 36 [ 573.908748][ T9590] erofs (device loop5): readahead error at folio 12 @ nid 36 [ 573.916662][ T9590] erofs (device loop5): readahead error at folio 10 @ nid 36 [ 573.925203][ T9590] erofs (device loop5): readahead error at folio 6 @ nid 36 [ 573.932974][ T9590] erofs (device loop5): readahead error at folio 4 @ nid 36 [ 573.940997][ T9590] erofs (device loop5): invalid logical cluster 0 at nid 36 [ 573.948728][ T9590] erofs (device loop5): readahead error at folio 0 @ nid 36 [ 573.956955][ T9590] syz.5.1022: attempt to access beyond end of device [ 573.956955][ T9590] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 573.972035][ T9590] syz.5.1022: attempt to access beyond end of device [ 573.972035][ T9590] loop5: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 573.986596][ T9590] syz.5.1022: attempt to access beyond end of device [ 573.986596][ T9590] loop5: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 574.004897][ T9590] syz.5.1022: attempt to access beyond end of device [ 574.004897][ T9590] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 574.020643][ T9590] syz.5.1022: attempt to access beyond end of device [ 574.020643][ T9590] loop5: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 574.036043][ T9590] syz.5.1022: attempt to access beyond end of device [ 574.036043][ T9590] loop5: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 574.051116][ T9590] syz.5.1022: attempt to access beyond end of device [ 574.051116][ T9590] loop5: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 574.066331][ T9590] syz.5.1022: attempt to access beyond end of device [ 574.066331][ T9590] loop5: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 574.081157][ T9590] syz.5.1022: attempt to access beyond end of device [ 574.081157][ T9590] loop5: rw=524288, sector=790384, nr_sectors = 16 limit=16 [ 574.099097][ T9590] syz.5.1022: attempt to access beyond end of device [ 574.099097][ T9590] loop5: rw=524288, sector=72, nr_sectors = 16 limit=16 [ 574.225019][ T9594] erofs (device loop5): read error -5 @ 43 of nid 36 [ 574.486183][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1023'. [ 574.577187][ T9597] pim6reg: entered allmulticast mode [ 574.741898][ T9601] pim6reg: left allmulticast mode [ 574.824831][ T9602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.832405][ T9602] IPv6: NLM_F_CREATE should be set when creating new route [ 575.236750][ T9607] loop5: detected capacity change from 0 to 256 [ 576.382307][ T24] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 576.742423][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 576.796867][ T5109] Bluetooth: hci2: adv larger than maximum supported [ 576.797002][ T5109] Bluetooth: hci2: Malformed LE Event: 0x0d [ 576.915726][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 576.924231][ T24] usb 6-1: can't read configurations, error -71 [ 581.402973][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 581.593520][ T9665] fuse: Bad value for 'fd' [ 581.621418][ T24] usb 7-1: config 162 has an invalid interface number: 251 but max is 1 [ 581.630511][ T24] usb 7-1: config 162 has an invalid interface number: 209 but max is 1 [ 581.639492][ T24] usb 7-1: config 162 has no interface number 0 [ 581.646227][ T24] usb 7-1: config 162 has no interface number 1 [ 581.655338][ T24] usb 7-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 581.669045][ T24] usb 7-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 581.684319][ T24] usb 7-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 581.697065][ T24] usb 7-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 581.709209][ T24] usb 7-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 581.721809][ T24] usb 7-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 581.734183][ T24] usb 7-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 581.747909][ T24] usb 7-1: config 162 interface 251 has no altsetting 0 [ 581.755525][ T24] usb 7-1: config 162 interface 209 has no altsetting 0 [ 582.067021][ T24] usb 7-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 582.077202][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.090144][ T24] usb 7-1: Product: syz [ 582.099866][ T24] usb 7-1: Manufacturer: syz [ 582.107835][ T24] usb 7-1: SerialNumber: syz [ 582.470735][ T24] io_edgeport 7-1:162.251: required endpoints missing [ 582.700416][ T24] io_edgeport 7-1:162.209: Edgeport 2 port adapter converter detected [ 583.103833][ T24] usb 7-1: 䀁 detected [ 583.423651][ T24] usb 7-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 583.593034][ T24] usb 7-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 583.864379][ T24] usb 7-1: USB disconnect, device number 3 [ 583.870740][ C1] usb 7-1: edge_interrupt_callback - Error -19 submitting control urb [ 583.913957][ T9684] comedi comedi3: comedi_parport: a I/O base address must be specified [ 583.964536][ T24] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 584.058313][ T24] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 584.073523][ T24] io_edgeport 7-1:162.209: device disconnected [ 584.282324][ T5871] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 584.508238][ T5871] usb 6-1: device descriptor read/64, error -71 [ 584.817943][ T5871] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 585.002281][ T5871] usb 6-1: device descriptor read/64, error -71 [ 585.133984][ T5871] usb usb6-port1: attempt power cycle [ 585.513563][ T5871] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 585.601958][ T5871] usb 6-1: device descriptor read/8, error -71 [ 585.863030][ T5871] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 585.954786][ T5871] usb 6-1: device descriptor read/8, error -71 [ 586.102309][ T5871] usb usb6-port1: unable to enumerate USB device [ 586.630915][ T9715] loop3: detected capacity change from 0 to 1024 [ 586.753425][ T9715] hfsplus: Unknown parameter '$&srrier' [ 587.196865][ T9715] loop3: detected capacity change from 0 to 512 [ 587.343824][ T9727] loop4: detected capacity change from 0 to 128 [ 587.539701][ T9715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.663562][ T30] audit: type=1800 audit(1754128411.213:38): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1062" name="bus" dev="loop4" ino=1048617 res=0 errno=0 [ 587.889913][ T9739] bio_check_eod: 13 callbacks suppressed [ 587.890003][ T9739] syz.4.1062: attempt to access beyond end of device [ 587.890003][ T9739] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 588.319336][ T9744] loop5: detected capacity change from 0 to 8 [ 588.594063][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.629608][ T9756] tipc: Started in network mode [ 589.635194][ T9756] tipc: Node identity 06f7342e30f3, cluster identity 4711 [ 589.644020][ T9756] tipc: Enabled bearer , priority 0 [ 589.790973][ T9762] tipc: Disabling bearer [ 594.169254][ T9825] tipc: Started in network mode [ 594.175481][ T9825] tipc: Node identity ffffa848, cluster identity 4711 [ 594.183126][ T9825] tipc: Node number set to 4294944840 [ 595.654121][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'. [ 595.696276][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1100'. [ 595.900235][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'. [ 597.625587][ T9863] loop4: detected capacity change from 0 to 512 [ 597.828444][ T9863] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 597.902430][ T9863] System zones: 0-2, 18-18, 34-35 [ 597.973247][ T9863] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #4: comm syz.4.1105: iget: bad i_size value: 5910974510929920 [ 598.102513][ T9863] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1105: Bad quota inode: 4, type: 1 [ 598.182193][ T9863] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 598.276144][ T9863] EXT4-fs (loop4): mount failed [ 598.326392][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.333471][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.928138][ T9910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1120'. [ 605.885671][ T9972] loop4: detected capacity change from 0 to 32768 [ 605.992142][ T9972] ERROR: (device loop4): diRead: i_ino != di_number [ 605.992142][ T9972] [ 606.002527][ T9972] ERROR: (device loop4): remounting filesystem as read-only [ 606.013889][ T9972] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 606.013889][ T9972] [ 606.025612][ T9972] non-latin1 character 0x3ff found in JFS file name [ 606.032498][ T9972] mount with iocharset=utf8 to access [ 607.910595][ T9997] loop6: detected capacity change from 0 to 7 [ 608.002838][ T9997] Dev loop6: unable to read RDB block 7 [ 608.008957][ T9997] loop6: unable to read partition table [ 608.094668][ T9997] loop6: partition table beyond EOD, truncated [ 608.102833][ T9997] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 608.272769][T10004] warning: `syz.6.1150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 610.568692][T10020] loop3: detected capacity change from 0 to 32768 [ 610.609755][T10020] [ 610.609755][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.609755][T10020] [ 610.736580][T10020] [ 610.736580][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.736580][T10020] [ 610.747835][T10020] [ 610.747835][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.747835][T10020] [ 610.762482][T10020] [ 610.762482][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.762482][T10020] [ 610.773491][T10020] [ 610.773491][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.773491][T10020] [ 610.784612][T10020] [ 610.784612][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.784612][T10020] [ 610.798808][ T111] [ 610.798808][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.798808][ T111] [ 610.892322][T10020] [ 610.892322][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.892322][T10020] [ 610.903569][T10020] [ 610.903569][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.903569][T10020] [ 610.914423][T10020] [ 610.914423][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.914423][T10020] [ 610.935010][ T110] [ 610.935010][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.935010][ T110] [ 610.948106][T10020] [ 610.948106][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.948106][T10020] [ 610.962194][T10020] [ 610.962194][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.962194][T10020] [ 610.973867][T10020] [ 610.973867][T10020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.973867][T10020] [ 611.012965][ T111] [ 611.012965][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 611.012965][ T111] [ 611.036428][T10026] loop5: detected capacity change from 0 to 2048 [ 611.122950][ T5812] [ 611.122950][ T5812] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 611.122950][ T5812] [ 611.209888][ T5812] [ 611.209888][ T5812] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 611.209888][ T5812] [ 611.248417][T10037] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 611.849409][T10041] Invalid ELF header magic: != ELF [ 614.966880][T10075] loop3: detected capacity change from 0 to 512 [ 615.132063][T10075] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 615.146324][T10075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 615.574042][T10075] EXT4-fs (loop3): 1 truncate cleaned up [ 615.582760][T10075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.059531][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 617.062521][T10097] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1180'. [ 617.145319][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1181'. [ 617.189949][ T3882] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.227581][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.237939][ T3882] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.243690][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1181'. [ 617.247807][ T3882] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.269854][ T3882] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.882324][T10181] overlayfs: failed to resolve './file0': -2 [ 624.370329][T10209] netlink: 'syz.5.1216': attribute type 4 has an invalid length. [ 624.460849][T10211] netlink: 'syz.5.1216': attribute type 4 has an invalid length. [ 624.817082][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1217'. [ 626.052204][T10230] loop6: detected capacity change from 0 to 2048 [ 626.249532][T10230] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.206258][T10243] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 627.427268][T10241] nfs: Unknown parameter '' [ 627.436178][T10233] loop4: detected capacity change from 0 to 40427 [ 627.455076][T10233] F2FS-fs (loop4): build fault injection rate: 14 [ 627.462682][T10233] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 627.473698][T10233] F2FS-fs (loop4): invalid crc value [ 627.557362][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xe27/0xf80 [ 627.581784][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xe27/0xf80 [ 627.895693][T10233] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 627.939248][T10233] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 627.978677][T10233] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 628.107963][ T5821] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x1144/0x2ce0 [ 628.121770][ T5821] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:652625,cpver:0,blkaddr:0] [ 628.349416][ C0] F2FS-fs (loop4): inject write IO error in f2fs_write_end_io of bio_endio+0xe27/0xf80 [ 628.359908][ C0] CPU: 0 UID: 0 PID: 9695 Comm: kworker/0:0 Tainted: G W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 628.360118][ C0] Tainted: [W]=WARN [ 628.360175][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.360307][ C0] Workqueue: rcu_gp srcu_invoke_callbacks [ 628.360517][ C0] Call Trace: [ 628.360573][ C0] [ 628.360626][ C0] __dump_stack+0x26/0x30 [ 628.360804][ C0] dump_stack_lvl+0x1df/0x270 [ 628.360992][ C0] dump_stack+0x1e/0x25 [ 628.361174][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 628.361403][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 628.361602][ C0] f2fs_write_end_io+0xb4b/0x1920 [ 628.361804][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 628.362001][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 628.362190][ C0] bio_endio+0xe27/0xf80 [ 628.362372][ C0] blk_update_request+0xf4c/0x1a90 [ 628.362585][ C0] blk_mq_end_request+0x50/0xb0 [ 628.362754][ C0] lo_complete_rq+0x188/0x3a0 [ 628.362945][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 628.363143][ C0] blk_done_softirq+0x10f/0x1f0 [ 628.363293][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 628.363445][ C0] handle_softirqs+0x169/0x6e0 [ 628.363617][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 628.363771][ C0] __do_softirq+0x14/0x1b [ 628.363950][ C0] do_softirq+0x99/0x100 [ 628.364103][ C0] [ 628.364153][ C0] [ 628.364216][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 628.364367][ C0] ? srcu_invoke_callbacks+0x22f/0x530 [ 628.364567][ C0] srcu_invoke_callbacks+0x279/0x530 [ 628.364780][ C0] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 628.364981][ C0] process_scheduled_works+0xb8e/0x1d80 [ 628.365269][ C0] worker_thread+0xedf/0x1590 [ 628.365510][ C0] kthread+0xd5c/0xf00 [ 628.365654][ C0] ? __pfx_worker_thread+0x10/0x10 [ 628.365872][ C0] ? __pfx_kthread+0x10/0x10 [ 628.366035][ C0] ret_from_fork+0x1e0/0x310 [ 628.366184][ C0] ? __pfx_kthread+0x10/0x10 [ 628.366349][ C0] ret_from_fork_asm+0x1a/0x30 [ 628.366581][ C0] [ 628.570076][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 628.577326][ C0] CPU: 0 UID: 0 PID: 9695 Comm: kworker/0:0 Tainted: G W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 628.577521][ C0] Tainted: [W]=WARN [ 628.577575][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.577688][ C0] Workqueue: rcu_gp srcu_invoke_callbacks [ 628.577893][ C0] Call Trace: [ 628.577946][ C0] [ 628.577999][ C0] __dump_stack+0x26/0x30 [ 628.578184][ C0] dump_stack_lvl+0x1df/0x270 [ 628.578390][ C0] dump_stack+0x1e/0x25 [ 628.578565][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 628.578793][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 628.578995][ C0] f2fs_write_end_io+0xb4b/0x1920 [ 628.579231][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 628.579428][ C0] bio_endio+0xe27/0xf80 [ 628.579619][ C0] blk_update_request+0xf4c/0x1a90 [ 628.579845][ C0] blk_mq_end_request+0x50/0xb0 [ 628.580021][ C0] lo_complete_rq+0x188/0x3a0 [ 628.580217][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 628.580417][ C0] blk_done_softirq+0x10f/0x1f0 [ 628.580568][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 628.580717][ C0] handle_softirqs+0x169/0x6e0 [ 628.580896][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 628.581054][ C0] __do_softirq+0x14/0x1b [ 628.581235][ C0] do_softirq+0x99/0x100 [ 628.581390][ C0] [ 628.581442][ C0] [ 628.581503][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 628.581652][ C0] ? srcu_invoke_callbacks+0x22f/0x530 [ 628.581841][ C0] srcu_invoke_callbacks+0x279/0x530 [ 628.582058][ C0] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 628.582274][ C0] process_scheduled_works+0xb8e/0x1d80 [ 628.582557][ C0] worker_thread+0xedf/0x1590 [ 628.582806][ C0] kthread+0xd5c/0xf00 [ 628.582951][ C0] ? __pfx_worker_thread+0x10/0x10 [ 628.583174][ C0] ? __pfx_kthread+0x10/0x10 [ 628.583339][ C0] ret_from_fork+0x1e0/0x310 [ 628.583492][ C0] ? __pfx_kthread+0x10/0x10 [ 628.583650][ C0] ret_from_fork_asm+0x1a/0x30 [ 628.583881][ C0] [ 628.781517][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 628.788754][ C0] CPU: 0 UID: 0 PID: 9695 Comm: kworker/0:0 Tainted: G W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 628.788961][ C0] Tainted: [W]=WARN [ 628.789019][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.789140][ C0] Workqueue: rcu_gp srcu_invoke_callbacks [ 628.789363][ C0] Call Trace: [ 628.789419][ C0] [ 628.789473][ C0] __dump_stack+0x26/0x30 [ 628.789662][ C0] dump_stack_lvl+0x1df/0x270 [ 628.789858][ C0] dump_stack+0x1e/0x25 [ 628.790034][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 628.790269][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 628.790459][ C0] f2fs_write_end_io+0xb4b/0x1920 [ 628.790691][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 628.790879][ C0] bio_endio+0xe27/0xf80 [ 628.791071][ C0] blk_update_request+0xf4c/0x1a90 [ 628.791304][ C0] blk_mq_end_request+0x50/0xb0 [ 628.791481][ C0] lo_complete_rq+0x188/0x3a0 [ 628.791673][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 628.791856][ C0] blk_done_softirq+0x10f/0x1f0 [ 628.792009][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 628.792163][ C0] handle_softirqs+0x169/0x6e0 [ 628.792345][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 628.792497][ C0] __do_softirq+0x14/0x1b [ 628.792668][ C0] do_softirq+0x99/0x100 [ 628.792811][ C0] [ 628.792867][ C0] [ 628.792928][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 628.793075][ C0] ? srcu_invoke_callbacks+0x22f/0x530 [ 628.793279][ C0] srcu_invoke_callbacks+0x279/0x530 [ 628.793521][ C0] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 628.793727][ C0] process_scheduled_works+0xb8e/0x1d80 [ 628.793999][ C0] worker_thread+0xedf/0x1590 [ 628.794253][ C0] kthread+0xd5c/0xf00 [ 628.794402][ C0] ? __pfx_worker_thread+0x10/0x10 [ 628.794652][ C0] ? __pfx_kthread+0x10/0x10 [ 628.794811][ C0] ret_from_fork+0x1e0/0x310 [ 628.794964][ C0] ? __pfx_kthread+0x10/0x10 [ 628.795123][ C0] ret_from_fork_asm+0x1a/0x30 [ 628.795360][ C0] [ 628.993169][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 629.000354][ C0] CPU: 0 UID: 0 PID: 9695 Comm: kworker/0:0 Tainted: G W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 629.000555][ C0] Tainted: [W]=WARN [ 629.000610][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.000731][ C0] Workqueue: rcu_gp srcu_invoke_callbacks [ 629.000945][ C0] Call Trace: [ 629.001000][ C0] [ 629.001054][ C0] __dump_stack+0x26/0x30 [ 629.001243][ C0] dump_stack_lvl+0x1df/0x270 [ 629.001439][ C0] dump_stack+0x1e/0x25 [ 629.001614][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 629.001835][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 629.002016][ C0] f2fs_write_end_io+0xb4b/0x1920 [ 629.002244][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 629.002432][ C0] bio_endio+0xe27/0xf80 [ 629.002618][ C0] blk_update_request+0xf4c/0x1a90 [ 629.002838][ C0] blk_mq_end_request+0x50/0xb0 [ 629.003010][ C0] lo_complete_rq+0x188/0x3a0 [ 629.003298][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 629.003492][ C0] blk_done_softirq+0x10f/0x1f0 [ 629.003651][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 629.003807][ C0] handle_softirqs+0x169/0x6e0 [ 629.003999][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 629.004179][ C0] __do_softirq+0x14/0x1b [ 629.004381][ C0] do_softirq+0x99/0x100 [ 629.004524][ C0] [ 629.004580][ C0] [ 629.004643][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 629.004804][ C0] ? srcu_invoke_callbacks+0x22f/0x530 [ 629.005009][ C0] srcu_invoke_callbacks+0x279/0x530 [ 629.005236][ C0] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 629.005447][ C0] process_scheduled_works+0xb8e/0x1d80 [ 629.005723][ C0] worker_thread+0xedf/0x1590 [ 629.005975][ C0] kthread+0xd5c/0xf00 [ 629.006139][ C0] ? __pfx_worker_thread+0x10/0x10 [ 629.006376][ C0] ? __pfx_kthread+0x10/0x10 [ 629.006533][ C0] ret_from_fork+0x1e0/0x310 [ 629.006685][ C0] ? __pfx_kthread+0x10/0x10 [ 629.006839][ C0] ret_from_fork_asm+0x1a/0x30 [ 629.007107][ C0] [ 629.205476][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 629.212704][ C0] CPU: 0 UID: 0 PID: 9695 Comm: kworker/0:0 Tainted: G W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 629.212898][ C0] Tainted: [W]=WARN [ 629.212952][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.213066][ C0] Workqueue: rcu_gp srcu_invoke_callbacks [ 629.213273][ C0] Call Trace: [ 629.213328][ C0] [ 629.213382][ C0] __dump_stack+0x26/0x30 [ 629.213566][ C0] dump_stack_lvl+0x1df/0x270 [ 629.213763][ C0] dump_stack+0x1e/0x25 [ 629.213938][ C0] f2fs_handle_critical_error+0xa6f/0xc20 [ 629.214169][ C0] f2fs_stop_checkpoint+0x65/0x80 [ 629.214365][ C0] f2fs_write_end_io+0xb4b/0x1920 [ 629.214598][ C0] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 629.214787][ C0] bio_endio+0xe27/0xf80 [ 629.214975][ C0] blk_update_request+0xf4c/0x1a90 [ 629.215207][ C0] blk_mq_end_request+0x50/0xb0 [ 629.215382][ C0] lo_complete_rq+0x188/0x3a0 [ 629.215580][ C0] ? __pfx_lo_complete_rq+0x10/0x10 [ 629.215775][ C0] blk_done_softirq+0x10f/0x1f0 [ 629.215924][ C0] ? __pfx_blk_done_softirq+0x10/0x10 [ 629.216076][ C0] handle_softirqs+0x169/0x6e0 [ 629.216254][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 629.216412][ C0] __do_softirq+0x14/0x1b [ 629.216594][ C0] do_softirq+0x99/0x100 [ 629.216735][ C0] [ 629.216789][ C0] [ 629.216844][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 629.216994][ C0] ? srcu_invoke_callbacks+0x22f/0x530 [ 629.217205][ C0] srcu_invoke_callbacks+0x279/0x530 [ 629.217423][ C0] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 629.217630][ C0] process_scheduled_works+0xb8e/0x1d80 [ 629.217910][ C0] worker_thread+0xedf/0x1590 [ 629.218145][ C0] kthread+0xd5c/0xf00 [ 629.218296][ C0] ? __pfx_worker_thread+0x10/0x10 [ 629.218517][ C0] ? __pfx_kthread+0x10/0x10 [ 629.218676][ C0] ret_from_fork+0x1e0/0x310 [ 629.218828][ C0] ? __pfx_kthread+0x10/0x10 [ 629.218993][ C0] ret_from_fork_asm+0x1a/0x30 [ 629.219232][ C0] [ 629.219289][ C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 629.482632][ T5821] F2FS-fs (loop4): do_checkpoint failed err:-5, stop checkpoint [ 629.570509][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1230'. [ 629.860616][T10259] hsr_slave_0 (unregistering): left promiscuous mode [ 631.464357][T10270] loop5: detected capacity change from 0 to 32768 [ 631.642099][T10270] syz.5.1235: attempt to access beyond end of device [ 631.642099][T10270] loop5: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 631.661471][T10270] metapage_write_end_io: I/O error [ 631.667123][T10270] ERROR: (device loop5): release_metapage: metapage_write_one() failed [ 631.667123][T10270] [ 631.691378][T10270] ERROR: (device loop5): remounting filesystem as read-only [ 631.774892][T10275] loop4: detected capacity change from 0 to 32768 [ 631.780069][T10270] blkno = 8ed2c, nblocks = 1 [ 631.788972][T10270] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 631.788972][T10270] [ 631.804725][T10270] UFO tlock:0xffffc90001803240 [ 631.827414][T10275] (syz.4.1231,10275,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 631.842327][T10275] (syz.4.1231,10275,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 631.940329][ T12] kworker/u8:0: attempt to access beyond end of device [ 631.940329][ T12] loop5: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 631.957879][ T12] metapage_write_end_io: I/O error [ 632.026624][T10275] JBD2: Ignoring recovery information on journal [ 632.131124][ T110] blkno = 8ed2c, nblocks = 4 [ 632.136429][ T110] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 632.136429][ T110] [ 632.147154][ T110] ERROR: (device loop5): remounting filesystem as read-only [ 632.158521][ T6689] syz-executor: attempt to access beyond end of device [ 632.158521][ T6689] loop5: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 632.174899][ T6689] metapage_write_end_io: I/O error [ 632.215917][T10275] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 632.599116][ T30] audit: type=1326 audit(1754128456.203:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 632.621756][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.780045][ T30] audit: type=1326 audit(1754128456.283:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 632.802706][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.809728][ T30] audit: type=1326 audit(1754128456.283:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 632.832818][ T30] audit: type=1326 audit(1754128456.283:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 632.855326][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.862299][ T30] audit: type=1326 audit(1754128456.303:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 632.888426][ T30] audit: type=1326 audit(1754128456.323:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 632.912374][ T30] audit: type=1326 audit(1754128456.323:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 632.935405][ T30] audit: type=1326 audit(1754128456.343:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 632.957924][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.964615][ T30] audit: type=1326 audit(1754128456.343:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 632.987190][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.998714][ T30] audit: type=1326 audit(1754128456.343:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dceb8eb69 code=0x7ffc0000 [ 633.021339][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.318046][ T5821] ocfs2: Unmounting device (7,4) on (node local) [ 635.515900][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 636.226161][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 638.588441][T10359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1261'. [ 638.598484][T10359] netlink: 'syz.0.1261': attribute type 7 has an invalid length. [ 638.610513][T10359] netlink: 'syz.0.1261': attribute type 8 has an invalid length. [ 638.619970][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 642.333776][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 642.544217][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 642.579543][ T24] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 642.588663][ T24] usb 4-1: config 0 has no interface number 0 [ 642.635941][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 642.646265][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.654695][ T24] usb 4-1: Product: syz [ 642.659083][ T24] usb 4-1: Manufacturer: syz [ 642.664269][ T24] usb 4-1: SerialNumber: syz [ 642.723608][ T24] usb 4-1: config 0 descriptor?? [ 642.796503][ T24] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 642.809759][ T24] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 642.863197][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 642.863292][ T30] audit: type=1326 audit(1754128466.443:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.6.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23838eb69 code=0x7ffc0000 [ 642.893042][ T30] audit: type=1326 audit(1754128466.443:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.6.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fb23838eb69 code=0x7ffc0000 [ 642.918438][ T30] audit: type=1326 audit(1754128466.443:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10408 comm="syz.6.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23838eb69 code=0x7ffc0000 [ 642.999194][ T24] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 643.008653][ T24] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 643.126416][ T24] usb 4-1: USB disconnect, device number 8 [ 644.346279][T10430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1285'. [ 645.875426][T10451] o2cb: This node has not been configured. [ 645.884525][T10451] o2cb: Cluster check failed. Fix errors before retrying. [ 645.893365][T10451] (syz.4.1294,10451,0):user_dlm_register:674 ERROR: status = -22 [ 645.901380][T10451] (syz.4.1294,10451,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 647.690750][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 647.833608][T10474] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.844051][T10474] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.964214][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.975864][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.988560][ T24] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 647.998063][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.035870][ T24] usb 7-1: config 0 descriptor?? [ 648.127349][T10474] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.142696][T10474] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.255508][T10479] overlayfs: failed to clone upperpath [ 648.364791][T10474] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.381097][T10474] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.570854][ T24] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 648.593660][ T24] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 648.601173][T10474] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.615557][T10474] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.652112][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 648.662781][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 648.710543][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 648.759931][ T24] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 648.788582][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 648.810245][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 649.130154][ T9423] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.139597][ T9423] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.604629][ T9423] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.613264][ T9423] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.709408][ T9423] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.718173][ T9423] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.790182][ T9423] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.799063][ T9423] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.537836][T10488] usb 7-1: USB disconnect, device number 4 [ 650.635030][T10480] chnl_net:caif_netlink_parms(): no params data found [ 650.851894][T10484] Bluetooth: hci5: command tx timeout [ 652.959900][T10484] Bluetooth: hci5: command tx timeout [ 653.993997][T10480] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.003452][T10480] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.011270][T10480] bridge_slave_0: entered allmulticast mode [ 654.021752][T10480] bridge_slave_0: entered promiscuous mode [ 654.086278][T10522] Bluetooth: Invalid esc byte 0x0d [ 654.105789][T10480] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.113739][T10480] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.121900][T10480] bridge_slave_1: entered allmulticast mode [ 654.132184][T10480] bridge_slave_1: entered promiscuous mode [ 654.372256][T10480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.535523][T10480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.857233][T10480] team0: Port device team_slave_0 added [ 654.957821][T10480] team0: Port device team_slave_1 added [ 655.018168][T10484] Bluetooth: hci5: command tx timeout [ 655.376167][T10480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.385021][T10480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.415959][T10480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.460330][T10480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.468000][T10480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.494935][T10480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.163016][T10480] hsr_slave_0: entered promiscuous mode [ 656.174078][T10480] hsr_slave_1: entered promiscuous mode [ 656.183726][T10480] debugfs: 'hsr0' already exists in 'hsr' [ 656.189661][T10480] Cannot create hsr debugfs directory [ 657.123001][T10484] Bluetooth: hci5: command tx timeout [ 657.392290][T10545] loop6: detected capacity change from 0 to 32768 [ 657.649844][T10554] loop4: detected capacity change from 0 to 16 [ 657.678919][T10554] erofs (device loop4): mounted with root inode @ nid 36. [ 657.726814][T10551] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 657.735194][T10551] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 657.743673][T10551] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 657.751176][T10551] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 657.762228][T10551] syz.4.1330: attempt to access beyond end of device [ 657.762228][T10551] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 657.777932][T10551] syz.4.1330: attempt to access beyond end of device [ 657.777932][T10551] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 657.792837][T10551] syz.4.1330: attempt to access beyond end of device [ 657.792837][T10551] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 657.806959][T10551] syz.4.1330: attempt to access beyond end of device [ 657.806959][T10551] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 657.821745][T10551] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 657.829525][T10551] syz.4.1330: attempt to access beyond end of device [ 657.829525][T10551] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 657.843184][T10551] erofs (device loop4): read error -5 @ 0 of nid 36 [ 657.850018][T10551] erofs (device loop4): failed to readdir of logical block 0 of nid 36 [ 658.198765][T10545] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 658.198951][T10545] allowing incompatible features above 0.0: (unknown version) [ 658.199051][T10545] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 658.245822][T10545] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 658.254403][T10545] bcachefs (loop6): initializing new filesystem [ 658.284240][T10545] bcachefs (loop6): going read-write [ 658.362748][T10545] bcachefs (loop6): marking superblocks [ 658.424795][T10545] bcachefs (loop6): initializing freespace [ 658.454359][T10545] bcachefs (loop6): done initializing freespace [ 658.480580][T10545] bcachefs (loop6): reading snapshots table [ 658.487933][T10545] bcachefs (loop6): reading snapshots done [ 658.556970][T10547] loop3: detected capacity change from 0 to 32768 [ 658.611033][T10545] bcachefs (loop6): done starting filesystem [ 658.737765][T10547] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 659.022586][T10480] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 659.172635][T10480] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 659.178000][T10545] syz.6.1328 (10545) used greatest stack depth: 1152 bytes left [ 659.424321][T10480] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 659.465479][ T8872] bcachefs (loop6): shutting down [ 659.470921][ T8872] bcachefs (loop6): going read-only [ 659.477031][ T8872] bcachefs (loop6): finished waiting for writes to stop [ 659.529464][T10547] XFS (loop3): Ending clean mount [ 659.540629][T10547] XFS (loop3): Quotacheck needed: Please wait. [ 659.573487][ T8872] bcachefs (loop6): flushing journal and stopping allocators, journal seq 9 [ 659.612219][T10547] XFS (loop3): Quotacheck: Done. [ 659.632490][T10480] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 659.778500][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.785342][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.953940][ T5812] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 660.117999][ T8872] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 11 [ 660.159544][ T8872] bcachefs (loop6): clean shutdown complete, journal seq 12 [ 660.185413][ T8872] bcachefs (loop6): marking filesystem clean [ 660.379076][ T8872] bcachefs (loop6): shutdown complete [ 661.010384][T10582] loop4: detected capacity change from 0 to 2048 [ 661.396705][T10480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.630396][T10480] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.698511][ T9417] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.706295][ T9417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.820164][ T9417] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.827861][ T9417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.715621][T10488] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 662.999125][T10488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.010820][T10488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.021327][T10488] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 663.030845][T10488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.325705][T10488] usb 5-1: config 0 descriptor?? [ 663.685983][T10595] loop3: detected capacity change from 0 to 40427 [ 663.759090][T10595] F2FS-fs (loop3): invalid crc value [ 664.102457][T10595] F2FS-fs (loop3): Start checkpoint disabled! [ 664.125506][T10488] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 664.174522][T10595] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 664.462292][ T3684] kworker/u8:16: attempt to access beyond end of device [ 664.462292][ T3684] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 664.478110][ T3684] CPU: 0 UID: 0 PID: 3684 Comm: kworker/u8:16 Tainted: G W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 664.478310][ T3684] Tainted: [W]=WARN [ 664.478364][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 664.478481][ T3684] Workqueue: writeback wb_workfn (flush-7:3) [ 664.478859][ T3684] Call Trace: [ 664.478919][ T3684] [ 664.478972][ T3684] __dump_stack+0x26/0x30 [ 664.479173][ T3684] dump_stack_lvl+0x1df/0x270 [ 664.479366][ T3684] dump_stack+0x1e/0x25 [ 664.479540][ T3684] f2fs_handle_critical_error+0xa6f/0xc20 [ 664.479825][ T3684] f2fs_stop_checkpoint+0x65/0x80 [ 664.480021][ T3684] f2fs_write_end_io+0xb4b/0x1920 [ 664.480229][ T3684] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 664.480431][ T3684] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 664.480628][ T3684] bio_endio+0xe27/0xf80 [ 664.480909][ T3684] submit_bio_noacct+0x214/0x2710 [ 664.481172][ T3684] submit_bio+0x5a9/0x5d0 [ 664.481362][ T3684] f2fs_submit_write_bio+0x92/0x250 [ 664.481537][ T3684] __submit_merged_bio+0x16f/0x6a0 [ 664.481718][ T3684] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 664.481900][ T3684] __submit_merged_write_cond+0x458/0x9a0 [ 664.482100][ T3684] f2fs_write_data_pages+0x4bb2/0x5480 [ 664.482431][ T3684] ? __blk_trace_note_message+0x1c0/0x630 [ 664.482588][ T3684] ? kmsan_get_metadata+0xfb/0x160 [ 664.482813][ T3684] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 664.482998][ T3684] ? __update_load_avg_cfs_rq+0xd7f/0x1010 [ 664.483215][ T3684] ? kmsan_get_metadata+0xfb/0x160 [ 664.483384][ T3684] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 664.483584][ T3684] ? __rb_insert_augmented+0x80/0x11b0 [ 664.483792][ T3684] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 664.483959][ T3684] ? kmsan_get_metadata+0xfb/0x160 [ 664.484126][ T3684] ? kmsan_get_metadata+0xfb/0x160 [ 664.484301][ T3684] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 664.484479][ T3684] ? kmsan_get_metadata+0xfb/0x160 [ 664.484648][ T3684] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 664.484833][ T3684] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 664.485026][ T3684] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 664.485221][ T3684] do_writepages+0x3f2/0x860 [ 664.485383][ T3684] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 664.485583][ T3684] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 664.485743][ T3684] ? kmsan_get_metadata+0xfb/0x160 [ 664.485935][ T3684] __writeback_single_inode+0x101/0x1190 [ 664.486118][ T3684] ? kmsan_get_metadata+0xfb/0x160 [ 664.486309][ T3684] writeback_sb_inodes+0xac1/0x1cb0 [ 664.486560][ T3684] ? kmsan_get_metadata+0xfb/0x160 [ 664.486790][ T3684] wb_writeback+0x4ce/0xc00 [ 664.486973][ T3684] ? queue_io+0x491/0x790 [ 664.487132][ T3684] wb_workfn+0x397/0x1910 [ 664.487336][ T3684] ? kmsan_get_metadata+0xfb/0x160 [ 664.487541][ T3684] ? __pfx_wb_workfn+0x10/0x10 [ 664.487743][ T3684] process_scheduled_works+0xb8e/0x1d80 [ 664.488021][ T3684] worker_thread+0xedf/0x1590 [ 664.488280][ T3684] kthread+0xd5c/0xf00 [ 664.488423][ T3684] ? __pfx_worker_thread+0x10/0x10 [ 664.488658][ T3684] ? __pfx_kthread+0x10/0x10 [ 664.488814][ T3684] ret_from_fork+0x1e0/0x310 [ 664.488972][ T3684] ? __pfx_kthread+0x10/0x10 [ 664.489127][ T3684] ret_from_fork_asm+0x1a/0x30 [ 664.489357][ T3684] [ 664.811186][ T3684] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 665.309485][T10488] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 665.318874][T10488] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 665.504907][T10488] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 665.653861][T10488] usb 5-1: USB disconnect, device number 9 [ 665.878841][T10603] fido_id[10603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 666.710160][T10480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.824044][T10621] syzkaller0: entered allmulticast mode [ 666.933909][T10621] syzkaller0 (unregistering): left allmulticast mode [ 667.287418][T10625] loop3: detected capacity change from 0 to 512 [ 667.604511][T10625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.617956][T10625] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 668.462859][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.800372][T10659] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1358'. [ 669.877572][ T5871] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 669.921037][T10480] veth0_vlan: entered promiscuous mode [ 670.058490][T10480] veth1_vlan: entered promiscuous mode [ 670.138553][ T5871] usb 4-1: config 162 has an invalid interface number: 251 but max is 1 [ 670.150614][ T5871] usb 4-1: config 162 has an invalid interface number: 209 but max is 1 [ 670.160396][ T5871] usb 4-1: config 162 has no interface number 0 [ 670.167040][ T5871] usb 4-1: config 162 has no interface number 1 [ 670.173668][ T5871] usb 4-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 670.187217][ T5871] usb 4-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 670.198939][ T5871] usb 4-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 670.210572][ T5871] usb 4-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 670.222359][ T5871] usb 4-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 670.234586][ T5871] usb 4-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 670.246387][ T5871] usb 4-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 670.262811][ T5871] usb 4-1: config 162 interface 251 has no altsetting 0 [ 670.270022][ T5871] usb 4-1: config 162 interface 209 has no altsetting 0 [ 670.621497][T10480] veth0_macvtap: entered promiscuous mode [ 670.669263][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1360'. [ 670.745100][T10480] veth1_macvtap: entered promiscuous mode [ 670.856032][ T5871] usb 4-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 670.872391][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.880663][ T5871] usb 4-1: Product: syz [ 670.886214][ T5871] usb 4-1: Manufacturer: syz [ 670.891055][ T5871] usb 4-1: SerialNumber: syz [ 671.019468][T10480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.147523][T10480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.320771][ T5871] io_edgeport 4-1:162.251: required endpoints missing [ 671.331520][ T9449] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.405935][ T3684] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.443911][ T3684] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.492400][ T9695] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 671.530522][ T3684] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.560638][ T5871] io_edgeport 4-1:162.209: Edgeport 2 port adapter converter detected [ 671.699260][ T9695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.711286][ T9695] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 671.721333][ T9695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.814868][ T9695] usb 5-1: config 0 descriptor?? [ 671.964855][ T5871] usb 4-1: 䀁 detected [ 672.180808][T10676] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1365'. [ 672.192658][ T5871] usb 4-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 672.296282][ T9695] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 672.343108][ T5871] usb 4-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 672.572072][ T5871] usb 4-1: USB disconnect, device number 9 [ 672.572324][ C0] usb 4-1: edge_interrupt_callback - Error -19 submitting control urb [ 672.609465][ T9695] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input10 [ 672.677197][ T5871] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 672.835902][ T5871] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 672.853338][ T5871] io_edgeport 4-1:162.209: device disconnected [ 673.129230][ T9695] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 674.880875][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1368'. [ 674.897903][ T5871] usb 5-1: USB disconnect, device number 10 [ 675.223220][T10691] hsr_slave_1 (unregistering): left promiscuous mode [ 675.526306][T10700] veth0: entered promiscuous mode [ 675.631020][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 678.023649][ T5825] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 678.041232][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/u9:6 Tainted: G W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 678.041438][ T5825] Tainted: [W]=WARN [ 678.041504][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.041622][ T5825] Workqueue: hci1 hci_rx_work [ 678.041791][ T5825] Call Trace: [ 678.041844][ T5825] [ 678.041896][ T5825] __dump_stack+0x26/0x30 [ 678.042083][ T5825] dump_stack_lvl+0x1df/0x270 [ 678.042277][ T5825] dump_stack+0x1e/0x25 [ 678.042450][ T5825] sysfs_create_dir_ns+0x46c/0x540 [ 678.042700][ T5825] kobject_add_internal+0xeed/0x1840 [ 678.042905][ T5825] kobject_add+0x2c1/0x410 [ 678.043096][ T5825] ? kmsan_get_metadata+0xfb/0x160 [ 678.043270][ T5825] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 678.043462][ T5825] device_add+0xa70/0x1c10 [ 678.043668][ T5825] hci_conn_add_sysfs+0x15f/0x2f0 [ 678.043888][ T5825] le_conn_complete_evt+0x1b35/0x21b0 [ 678.044122][ T5825] hci_le_enh_conn_complete_evt+0x158/0x260 [ 678.044347][ T5825] hci_le_meta_evt+0x6e8/0x960 [ 678.044528][ T5825] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 678.044754][ T5825] hci_event_packet+0xcdf/0x1e40 [ 678.044913][ T5825] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 678.045138][ T5825] hci_rx_work+0x9a8/0x12b0 [ 678.045315][ T5825] ? __pfx_hci_rx_work+0x10/0x10 [ 678.045477][ T5825] process_scheduled_works+0xb8e/0x1d80 [ 678.045854][ T5825] worker_thread+0xedf/0x1590 [ 678.046109][ T5825] kthread+0xd5c/0xf00 [ 678.046259][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 678.046535][ T5825] ? __pfx_kthread+0x10/0x10 [ 678.046680][ T5825] ret_from_fork+0x1e0/0x310 [ 678.046820][ T5825] ? __pfx_kthread+0x10/0x10 [ 678.046980][ T5825] ret_from_fork_asm+0x1a/0x30 [ 678.047199][ T5825] [ 678.221085][ T5825] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 678.239637][ T5825] Bluetooth: hci1: failed to register connection device [ 678.789171][T10488] IPVS: starting estimator thread 0... [ 678.882804][T10739] IPVS: using max 192 ests per chain, 9600 per kthread [ 680.339503][T10746] loop4: detected capacity change from 0 to 32768 [ 680.373583][T10746] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1385 (10746) [ 680.525271][T10746] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 680.536851][T10746] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 680.546012][T10746] BTRFS info (device loop4): disk space caching is enabled [ 680.553633][T10746] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 680.709094][T10757] loop3: detected capacity change from 0 to 64 [ 680.739727][T10758] loop6: detected capacity change from 0 to 47 [ 680.894742][T10746] BTRFS info (device loop4): rebuilding free space tree [ 680.971490][T10746] BTRFS info (device loop4): disabling free space tree [ 680.979163][T10746] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 680.989419][T10746] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 681.046426][ T30] audit: type=1800 audit(1754128504.663:57): pid=10757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1388" name="bus" dev="loop3" ino=21 res=0 errno=0 [ 681.242651][ T30] audit: type=1804 audit(1754128504.763:58): pid=10757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1388" name="/newroot/261/bus/bus" dev="loop3" ino=21 res=1 errno=0 [ 681.551888][ T9456] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 681.762921][ T5821] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 682.587587][ T30] audit: type=1326 audit(1754128506.203:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10780 comm="syz.3.1393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5dceb8eb69 code=0x0 [ 682.879002][ T3684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.887475][ T3684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.900036][T10784] loop6: detected capacity change from 0 to 1024 [ 683.628209][ T5049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.636835][ T5049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.848780][T10798] fuse: Bad value for 'fd' [ 685.280181][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 685.289578][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1400'. [ 685.573791][ T6689] jfs_flush_journal: synclist not empty [ 685.579735][ T6689] ===================================================== [ 685.587663][ T6689] BUG: KMSAN: uninit-value in hex_dump_to_buffer+0xefb/0xf30 [ 685.595541][ T6689] hex_dump_to_buffer+0xefb/0xf30 [ 685.600853][ T6689] print_hex_dump+0x10d/0x330 [ 685.606126][ T6689] jfs_flush_journal+0x13ed/0x1670 [ 685.615233][ T6689] jfs_umount+0x1e3/0x720 [ 685.619759][ T6689] jfs_put_super+0x112/0x3d0 [ 685.625840][ T6689] generic_shutdown_super+0x1ad/0x4b0 [ 685.631436][ T6689] kill_block_super+0x42/0xd0 [ 685.637010][ T6689] deactivate_locked_super+0xcb/0x3c0 [ 685.642951][ T6689] deactivate_super+0x12f/0x140 [ 685.648103][ T6689] cleanup_mnt+0x6fb/0x780 [ 685.653101][ T6689] __cleanup_mnt+0x22/0x30 [ 685.657770][ T6689] task_work_run+0x209/0x2b0 [ 685.662805][ T6689] exit_to_user_mode_loop+0x2a6/0x330 [ 685.668404][ T6689] do_syscall_64+0x1e3/0x210 [ 685.673477][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.679627][ T6689] [ 685.684285][ T6689] Uninit was stored to memory at: [ 685.689631][ T6689] hex_dump_to_buffer+0xef4/0xf30 [ 685.695110][ T6689] print_hex_dump+0x10d/0x330 [ 685.700111][ T6689] jfs_flush_journal+0x13ed/0x1670 [ 685.705989][ T6689] jfs_umount+0x1e3/0x720 [ 685.714573][ T6689] jfs_put_super+0x112/0x3d0 [ 685.719416][ T6689] generic_shutdown_super+0x1ad/0x4b0 [ 685.726251][ T6689] kill_block_super+0x42/0xd0 [ 685.731175][ T6689] deactivate_locked_super+0xcb/0x3c0 [ 685.737199][ T6689] deactivate_super+0x12f/0x140 [ 685.742510][ T6689] cleanup_mnt+0x6fb/0x780 [ 685.747201][ T6689] __cleanup_mnt+0x22/0x30 [ 685.752256][ T6689] task_work_run+0x209/0x2b0 [ 685.757062][ T6689] exit_to_user_mode_loop+0x2a6/0x330 [ 685.762956][ T6689] do_syscall_64+0x1e3/0x210 [ 685.767807][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.774078][ T6689] [ 685.776502][ T6689] Uninit was created at: [ 685.781008][ T6689] kmem_cache_alloc_noprof+0x81b/0xec0 [ 685.786940][ T6689] mempool_alloc_slab+0x36/0x50 [ 685.792498][ T6689] mempool_alloc_noprof+0xf9/0x540 [ 685.797824][ T6689] __get_metapage+0xa1d/0x1790 [ 685.803118][ T6689] diWrite+0x58f/0x2190 [ 685.807456][ T6689] txCommit+0xcc0/0x93d0 [ 685.816433][ T6689] jfs_mkdir+0x1271/0x13a0 [ 685.821103][ T6689] vfs_mkdir+0x4e7/0x850 [ 685.826894][ T6689] do_mkdirat+0x41a/0xf30 [ 685.831429][ T6689] __x64_sys_mkdirat+0xc1/0x140 [ 685.836736][ T6689] x64_sys_call+0x338/0x3e20 [ 685.841809][ T6689] do_syscall_64+0xd9/0x210 [ 685.846558][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.852986][ T6689] [ 685.855540][ T6689] CPU: 1 UID: 0 PID: 6689 Comm: syz-executor Tainted: G W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 685.869390][ T6689] Tainted: [W]=WARN [ 685.873483][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 685.884378][ T6689] ===================================================== [ 685.891447][ T6689] Disabling lock debugging due to kernel taint [ 685.897997][ T6689] Kernel panic - not syncing: kmsan.panic set ... [ 685.904591][ T6689] CPU: 1 UID: 0 PID: 6689 Comm: syz-executor Tainted: G B W 6.16.0-syzkaller-10499-g89748acdf226 #0 PREEMPT(none) [ 685.918237][ T6689] Tainted: [B]=BAD_PAGE, [W]=WARN [ 685.923411][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 685.933641][ T6689] Call Trace: [ 685.937085][ T6689] [ 685.940142][ T6689] __dump_stack+0x26/0x30 [ 685.944708][ T6689] dump_stack_lvl+0x53/0x270 [ 685.949585][ T6689] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 685.955654][ T6689] dump_stack+0x1e/0x25 [ 685.960077][ T6689] vpanic+0x361/0xbc0 [ 685.964352][ T6689] panic+0x15d/0x160 [ 685.968547][ T6689] kmsan_report+0x31c/0x320 [ 685.973423][ T6689] ? __msan_warning+0x1b/0x30 [ 685.978308][ T6689] ? hex_dump_to_buffer+0xefb/0xf30 [ 685.983804][ T6689] ? print_hex_dump+0x10d/0x330 [ 685.988926][ T6689] ? jfs_flush_journal+0x13ed/0x1670 [ 685.994427][ T6689] ? jfs_umount+0x1e3/0x720 [ 685.999117][ T6689] ? jfs_put_super+0x112/0x3d0 [ 686.004119][ T6689] ? generic_shutdown_super+0x1ad/0x4b0 [ 686.009884][ T6689] ? kill_block_super+0x42/0xd0 [ 686.014969][ T6689] ? deactivate_locked_super+0xcb/0x3c0 [ 686.020738][ T6689] ? deactivate_super+0x12f/0x140 [ 686.025968][ T6689] ? cleanup_mnt+0x6fb/0x780 [ 686.030805][ T6689] ? __cleanup_mnt+0x22/0x30 [ 686.035644][ T6689] ? task_work_run+0x209/0x2b0 [ 686.040639][ T6689] ? exit_to_user_mode_loop+0x2a6/0x330 [ 686.046429][ T6689] ? do_syscall_64+0x1e3/0x210 [ 686.051454][ T6689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.057761][ T6689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.064057][ T6689] ? kmsan_get_metadata+0xfb/0x160 [ 686.069403][ T6689] ? kmsan_get_metadata+0xfb/0x160 [ 686.075004][ T6689] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 686.081049][ T6689] ? kmsan_get_metadata+0xfb/0x160 [ 686.086370][ T6689] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 686.092982][ T6689] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 686.099314][ T6689] ? kmsan_get_metadata+0xfb/0x160 [ 686.104616][ T6689] __msan_warning+0x1b/0x30 [ 686.109297][ T6689] hex_dump_to_buffer+0xefb/0xf30 [ 686.114578][ T6689] ? print_hex_dump+0x5e/0x330 [ 686.119565][ T6689] ? jfs_flush_journal+0x13ed/0x1670 [ 686.125058][ T6689] print_hex_dump+0x10d/0x330 [ 686.129980][ T6689] ? kmsan_get_metadata+0xfb/0x160 [ 686.135283][ T6689] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 686.141301][ T6689] jfs_flush_journal+0x13ed/0x1670 [ 686.146594][ T6689] ? kmsan_get_metadata+0xfb/0x160 [ 686.151922][ T6689] jfs_umount+0x1e3/0x720 [ 686.156451][ T6689] jfs_put_super+0x112/0x3d0 [ 686.161221][ T6689] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 686.167306][ T6689] ? __pfx_jfs_put_super+0x10/0x10 [ 686.172602][ T6689] generic_shutdown_super+0x1ad/0x4b0 [ 686.178166][ T6689] kill_block_super+0x42/0xd0 [ 686.183028][ T6689] ? __pfx_kill_block_super+0x10/0x10 [ 686.188590][ T6689] deactivate_locked_super+0xcb/0x3c0 [ 686.194161][ T6689] deactivate_super+0x12f/0x140 [ 686.199190][ T6689] cleanup_mnt+0x6fb/0x780 [ 686.203811][ T6689] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 686.210393][ T6689] ? __pfx___cleanup_mnt+0x10/0x10 [ 686.215709][ T6689] __cleanup_mnt+0x22/0x30 [ 686.220332][ T6689] task_work_run+0x209/0x2b0 [ 686.225115][ T6689] exit_to_user_mode_loop+0x2a6/0x330 [ 686.230742][ T6689] do_syscall_64+0x1e3/0x210 [ 686.235550][ T6689] ? irqentry_exit+0x16/0x60 [ 686.240350][ T6689] ? clear_bhb_loop+0x40/0x90 [ 686.245228][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.251291][ T6689] RIP: 0033:0x7f2086b8fe97 [ 686.255836][ T6689] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 686.275610][ T6689] RSP: 002b:00007fffac195f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 686.284204][ T6689] RAX: 0000000000000000 RBX: 00007f2086c11bdd RCX: 00007f2086b8fe97 [ 686.292314][ T6689] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffac196040 [ 686.300411][ T6689] RBP: 00007fffac196040 R08: 0000000000000000 R09: 0000000000000000 [ 686.308518][ T6689] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffac1970d0 [ 686.316617][ T6689] R13: 00007f2086c11bdd R14: 000000000009a404 R15: 00007fffac197110 [ 686.324823][ T6689] [ 686.328344][ T6689] Kernel Offset: disabled [ 686.332785][ T6689] Rebooting in 86400 seconds..