last executing test programs: 2.517909932s ago: executing program 2 (id=487): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkEINrYkQomAMHg2Jd+PRxL/Ak16MejLxqndDQgwXkdOa2Z1hf3S3tMu2g+znkwx9b+YN7333zdt9M283gL41lv2TROyMiD8iYqSWbS4wVvtz4/qF2X+vX5hNolJ59++kWu6f6xdmi6LFeTvyzHgakX6exP429S6dO39qZmFh/myen1w+/eHk0rnzL5w8PXNi/sT8memjR48cnnr5pekXV558c/1x3p+1dd8niwf2vvnelbdnj115/5fvBor4W+LokbHVDj5dqfS4unLtakgngyU2hHXJxkDWXUPV8T8SA1HvvJF447NSGwdsqEquw+GLFeAelkTZLQDKUXzQZ/e/xbZ5s4/yXXu1dgOUxX0j32pHBiPNywy13N/20lhEHLt48+tsi415DgEA0OSHbP7zfLv5XxoPNZS7L18bGs3XUnZHxAMRsSciHoyoln04Ih5ZZ/2tiyQr5z/p1a4CW6Ns/vdKvrbVPP8rZn8xOpDndlXjH0qOn1yYP5S/JuMxtDXLT61Sx4+v//5lp2ON879sy+ov5oJ5O64Obm0+Z25meeZOYm507VLEvsF28Se3VgKSiNgbEfu6rOPks98e6HTs9vGvogfrTJVvIp6p9f/FaIm/kKy+Pjm5LRbmD00WV8VKv/52+Z1O9d9R/D2Q9f/2ttf/rfhHk8b12qX113H5zy863tNMdHX913dsyf9+PLO8fHYqYkvyVq3Rjfun6+cW+aJ8Fv/4wfbjf3fUX4n9EZFdxI9GxGMR8Xjed09ExJMRcbAlrsb7659fe+qDTvHfDf0/19L/o81FWvq/ntgSrXvaJwZO/fR98/9YT67t/e9INTWe71nL+99a2tXd1QwAAAD/P2lE7IwknbiVHk4nJmrf4d8T29OFxaXl544vfnRmrvYbgdEYSosnXSMNz0On8tv60Uu1/HSRz48fzp8bfzUwXM1PzC4uzJUdPPS5HSvGf1od/5m/BspuHbDh/F4L+lfD+E/KbAew+Xz+Q/8y/qF/tRn/w2W0A9h87T7/Py2hHcDmaxn/lv2gj7j/h/5l/EP/ahz/vgAAfWNpOG7/I/l2iW3RzVkS90wi0ruiGb1JJF2OgrUmdpYd4PoTZb8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9MZ/AQAA//8L+fEo") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000}) ioctl$EVIOCGID(r1, 0x80084502, 0x0) 2.493593429s ago: executing program 4 (id=488): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2d, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)="14e2d6d6", 0x4}], 0x1}}], 0x1, 0x8005) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0}, 0x20008000) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)}}], 0x2, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) 2.493246532s ago: executing program 4 (id=489): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r1, &(0x7f0000000100)=ANY=[], 0x20) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2, 0x0, 0x10, 0x4}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980912, 0x0, '\x00', @p_u8=0x0}}) pread64(r0, &(0x7f0000000200)=""/62, 0x3e, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000280)=0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x10008, 0x1, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe09) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgget(0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x18) 2.493031707s ago: executing program 3 (id=490): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440041001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 2.47400897s ago: executing program 3 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0x14}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000007f80), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$NBD_SET_SOCK(r5, 0x40046f41, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xba}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0x4, 0x20}, &(0x7f0000000380)=0xc) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffffffffbff, 0x9, 0x0, 0x4, 0x1, 0x4, "0df48493c8dea648988eeaae401736fcf31654e11fae0be144c7f0e3f0b425eb5ca0c47cbd2fcfb2f397c6824ae174be693f74625ad3a0c213be93624b468db6", "602d7138fa4753ab0e9b669a21fbc70391e9ab68a702d15a0fd905006ccee0ebb07fe7ad82ab6cb7c9c5091b97a81210d8007d601aee5649a769bd81f3aa322b", "f8918263da591b8deeee07ca6339ca4bcc834820cbdb938e2f0d666dfbc2318a", [0x6, 0xffffffff]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf250100000014000900ffef88874ee203c39e00000000000001050002000a00000006000a004e"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000090) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c824, 0x1004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x0) 2.430700461s ago: executing program 4 (id=492): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 2.314021105s ago: executing program 4 (id=493): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r0, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x300, 0x8001}, 0x0) 2.313697721s ago: executing program 2 (id=494): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'nicvf0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0x0, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0xfffffffc, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0xd0, 0x20}}}, @common=@hbh={{0x48}, {0x6, 0x9, 0x0, [0x7, 0x8000, 0x100, 0x1, 0x80, 0x5d, 0x9, 0x2, 0x8, 0x1, 0x7ff, 0x1e, 0x6, 0x5, 0xcb1], 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x7, 0x3366}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x390) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r2 = socket(0x2, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000500)={0x80000800}, 0x10) write(r2, &(0x7f0000000280)="240000001a005f0400f9f407000904018020200000000400000000000800020000000000", 0x24) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0xd23) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000980)=ANY=[@ANYRES16=r3, @ANYRES8=r2, @ANYRES8=r0, @ANYRESOCT=r2, @ANYRES32=r2, @ANYRESHEX, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRESOCT=r0], 0x1, 0xa2f, &(0x7f00000018c0)="$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") syz_io_uring_setup(0xd5, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = getpid() connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e21, @loopback}, 0x10) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0xd) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000000c0)={{}, 0x9, 0x3a6, 0x100000}) write$smackfs_label(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x3830f9bba19aac3, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000940), 0x0, 0x40000) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000480)=0x4040, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000900)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)={0x24102, 0x0, 0xe}, &(0x7f0000000400)='./file1\x00', 0x18}) 2.310891741s ago: executing program 4 (id=495): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5958, &(0x7f0000005880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (fail_nth: 3) 1.645832842s ago: executing program 1 (id=498): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000002800)={0x4, 0x1, 0x0, "833461025a78ffa177be169916ea42232f59496b79b29963084f401a544b75d0"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r4, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x3}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x800], [0x1, 0xfffffffe], [0x206300000, 0x7, 0x0, 0xfffffffffffffeff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000100)={r9}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc04c5349, 0x0) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.556796677s ago: executing program 3 (id=499): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 21) 1.132648795s ago: executing program 4 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.057918645s ago: executing program 2 (id=502): unshare(0x22020600) r0 = userfaultfd(0x801) r1 = syz_io_uring_setup(0xa6, &(0x7f0000000480)={0x0, 0x9535, 0x800, 0x3, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003a40)=""/4110, 0x1006}, {&(0x7f00000016c0)=""/4107, 0x100b}, {&(0x7f0000000080)=""/80, 0x4c}, {&(0x7f0000000c00)=""/84, 0x54}], 0x4, 0x0, 0xfffffd3c}, 0x3f}], 0x1, 0x1a002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, 0x3000}) 1.057794271s ago: executing program 3 (id=503): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 729.092221ms ago: executing program 3 (id=505): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x2}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x5, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0x101}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) 728.831184ms ago: executing program 2 (id=506): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x4001) r0 = syz_clone(0xc000000, &(0x7f0000000bc0)="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", 0x1000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="c7cf62ec7269b7ebb604e045dd43c5ee797ab43814dde869f1d455ab04ae868d57d29650d381b6d45d69cee56e9e2b23bac68e9b120882a24cf809abface71356e15ffb8cff7d0d9cf38d9b4e2dc05fc") r1 = syz_open_procfs(r0, &(0x7f0000000240)='sessionid\x00') read$FUSE(r1, &(0x7f000000ac40)={0x2020}, 0x2020) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/183, 0xb7}], 0x1, 0x200, 0x101) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="b702000007000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000005b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a55b000000c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2d90addedc28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000801989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df0104000099d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802c8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e661a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b7c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a8f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c40bde6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b01b823c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b988494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74585cf5e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f222c714870582a8832c2a326c5d1e406c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada47288e41e7e6ee82d66b99ae4b0889fe949e7342ca97c1a64dcc7f6a0c0da07de8c808b4caec54820f856889fc5f1af3d675206e3257f974d6e45ff1e905c2f0fc0173ac6714acaaca2397bee23630ecaa2c1c6ddc3085689a033d6d41a1a7ac59baec299158faa52308856805f2130863f4668e27b8bbef4f4cd43a2fd294b5b0bf2b0e4afbe570c54aa214579ca0caf54231d00a94eda2be6f037e2befdd03bf152f696ca1d1ea86eb7ee1f021062ad71246dae1580c4f959a320912032ed468a8ed9f27a2258ddf465de77a51b4713bc6b789a0e8b203f0f592ddb27aa90989a9e0cb624bc34e7d6ebf156ea251e3a2f83ada9f0b70035e8ed200a52b00"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xff56, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffb7, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0}}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000080)) 726.627079ms ago: executing program 1 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x1, 0x2c6, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000002000)='./file2\x00', 0x2300, 0xa4) (async) openat(0xffffffffffffff9c, &(0x7f0000002000)='./file2\x00', 0x2300, 0xa4) r3 = syz_io_uring_setup(0x117, 0x0, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2, 0x401, 0x0, 0x3, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 453.852827ms ago: executing program 0 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080), 0x1004014, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) 453.455366ms ago: executing program 3 (id=513): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) unshare(0x26020480) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0x20, 0x6, 0x1, @local, @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x7, @multicast2, 0xb7}, @generic={0x2, 0x2}]}}}}}}}}, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc, r4}, 0xc) close(r1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xc5, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x107, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 429.958285ms ago: executing program 1 (id=514): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55c1, &(0x7f000000c040)="$eJzs3M2PE2UYAPCnuyzf4sZ48MYkxGQ3oQ1dPqInUSF+RAjx4+BJu21pCm1nsy1l5cTBo/Hgf2I08eTRv8GDHvVmPGi8mWBm3sGwsCgfpQT4/ZKZZ+bp22femUxInmG2ATyzlrO//qjFodgXEYsRcbAW5XatWiKuR5xOY1+KiMMRsXDLUqvy/yZ2R8T+iDhUFE81a9VHXx2dHjn5+7t/fv/jnl0Hvv7up8d64sBj9XJEDDfS9tVhinkvxUtVvjXtl3F4YlrFjW01hnnKX+2ulxWutm6Oa5XxeC+NzzeujIt4cdBqF7HXv1jmN0bpgONp72ad4gvZpdZmud/prpexP87L2LuWjrt1Lf3bdm08SXU6Vb3PyvIxmdyMKd/d6qbz2bhcxvZoUuVT3bzT3SritIrV4aKdDzrlPNYf8CI/Ad7rj65sZdPu5rifj7KTjeYrjeapenMz73Qn3RP11rBz6kS20hsUw+qTbmt4upfnvUG30c6Hq9lKr92uN5vZypnuer81yprNxvHGsfrJ1WrraPbW+Y+yQSdbKeIb/dGVSX8wzi7mm1n6xmq21jj+6mp2pJl9cO5CduH9s2fPXfjwkzMfn3/93DtvVoPumFa2snZsba3ePFZfa64+Q+f/eTXp+zj/2s7pX35+uMsGyV1uMADu7o7+P27v/0P/D8zcw/T/w8vV/qPp/+Ne+v+YZf9ftFT6///vfxfuq/89NJP+dyn0/4/w/OGhPFj/v3vm8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYO5+Xfrm7XJjOe0fqPLPVakXqv1aRCxExI0dLMbubTUXqzpLdxm/dNscfqhFWaE4xp5q2R8Rp6vl7+cf9VUAAACAp8GN2k7Zb68f/jJ162m1PO9p8TilhzYLBz+dUb3iHlta/m1G1RaK1YszKlbe37tia0bVygdYe2dULD1y2zWravdkcVvYe0uopbAw1+kAAABzsb0TmG8XAgAAwDx98Z+fvja3eTBn5TsB1bv41Qv8e1Ko/kNwX7G6cdvL/QAAAMCTZMe/CQAAAACeKmX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4h537uVEbiOIA/GwwkH8KinJPK7lBGSkhxxwDBaQJSiAtpAFqIFIOKWEFK+xZJO+CtFrGWIu+T7K9M179PANc3lgaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NLfaj3//fPLr0tzdvvL5JkNAAAAcMq2Ws/rP6ZN+13q/5C6PqV2ERFlRJyq3QcxamUOUk515v+rR2P4E1EnHPrH6XgbEV/Tcfex608BAAAAbtdmuZo11XpzSksA//odFVfSLNqU779lyisiopr+z5RWHk6fM4XVv+9h/MiUVi9gTTKFNUtuw9P3Rrke0jZoXR5msqi/xLpVdvNcAACgT+1K4EwVAgAAwA343vcAuIanpX1xPB3fM46bS3oh+KbVAgAAAF6hou8BAAAAAJ2r6/9u9v+bvGj/v8L+fwAAAJBds/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW6/lmuZqdu794Zs5uf5l8MwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J79eUeBEAiDMNi7vjOZ+x9WGjQ0NqkC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB487u//J+YGmeSudfG0vNIsnZqbJ0ae+fG0R/G168BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7od7/8n5gaZ5K508bS8UiydtXYumrsPWgcPRhv/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbtpjWOMg4A+DM7+9JEizFKwKhU6UEvNt3Waq8iSvDgRxBCuinRrdU2B1uCbS7eJOdeRC+CiKDEW75DzwZ6qTcPOUTw5CEyb+lsdttsUzObJr8fzM5/n5l5XmbSpf95ZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgsPleeKWWx3HyMZHFRdkfW8vzyXpj1zqxvnpvOlmSOGoVpSdfr673h9qr5S+npkbXEQAAAI6Kk3vuERf5fQjhfmNtNlnXJtL8v1Hsk+T83+dVRXnZ7rx/Y2v5RL5pusj/f//trxd3GpqI03aSShcWu52z/V2p73uYT7nn9tyjnp759N5LnF6Q2kcrL2w20vMZfXv37gfNNGxV0VsAYD/OFOs8KP4/lKzbo+wYAMdGvZR4F/l/PDHaPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUYXMlPFPEUQhhuv4gTmxsLc8PWt9evTe9ni/v3LmzWq4zqaIRQlhY7HbOVjiWw6s4mzc/m+t2O9eu36g6OBVCGLDp1nCHx3n3H7pPM4TQU3L6pQH1fDJEW7vq6QvyP89Q7TkcS8a3585RT0nUd8Lf38485PDWEE1UECQXe/+H1/LrcxA9HKv8uvcGxd9e36ZmvqH/qORf/hA1P85vSevJf44AADjSxvN8vJFnovcba7NJeTQZwvYPvfn/G6U49OT927eykux7kftHA9or5//tgx7cU2Rm6coXM9dv3Hxr8crc5c7lzudvn2u/2z5/8cKFizPpvZKZhVBzxwQAAIAn0MyXcv4/NmD+f7wUh0fM/2dTwtk9gC+/a39dbiuW/w/0YNJv1D0BAAA4jpo70fOv/fP3oPnsqNkMX80tLV1rZ587389ln8O0crv+f/b58bXypZz/x5Oj7RMAAABQjc2VqGf+/1IpDo+Y/18vvf//7E8v/1KuM86eLbgaQuicmb/avVTdcA613pd+f4wP4kXltKHmqEcKAADAqIzlS3n+vzGZ5P+1nUceaiGEN0+H8G/+Dn8YMv+PP/zm53Jb5ef/z1c6ysOnNpWdj3Q9FUJ9atQ9AgAA4Cg7kS9Jsv9nY23201/HP256/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgav8FAAD//81/Inc=") (async) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x55c1, &(0x7f000000c040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x810, &(0x7f0000000040)=ANY=[], 0xff, 0x5aa3, &(0x7f0000012f40)="$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") syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) pwrite64(r2, &(0x7f0000000140)='j', 0x1, 0x8080c63) (async) pwrite64(r2, &(0x7f0000000140)='j', 0x1, 0x8080c63) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB='\b'], 0x1) sendfile(r1, r1, 0x0, 0x1000000000007) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) (async) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) linkat(r0, &(0x7f0000000300)='./file1\x00', r0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = gettid() ptrace$peek(0x1, r4, &(0x7f0000000080)) (async) ptrace$peek(0x1, r4, &(0x7f0000000080)) 415.476625ms ago: executing program 0 (id=515): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000080)) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 297.934326ms ago: executing program 0 (id=516): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 297.548681ms ago: executing program 1 (id=517): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7d9}}, './file0\x00'}) r3 = syz_io_uring_setup(0xec5, &(0x7f00000002c0)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x40}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) io_uring_enter(r3, 0x2, 0x10a5, 0x3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) r8 = socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x4) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) 286.659059ms ago: executing program 0 (id=518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) unshare(0x22020600) fdatasync(0xffffffffffffffff) 233.919154ms ago: executing program 0 (id=519): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xffffffffffffffde, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r5, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b351f0fda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x2, 0x4004040) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r6, 0x0, 0x81, 0x1, &(0x7f0000001680)="85"}) r8 = syz_open_dev$usbmon(&(0x7f0000000100), 0xc27a, 0x385000) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r8, 0x100000000) 233.490344ms ago: executing program 1 (id=520): r0 = getpid() ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={&(0x7f0000000240)=""/202, 0xca}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x35, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@tail_call, @tail_call, @ldst={0x1, 0x3, 0x1, 0xa, 0x0, 0xfffffffffffffff0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x49}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x2, &(0x7f00000004c0)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000500)='GPL\x00', 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22d59, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYRES16=r5], 0x48}}, 0x4080) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x48000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x0, 0x5, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x2, 0xff, 0x6, 0x6, 0xbf}, 0x20) preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000400)=""/105, 0x69}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/207, 0xcf}, {&(0x7f0000000700)=""/43, 0x2b}], 0x4, 0xd649, 0x1000) 118.280055ms ago: executing program 2 (id=521): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)={0xd, 0x7, 0x1, {{}, 0xfffffff5}}, 0xd) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0) 41.899766ms ago: executing program 2 (id=522): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000340)={[], [{@obj_user={'obj_user', 0x3d, '),\'},!&\\[{d\xab\x13\xfc\xf8\xef\x95_3\xb0\x18\xc2\xf3\xc4o%\x90?v\x9a\x1f\xd4\xdc\xb5\x94@I\x1c\xba\xe9\x9f\x18\xff\x8e\xd1\x985c-\xb5c\x91(\x87y\x1e(\x10\xf5\xe7\xbb>\xf2e\xbe\xa5\x84\xdc\xa2\x96\xd9\xad\xfb:9?$X1~\xba\xeeO\x87 $\xba\x82S\xdf\x97\x17\xb7\x82\x94\xffJ\x9f\xc8\x1b\xdc\xb6\x1c\xc2\xff\xbb\xfd\xbe\xf2\x16\x0f+\xb8@\x889~\x19up\x03]\xde!\x15P\xaf\xd8\x83\xa0\xc3\xd8\ncJ\x81 n[4\xcb\xca[xlG\xb6\x0fny#:}~\x89\xab\xfe\x82\xf4b\xac\xd2\xaf\xa3\xf1\xa4\xcdB\b\x1b\xc7\xb4C\x91x(\x96\xef\xb6w\xf9K\x1b\xc2e\x06'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}, 0x0, 0x55d4, &(0x7f000000ac40)="$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") mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d491, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)={[{@cruft}, {@uid}, {@unhide}, {@overriderock}, {@utf8}]}, 0x1, 0x534, &(0x7f0000000580)="$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") pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") 24.954422ms ago: executing program 1 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@initdev, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x8, 0x2, @private1, @mcast2, 0x8000, 0x80, 0x0, 0x1}}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtaction={0x24c, 0x30, 0x1, 0x2, 0x25dfdbfe, {}, [{0x238, 0x1, [@m_mirred={0xe0, 0x4, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5b01, 0x4, 0x20000000, 0x5, 0x8}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1000, 0x20000000, 0x7f, 0xfff}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x101, 0x1, 0x2, 0x5}, 0x3, r2}}]}, {0x51, 0x6, "b2cb18a43557385f1a44bf506e892f460465d0bb015721a1558fa684bc3d1e940cfaf86ac850580c4c1c20367a7cb92c5888f6061525fffce7c17e6baf43b66661712a14e53266ed98ae21a433"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x154, 0x3, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="523c5ec2b97f"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="7baf0850424a"}]}, {0xed, 0x6, "0b9222c0b0cd096fa6cc2c298e29c24cc01c8e6b43dd0cb5ba70860ff27bf5864728aa7a1bc3357924f057286b82af6f184cae71fd2f4600343f7b6960fa6f56a94d58aec934dab952821bc1e2098d278252866c6b3a25ea3ae1be9b6a13ea234b6008c4b1a4707ece5fc91702a503adb487e9c311df5517eb99648c355ca7bc5fefcf2ce8ae8c94458ecae86619418e7210a99469032e590359e3345017b29368dcfd98f54bc2e793e52d7f4ea20b33ebecd381fe2a78344b2115a1410f6ec7335a119fa3f113400bee2220a31ae3346417e00c2905bac6ea8c4d9cb02eff524bbfa1276a20aa681d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20008891}, 0xc0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0xffffc000) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x200180) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000001380)={{0x7, 0x7}, 'port0\x00', 0x10, 0x87, 0x3, 0x1, 0x200, 0x5, 0x7fffffff, 0x0, 0x1, 0x6}) (async) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000100)=0x10000) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28012, r5, 0x0) 0s ago: executing program 0 (id=524): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x4000010) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)='7', 0x1}]) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) renameat2(r4, &(0x7f0000002100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f00000000c0)={0xe, {{0xa, 0x4e22, 0xc, @mcast1, 0x9}}, {{0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}, 0x108) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) kernel console output (not intermixed with test programs): meout [ 57.475779][ T6532] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.475831][ T6532] Bluetooth: hci3: command 0x0406 tx timeout [ 57.475862][ T6532] Bluetooth: hci4: command 0x0c1a tx timeout [ 57.609856][ T4709] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x23507b5b level 0 [ 57.637971][ T7777] BTRFS warning (device loop2): couldn't read tree root [ 57.803209][ T7798] loop3: detected capacity change from 0 to 128 [ 57.815809][ T7798] adfs: Bad value for 'gid' [ 57.815847][ T7798] adfs: Bad value for 'gid' [ 57.821281][ T7777] BTRFS error (device loop2): open_ctree failed: -5 [ 58.241300][ T7784] loop1: detected capacity change from 0 to 32768 [ 58.260010][ T7784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.181 (7784) [ 58.263527][ T7784] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.263595][ T7784] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 58.263621][ T7784] BTRFS info (device loop1): using free-space-tree [ 58.415574][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 58.449356][ T7837] FAULT_INJECTION: forcing a failure. [ 58.449356][ T7837] name failslab, interval 1, probability 0, space 0, times 1 [ 58.449428][ T7837] CPU: 1 UID: 0 PID: 7837 Comm: syz.2.187 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 58.449438][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 58.449443][ T7837] Call trace: [ 58.449446][ T7837] show_stack+0x2c/0x3c (C) [ 58.449459][ T7837] __dump_stack+0x30/0x40 [ 58.449468][ T7837] dump_stack_lvl+0xd8/0x12c [ 58.449475][ T7837] dump_stack+0x1c/0x28 [ 58.449482][ T7837] should_fail_ex+0x41c/0x594 [ 58.449488][ T7837] should_failslab+0xc0/0x128 [ 58.449495][ T7837] kmem_cache_alloc_node_noprof+0x88/0x3f4 [ 58.449501][ T7837] alloc_vmap_area+0x220/0x1430 [ 58.449507][ T7837] __get_vm_area_node+0x220/0x330 [ 58.449513][ T7837] __vmalloc_node_range_noprof+0x2bc/0xf70 [ 58.449519][ T7837] vzalloc_noprof+0xf4/0x150 [ 58.449525][ T7837] vc_uniscr_check+0x160/0x508 [ 58.449531][ T7837] vc_get_glyph+0x110/0x1b0 [ 58.449536][ T7837] do_con_write+0x868/0x3f40 [ 58.449542][ T7837] con_write+0x34/0x58 [ 58.449547][ T7837] n_tty_write+0xad0/0xef0 [ 58.449553][ T7837] file_tty_write+0x400/0x7c0 [ 58.449558][ T7837] tty_write+0x44/0x54 [ 58.449563][ T7837] vfs_write+0x62c/0x97c [ 58.449570][ T7837] ksys_write+0x120/0x210 [ 58.449576][ T7837] __arm64_sys_write+0x7c/0x90 [ 58.449587][ T7837] invoke_syscall+0x98/0x2b8 [ 58.449592][ T7837] el0_svc_common+0x130/0x23c [ 58.449597][ T7837] do_el0_svc+0x48/0x58 [ 58.449602][ T7837] el0_svc+0x58/0x180 [ 58.449609][ T7837] el0t_64_sync_handler+0x84/0x12c [ 58.449615][ T7837] el0t_64_sync+0x198/0x19c [ 58.449728][ T7837] syz.2.187: vmalloc error: size 24960, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 58.449846][ T7837] CPU: 1 UID: 0 PID: 7837 Comm: syz.2.187 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 58.449853][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 58.449856][ T7837] Call trace: [ 58.449858][ T7837] show_stack+0x2c/0x3c (C) [ 58.449863][ T7837] __dump_stack+0x30/0x40 [ 58.449871][ T7837] dump_stack_lvl+0xd8/0x12c [ 58.449878][ T7837] dump_stack+0x1c/0x28 [ 58.449884][ T7837] warn_alloc+0x1f8/0x30c [ 58.449890][ T7837] __vmalloc_node_range_noprof+0x2dc/0xf70 [ 58.449898][ T7837] vzalloc_noprof+0xf4/0x150 [ 58.449903][ T7837] vc_uniscr_check+0x160/0x508 [ 58.449908][ T7837] vc_get_glyph+0x110/0x1b0 [ 58.449914][ T7837] do_con_write+0x868/0x3f40 [ 58.449919][ T7837] con_write+0x34/0x58 [ 58.449924][ T7837] n_tty_write+0xad0/0xef0 [ 58.449931][ T7837] file_tty_write+0x400/0x7c0 [ 58.449936][ T7837] tty_write+0x44/0x54 [ 58.449941][ T7837] vfs_write+0x62c/0x97c [ 58.449947][ T7837] ksys_write+0x120/0x210 [ 58.449953][ T7837] __arm64_sys_write+0x7c/0x90 [ 58.449960][ T7837] invoke_syscall+0x98/0x2b8 [ 58.449964][ T7837] el0_svc_common+0x130/0x23c [ 58.449969][ T7837] do_el0_svc+0x48/0x58 [ 58.449973][ T7837] el0_svc+0x58/0x180 [ 58.449978][ T7837] el0t_64_sync_handler+0x84/0x12c [ 58.449983][ T7837] el0t_64_sync+0x198/0x19c [ 58.449993][ T7837] Mem-Info: [ 58.450002][ T7837] active_anon:3266 inactive_anon:21646 isolated_anon:0 [ 58.450002][ T7837] active_file:2681 inactive_file:4736 isolated_file:0 [ 58.450002][ T7837] unevictable:768 dirty:418 writeback:0 [ 58.450002][ T7837] slab_reclaimable:5480 slab_unreclaimable:90060 [ 58.450002][ T7837] mapped:31206 shmem:20970 pagetables:1059 [ 58.450002][ T7837] sec_pagetables:0 bounce:0 [ 58.450002][ T7837] kernel_misc_reclaimable:0 [ 58.450002][ T7837] free:1398915 free_pcp:40793 free_cma:7360 [ 58.450021][ T7837] Node 0 active_anon:13064kB inactive_anon:86584kB active_file:10724kB inactive_file:18944kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:124724kB dirty:1672kB writeback:0kB shmem:83880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10288kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 58.450039][ T7837] Node 0 DMA free:3076864kB boost:0kB min:20856kB low:26068kB high:31280kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 58.450064][ T7837] lowmem_reserve[]: 0 0 3494 3494 3494 [ 58.450110][ T7837] Node 0 Normal free:2518796kB boost:0kB min:24196kB low:30244kB high:36292kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13264kB inactive_anon:86284kB active_file:10724kB inactive_file:18944kB unevictable:3072kB writepending:1672kB present:5242880kB managed:3577920kB mlocked:0kB bounce:0kB free_pcp:163172kB local_pcp:39128kB free_cma:0kB [ 58.450135][ T7837] lowmem_reserve[]: 0 0 0 0 0 [ 58.450179][ T7837] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 58.450318][ T7837] Node 0 Normal: 1428*4kB (UME) 994*8kB (UME) 544*16kB (UME) 275*32kB (UME) 254*64kB (UME) 54*128kB (UME) 13*256kB (UME) 15*512kB (UME) 6*1024kB (UME) 5*2048kB (UM) 595*4096kB (UME) = 2518848kB [ 58.450489][ T7837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 58.450499][ T7837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 58.450508][ T7837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 58.450517][ T7837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 58.450525][ T7837] 28404 total pagecache pages [ 58.450533][ T7837] 0 pages in swap cache [ 58.450540][ T7837] Free swap = 124996kB [ 58.450547][ T7837] Total swap = 124996kB [ 58.450554][ T7837] 2097152 pages RAM [ 58.450561][ T7837] 0 pages HighMem/MovableOnly [ 58.450568][ T7837] 432624 pages reserved [ 58.450575][ T7837] 8192 pages cma reserved [ 58.450585][ T7837] 1 pages hwpoisoned [ 58.510133][ T6537] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 58.723652][ T7843] fuse: Bad value for 'fd' [ 58.728595][ T7847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.190'. [ 58.742427][ T6528] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 58.964383][ T7856] tmpfs: Bad value for 'size' [ 59.174775][ T7854] loop2: detected capacity change from 0 to 32768 [ 59.177929][ T7854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.193 (7854) [ 59.183299][ T7854] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 59.183580][ T7854] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 59.183645][ T7854] BTRFS info (device loop2): using free-space-tree [ 59.201779][ T7854] BTRFS info (device loop2): rebuilding free space tree [ 59.243133][ T7835] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.244669][ T7835] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.250739][ T7835] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.252238][ T7835] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.254017][ T7835] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.256560][ T7835] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 59.258040][ T7835] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 60.083516][ T6533] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.110097][ T7889] loop4: detected capacity change from 0 to 128 [ 60.113637][ T7888] loop1: detected capacity change from 0 to 128 [ 60.113962][ T7888] adfs: Bad value for 'gid' [ 60.113978][ T7888] adfs: Bad value for 'gid' [ 60.158732][ T7891] loop0: detected capacity change from 0 to 1024 [ 60.171187][ T7891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.246208][ T7897] loop3: detected capacity change from 0 to 512 [ 60.254635][ T7897] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.257702][ T7897] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.200: bad orphan inode 13 [ 60.260380][ T7897] ext4_test_bit(bit=12, block=18) = 1 [ 60.260439][ T7897] is_bad_inode(inode)=0 [ 60.260462][ T7897] NEXT_ORPHAN(inode)=2130706432 [ 60.260477][ T7897] max_ino=32 [ 60.260490][ T7897] i_nlink=1 [ 60.260998][ T7897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.293545][ T6536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.297237][ T7897] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 60.302912][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.303089][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.468527][ T7909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.509588][ T7909] loop1: detected capacity change from 0 to 1024 [ 60.510715][ T7911] FAULT_INJECTION: forcing a failure. [ 60.510715][ T7911] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 60.512288][ T7911] CPU: 1 UID: 0 PID: 7911 Comm: syz.4.204 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 60.512306][ T7911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 60.512311][ T7911] Call trace: [ 60.512314][ T7911] show_stack+0x2c/0x3c (C) [ 60.512326][ T7911] __dump_stack+0x30/0x40 [ 60.512335][ T7911] dump_stack_lvl+0xd8/0x12c [ 60.512342][ T7911] dump_stack+0x1c/0x28 [ 60.512348][ T7911] should_fail_ex+0x41c/0x594 [ 60.512354][ T7911] should_fail_alloc_page+0xec/0x10c [ 60.512361][ T7911] prepare_alloc_pages+0x1c8/0x50c [ 60.512367][ T7911] __alloc_frozen_pages_noprof+0x134/0x318 [ 60.512372][ T7911] alloc_pages_mpol+0x1e4/0x460 [ 60.512377][ T7911] alloc_pages_noprof+0xe0/0x308 [ 60.512382][ T7911] __pte_alloc+0x48/0x1e0 [ 60.512389][ T7911] handle_mm_fault+0x41a8/0x4d38 [ 60.512393][ T7911] do_page_fault+0x410/0x13cc [ 60.512400][ T7911] do_translation_fault+0xc4/0x114 [ 60.512406][ T7911] do_mem_abort+0x70/0x194 [ 60.512412][ T7911] el0_da+0x64/0x164 [ 60.512418][ T7911] el0t_64_sync_handler+0x90/0x12c [ 60.512423][ T7911] el0t_64_sync+0x198/0x19c [ 60.512512][ T7911] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 60.549076][ T7909] capability: warning: `syz.1.203' uses deprecated v2 capabilities in a way that may be insecure [ 60.575699][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 60.605748][ T7900] loop2: detected capacity change from 0 to 65536 [ 60.621136][ T4919] hfsplus: b-tree write err: -5, ino 4 [ 60.631194][ T7900] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 60.632500][ T7905] loop0: detected capacity change from 0 to 32768 [ 60.634399][ T7905] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.201 (7905) [ 60.644270][ T7905] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.644402][ T7905] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 60.644436][ T7905] BTRFS info (device loop0): using free-space-tree [ 60.671775][ T7900] XFS (loop2): Ending clean mount [ 60.674424][ T7900] XFS (loop2): Quotacheck needed: Please wait. [ 60.683703][ T7911] loop4: detected capacity change from 0 to 40427 [ 60.694199][ T7911] F2FS-fs (loop4): build fault injection type: 0x35f7 [ 60.694255][ T7911] F2FS-fs (loop4): build fault injection rate: 690 [ 60.694282][ T7911] F2FS-fs (loop4): Image doesn't support compression [ 60.704955][ T7911] F2FS-fs (loop4): invalid crc value [ 60.720199][ T7900] XFS (loop2): Quotacheck: Done. [ 60.757894][ T7911] F2FS-fs (loop4): Start checkpoint disabled! [ 60.768852][ T7911] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 60.795369][ T7934] loop1: detected capacity change from 0 to 32768 [ 60.849319][ T7934] jbd2_journal_init_inode: Cannot locate journal superblock [ 60.849422][ T7934] (syz.1.205,7934,0):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 60.849455][ T7934] (syz.1.205,7934,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal! [ 60.849477][ T7934] (syz.1.205,7934,0):ocfs2_check_volume:2432 ERROR: status = -22 [ 60.849496][ T7934] (syz.1.205,7934,0):ocfs2_mount_volume:1764 ERROR: status = -22 [ 60.854467][ T7934] (syz.1.205,7934,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 61.068863][ T7947] tmpfs: Bad value for 'size' [ 61.260075][ T7897] EXT4-fs warning (device loop3): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 61.260075][ T7897] [ 61.305769][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 61.306092][ T6532] Bluetooth: hci3: command 0x0406 tx timeout [ 61.306131][ T6532] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.306153][ T6532] Bluetooth: hci1: command 0x0406 tx timeout [ 61.323378][ T6529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.346050][ T6536] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.804933][ T7962] loop1: detected capacity change from 0 to 1024 [ 61.840698][ T7956] loop0: detected capacity change from 0 to 32768 [ 61.844369][ T7956] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.209 (7956) [ 61.847043][ T7962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.848639][ T7956] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.848699][ T7956] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 61.848730][ T7956] BTRFS info (device loop0): using free-space-tree [ 61.894343][ T7956] BTRFS info (device loop0): rebuilding free space tree [ 61.975922][ T7950] loop4: detected capacity change from 0 to 40427 [ 62.111337][ T7950] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.130266][ T7950] fuse: Bad value for 'user_id' [ 62.130311][ T7950] fuse: Bad value for 'user_id' [ 62.478056][ T6536] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 62.537306][ T7993] x_tables: duplicate underflow at hook 4 [ 62.537922][ T7993] dlm: no locking on control device [ 62.575814][ T6537] syz-executor: attempt to access beyond end of device [ 62.575814][ T6537] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.576218][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 62.576232][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 62.576237][ T6537] Call trace: [ 62.576240][ T6537] show_stack+0x2c/0x3c (C) [ 62.576255][ T6537] __dump_stack+0x30/0x40 [ 62.576266][ T6537] dump_stack_lvl+0xd8/0x12c [ 62.576273][ T6537] dump_stack+0x1c/0x28 [ 62.576280][ T6537] f2fs_handle_critical_error+0x34c/0x4b8 [ 62.576288][ T6537] f2fs_stop_checkpoint+0x5c/0x70 [ 62.576294][ T6537] f2fs_write_end_io+0x58c/0x818 [ 62.576301][ T6537] bio_endio+0x804/0x840 [ 62.576307][ T6537] submit_bio_noacct+0x158/0x176c [ 62.576315][ T6537] submit_bio+0x354/0x4d4 [ 62.576321][ T6537] f2fs_submit_write_bio+0x13c/0x324 [ 62.576326][ T6537] __submit_merged_bio+0x254/0x704 [ 62.576331][ T6537] __submit_merged_write_cond+0x23c/0x4ac [ 62.576336][ T6537] f2fs_write_data_pages+0x1d28/0x2634 [ 62.576342][ T6537] do_writepages+0x270/0x468 [ 62.576349][ T6537] filemap_fdatawrite+0x144/0x1e8 [ 62.576354][ T6537] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 62.576361][ T6537] f2fs_write_checkpoint+0x684/0x1694 [ 62.576368][ T6537] kill_f2fs_super+0x21c/0x584 [ 62.576373][ T6537] deactivate_locked_super+0xc4/0x12c [ 62.576379][ T6537] deactivate_super+0xe0/0x100 [ 62.576384][ T6537] cleanup_mnt+0x31c/0x3ac [ 62.576389][ T6537] __cleanup_mnt+0x20/0x30 [ 62.576395][ T6537] task_work_run+0x1dc/0x260 [ 62.576400][ T6537] do_notify_resume+0x174/0x1f4 [ 62.576406][ T6537] el0_svc+0xb8/0x180 [ 62.576412][ T6537] el0t_64_sync_handler+0x84/0x12c [ 62.576417][ T6537] el0t_64_sync+0x198/0x19c [ 62.576509][ T6537] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 62.594778][ T7997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 62.606363][ T7997] loop3: detected capacity change from 0 to 16 [ 62.610197][ T7997] erofs: Unknown parameter '' [ 62.645803][ T6528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.655579][ T6538] Bluetooth: hci0: command 0x0406 tx timeout [ 62.805237][ T8000] loop1: detected capacity change from 0 to 40427 [ 62.837012][ T6533] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 62.887630][ T8000] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.375532][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 63.375742][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 63.375841][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 63.534011][ T6528] syz-executor: attempt to access beyond end of device [ 63.534011][ T6528] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.534075][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 63.534086][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 63.534092][ T6528] Call trace: [ 63.534095][ T6528] show_stack+0x2c/0x3c (C) [ 63.534108][ T6528] __dump_stack+0x30/0x40 [ 63.534117][ T6528] dump_stack_lvl+0xd8/0x12c [ 63.534124][ T6528] dump_stack+0x1c/0x28 [ 63.534131][ T6528] f2fs_handle_critical_error+0x34c/0x4b8 [ 63.534138][ T6528] f2fs_stop_checkpoint+0x5c/0x70 [ 63.534146][ T6528] f2fs_write_end_io+0x58c/0x818 [ 63.534152][ T6528] bio_endio+0x804/0x840 [ 63.534158][ T6528] submit_bio_noacct+0x158/0x176c [ 63.534165][ T6528] submit_bio+0x354/0x4d4 [ 63.534171][ T6528] f2fs_submit_write_bio+0x13c/0x324 [ 63.534177][ T6528] __submit_merged_bio+0x254/0x704 [ 63.534182][ T6528] __submit_merged_write_cond+0x23c/0x4ac [ 63.534187][ T6528] f2fs_write_data_pages+0x1d28/0x2634 [ 63.534193][ T6528] do_writepages+0x270/0x468 [ 63.534201][ T6528] filemap_fdatawrite+0x144/0x1e8 [ 63.534206][ T6528] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 63.534213][ T6528] f2fs_write_checkpoint+0x684/0x1694 [ 63.534220][ T6528] kill_f2fs_super+0x21c/0x584 [ 63.534225][ T6528] deactivate_locked_super+0xc4/0x12c [ 63.534231][ T6528] deactivate_super+0xe0/0x100 [ 63.534236][ T6528] cleanup_mnt+0x31c/0x3ac [ 63.534241][ T6528] __cleanup_mnt+0x20/0x30 [ 63.534246][ T6528] task_work_run+0x1dc/0x260 [ 63.534252][ T6528] do_notify_resume+0x174/0x1f4 [ 63.534258][ T6528] el0_svc+0xb8/0x180 [ 63.534265][ T6528] el0t_64_sync_handler+0x84/0x12c [ 63.534270][ T6528] el0t_64_sync+0x198/0x19c [ 63.534364][ T6528] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 63.568419][ T8021] loop2: detected capacity change from 0 to 32768 [ 63.572683][ T8021] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.220 (8021) [ 63.582349][ T8021] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.582440][ T8021] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 63.582478][ T8021] BTRFS info (device loop2): using free-space-tree [ 63.843911][ T8025] loop0: detected capacity change from 0 to 32768 [ 63.861042][ T8025] BTRFS: device /dev/loop0 (7:0) using temp-fsid 17ecde58-91dc-4d93-b456-adb81a2c3b52 [ 63.861090][ T8025] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.223 (8025) [ 63.873280][ T6533] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.934256][ T8050] tmpfs: Bad value for 'size' [ 64.160744][ T8025] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 64.160857][ T8025] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 64.160910][ T8025] BTRFS info (device loop0): using free-space-tree [ 64.214684][ T8025] BTRFS info (device loop0): rebuilding free space tree [ 64.359203][ T8065] input: syz0 as /devices/virtual/input/input3 [ 64.364515][ T8064] delete_channel: no stack [ 64.477236][ T8076] loop4: detected capacity change from 0 to 1024 [ 64.499830][ T2406] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.500277][ T2406] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.734536][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.734744][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.747945][ T8076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.760512][ T8087] netlink: 248 bytes leftover after parsing attributes in process `syz.1.231'. [ 64.761871][ T24] cfg80211: failed to load regulatory.db [ 64.784702][ T6536] BTRFS info (device loop0): last unmount of filesystem 17ecde58-91dc-4d93-b456-adb81a2c3b52 [ 64.807490][ T8087] netlink: 240 bytes leftover after parsing attributes in process `syz.1.231'. [ 64.874358][ T8092] loop0: detected capacity change from 0 to 128 [ 64.879124][ T8092] adfs: Bad value for 'gid' [ 64.879144][ T8092] adfs: Bad value for 'gid' [ 64.997686][ T6538] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 65.319645][ T6537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.362018][ T8082] loop3: detected capacity change from 0 to 65536 [ 65.371781][ T8082] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 65.389170][ T8082] XFS (loop3): Ending clean mount [ 65.401801][ T8082] XFS (loop3): Quotacheck needed: Please wait. [ 65.433548][ T8082] XFS (loop3): Quotacheck: Done. [ 65.769532][ T8129] loop4: detected capacity change from 0 to 32768 [ 65.774723][ T8129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.236 (8129) [ 65.823990][ T8148] loop1: detected capacity change from 0 to 764 [ 65.842676][ T8148] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 65.852145][ T8148] FAULT_INJECTION: forcing a failure. [ 65.852145][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 65.852199][ T8148] CPU: 1 UID: 0 PID: 8148 Comm: syz.1.238 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 65.852208][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 65.852212][ T8148] Call trace: [ 65.852215][ T8148] show_stack+0x2c/0x3c (C) [ 65.852227][ T8148] __dump_stack+0x30/0x40 [ 65.852238][ T8148] dump_stack_lvl+0xd8/0x12c [ 65.852245][ T8148] dump_stack+0x1c/0x28 [ 65.852251][ T8148] should_fail_ex+0x41c/0x594 [ 65.852257][ T8148] should_failslab+0xc0/0x128 [ 65.852268][ T8148] kmem_cache_alloc_lru_noprof+0x84/0x3ec [ 65.852274][ T8148] ovl_alloc_inode+0x2c/0x90 [ 65.852283][ T8148] alloc_inode+0x68/0x19c [ 65.852289][ T8148] iget5_locked+0x5c/0xc0 [ 65.852295][ T8148] ovl_get_inode+0x620/0xd40 [ 65.852302][ T8148] ovl_lookup+0x151c/0x18d8 [ 65.852307][ T8148] path_openat+0xcc0/0x2c40 [ 65.852313][ T8148] do_filp_open+0x18c/0x36c [ 65.852317][ T8148] do_open_execat+0x124/0x4c0 [ 65.852324][ T8148] alloc_bprm+0x3c/0x530 [ 65.852329][ T8148] do_execveat_common+0x168/0x834 [ 65.852336][ T8148] __arm64_sys_execve+0x9c/0xb4 [ 65.852342][ T8148] invoke_syscall+0x98/0x2b8 [ 65.852347][ T8148] el0_svc_common+0x130/0x23c [ 65.852351][ T8148] do_el0_svc+0x48/0x58 [ 65.852356][ T8148] el0_svc+0x58/0x180 [ 65.852362][ T8148] el0t_64_sync_handler+0x84/0x12c [ 65.852367][ T8148] el0t_64_sync+0x198/0x19c [ 65.852487][ T8148] overlayfs: failed to get inode (-12) [ 65.878987][ T8129] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 65.879233][ T8129] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 65.879259][ T8129] BTRFS info (device loop4): using free-space-tree [ 66.224709][ T8171] loop1: detected capacity change from 0 to 256 [ 66.305709][ T6537] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.497237][ T6538] Bluetooth: hci1: command 0x0406 tx timeout [ 66.587514][ T8179] tmpfs: Bad value for 'size' [ 66.799164][ T6529] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 66.832626][ T8181] loop0: detected capacity change from 0 to 1024 [ 66.836447][ T8181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.924202][ T8191] loop1: detected capacity change from 0 to 128 [ 66.924631][ T8191] adfs: Bad value for 'gid' [ 66.924653][ T8191] adfs: Bad value for 'gid' [ 67.026460][ T8193] loop3: detected capacity change from 0 to 32768 [ 67.028872][ T8193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.243 (8193) [ 67.035391][ T8193] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.038460][ T8193] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 67.040015][ T8193] BTRFS info (device loop3): using free-space-tree [ 67.078764][ T8193] BTRFS info (device loop3): rebuilding free space tree [ 67.710657][ T6536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.738290][ T8226] xt_hashlimit: max too large, truncated to 1048576 [ 67.774579][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.774790][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.832984][ T8218] loop1: detected capacity change from 0 to 40427 [ 67.839825][ T6529] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.849141][ T8218] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 67.913511][ T8224] loop2: detected capacity change from 0 to 32768 [ 67.926017][ T8224] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.251 (8224) [ 67.932225][ T8224] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 67.932301][ T8224] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 67.932330][ T8224] BTRFS info (device loop2): using free-space-tree [ 68.066902][ T8218] loop1: detected capacity change from 0 to 2048 [ 68.082971][ T8218] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 68.218128][ T8228] loop4: detected capacity change from 0 to 65536 [ 68.324694][ T8228] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 68.371313][ T8228] XFS (loop4): Ending clean mount [ 68.372894][ T8228] XFS (loop4): Quotacheck needed: Please wait. [ 68.421157][ T8228] XFS (loop4): Quotacheck: Done. [ 68.905600][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 69.034081][ T6533] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 69.054847][ T8270] loop0: detected capacity change from 0 to 32768 [ 69.282318][ T8280] loop3: detected capacity change from 0 to 128 [ 69.282689][ T8280] adfs: Bad value for 'gid' [ 69.282720][ T8280] adfs: Bad value for 'gid' [ 69.290555][ T8270] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.346157][ T8270] XFS (loop0): Ending clean mount [ 69.396676][ T8270] macvlan2: entered promiscuous mode [ 69.427842][ T6536] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.525178][ T8296] loop0: detected capacity change from 0 to 1024 [ 69.540944][ T8289] loop2: detected capacity change from 0 to 32768 [ 69.541310][ T8296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.559173][ T8289] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.617157][ T8308] process 'syz.1.263' launched './file2' with NULL argv: empty string added [ 69.900270][ T8308] loop1: detected capacity change from 0 to 32768 [ 69.934915][ T8289] XFS (loop2): Ending clean mount [ 69.941327][ T8308] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 70.010708][ T8289] XFS (loop2): Quotacheck needed: Please wait. [ 70.043266][ T6537] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 70.059751][ T8289] XFS (loop2): Quotacheck: Done. [ 70.072651][ T8289] tipc: Started in network mode [ 70.073774][ T8289] tipc: Node identity ac14140f, cluster identity 4711 [ 70.075860][ T8289] tipc: New replicast peer: 255.255.255.255 [ 70.076150][ T8289] tipc: Enabled bearer , priority 10 [ 70.231956][ T6533] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 70.339340][ T8317] xt_socket: unknown flags 0x50 [ 70.359309][ T6528] ocfs2: Unmounting device (7,1) on (node local) [ 70.426246][ T6536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.525283][ T8330] loop1: detected capacity change from 0 to 16 [ 70.526137][ T8330] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 70.530527][ T8330] cramfs: bad root offset 4 [ 70.581622][ T8322] loop4: detected capacity change from 0 to 32768 [ 70.610469][ T8322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.268 (8322) [ 70.619305][ T8322] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.619391][ T8322] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 70.619419][ T8322] BTRFS info (device loop4): using free-space-tree [ 71.015020][ T8315] loop3: detected capacity change from 0 to 131072 [ 71.072630][ T8353] loop1: detected capacity change from 0 to 32768 [ 71.109987][ T8315] F2FS-fs (loop3): build fault injection rate: 7 [ 71.110039][ T8315] F2FS-fs (loop3): build fault injection type: 0x40004 [ 71.110073][ T8315] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 71.113152][ T8315] F2FS-fs (loop3): invalid crc value [ 71.115183][ T6537] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.117100][ T8315] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x148/0x4a8 [ 71.117296][ T8315] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 71.117534][ T8315] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 71.118436][ T8315] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x178/0x7ac [ 71.125970][ T8353] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.272 (8353) [ 71.132838][ T8315] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x148/0x4a8 [ 71.134937][ T8315] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x148/0x4a8 [ 71.139003][ T8315] F2FS-fs (loop3): Bad quota inode 2:255 [ 71.139035][ T8315] F2FS-fs (loop3): Failed to enable quota tracking (type=2, err=-2). Please run fsck to fix. [ 71.139059][ T8315] F2FS-fs (loop3): Cannot turn on quotas: error -2 [ 71.139077][ T8315] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_recover_fsync_data+0x3c4/0x64d4 [ 71.140225][ T8315] F2FS-fs (loop3): Mounted with checkpoint version = 1b41e954 [ 71.153883][ T8353] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 71.153945][ T8353] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 71.153974][ T8353] BTRFS info (device loop1): using free-space-tree [ 71.195886][ T8374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.273'. [ 71.206228][ T3915] tipc: Node number set to 2886997007 [ 71.253151][ T8379] loop4: detected capacity change from 0 to 128 [ 71.267738][ T8379] adfs: Bad value for 'gid' [ 71.267782][ T8379] adfs: Bad value for 'gid' [ 71.365170][ T6528] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 71.454598][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.276'. [ 71.457308][ T8315] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x178/0x678 [ 71.472830][ T8381] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 71.475745][ T8315] F2FS-fs (loop3): sanity_check_inode: inode (ino=7) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 71.483787][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.485549][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.506402][ T8315] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿûmæ@{•¹FeS–½êˆL' [ 71.516195][ T8315] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x498/0x182c [ 71.516283][ T8315] F2FS-fs (loop3): invalid blkaddr: 4099, type: 7, run fsck to fix. [ 71.516903][ T8315] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x498/0x182c [ 71.516947][ T8315] F2FS-fs (loop3): invalid blkaddr: 512, type: 10, run fsck to fix. [ 71.517010][ T8315] F2FS-fs (loop3): invalid blkaddr: 516, type: 10, run fsck to fix. [ 71.519092][ T2064] F2FS-fs (loop3): invalid blkaddr: 4100, type: 7, run fsck to fix. [ 71.519519][ T8315] F2FS-fs (loop3): invalid blkaddr: 1027, type: 10, run fsck to fix. [ 71.521369][ T8315] F2FS-fs (loop3): invalid blkaddr: 512, type: 10, run fsck to fix. [ 71.521428][ T8315] F2FS-fs (loop3): invalid blkaddr: 516, type: 10, run fsck to fix. [ 71.541978][ T8328] loop2: detected capacity change from 0 to 131072 [ 71.568358][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 71.568411][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'. [ 71.581047][ T8387] ip6gretap1: entered allmulticast mode [ 71.620988][ T8328] F2FS-fs (loop2): Test dummy encryption mode enabled [ 71.635645][ T8328] F2FS-fs (loop2): invalid crc value [ 71.675031][ T8328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.679936][ T8383] loop1: detected capacity change from 0 to 65536 [ 71.709394][ T8383] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 71.788727][ T8383] XFS (loop1): Ending clean mount [ 71.795275][ T8383] XFS (loop1): Quotacheck needed: Please wait. [ 71.795914][ T8405] netlink: 'syz.4.280': attribute type 10 has an invalid length. [ 71.887026][ T8411] tmpfs: Bad value for 'size' [ 72.120423][ T8413] loop4: detected capacity change from 0 to 256 [ 72.121810][ T8383] XFS (loop1): Quotacheck: Done. [ 72.178535][ T8416] loop3: detected capacity change from 0 to 1024 [ 72.197889][ T8416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.557575][ T8426] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 72.557625][ T8426] netlink: 'syz.0.284': attribute type 101 has an invalid length. [ 72.557656][ T8426] netlink: 836 bytes leftover after parsing attributes in process `syz.0.284'. [ 72.645346][ T8424] loop4: detected capacity change from 0 to 32768 [ 72.655728][ T8424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.283 (8424) [ 72.691931][ T8424] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.692028][ T8424] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 72.692090][ T8424] BTRFS info (device loop4): using free-space-tree [ 72.718104][ T8426] loop0: detected capacity change from 0 to 32768 [ 72.718478][ T8426] btrfs: Bad value for 'max_inline' [ 72.811012][ T31] audit: type=1326 audit(72.770:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8425 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf5af28 code=0x7ffc0000 [ 72.811081][ T31] audit: type=1326 audit(72.770:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8425 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbbf59454 code=0x7ffc0000 [ 72.811111][ T31] audit: type=1326 audit(72.770:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8425 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf5af28 code=0x7ffc0000 [ 72.811134][ T31] audit: type=1326 audit(72.770:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8425 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffbbf5af28 code=0x7ffc0000 [ 72.811154][ T31] audit: type=1326 audit(72.770:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8425 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffbbf5af5c code=0x7ffc0000 [ 72.811172][ T31] audit: type=1326 audit(72.770:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8425 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffbbf5af5c code=0x7ffc0000 [ 72.811189][ T31] audit: type=1326 audit(72.770:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8425 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf5af28 code=0x7ffc0000 [ 72.811207][ T31] audit: type=1326 audit(72.770:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8425 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffbbf5af28 code=0x7ffc0000 [ 72.811224][ T31] audit: type=1326 audit(72.770:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8425 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffbbf5af5c code=0x7ffc0000 [ 72.892512][ T6537] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.908109][ T31] audit: type=1326 audit(72.880:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8425 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffbbf595f0 code=0x7ffc0000 [ 72.969531][ T8426] loop0: detected capacity change from 0 to 32768 [ 73.003720][ T6528] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 73.008119][ T8426] JBD2: Ignoring recovery information on journal [ 73.101825][ T8426] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 73.134787][ T6529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.239852][ T6538] Bluetooth: hci1: command 0x0406 tx timeout [ 73.335321][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 73.380126][ T8463] loop3: detected capacity change from 0 to 256 [ 73.404650][ T8463] FAT-fs (loop3): Directory bread(block 64) failed [ 73.404701][ T8463] FAT-fs (loop3): Directory bread(block 65) failed [ 73.404745][ T8463] FAT-fs (loop3): Directory bread(block 66) failed [ 73.404768][ T8463] FAT-fs (loop3): Directory bread(block 67) failed [ 73.404798][ T8463] FAT-fs (loop3): Directory bread(block 68) failed [ 73.404818][ T8463] FAT-fs (loop3): Directory bread(block 69) failed [ 73.404847][ T8463] FAT-fs (loop3): Directory bread(block 70) failed [ 73.404866][ T8463] FAT-fs (loop3): Directory bread(block 71) failed [ 73.404902][ T8463] FAT-fs (loop3): Directory bread(block 72) failed [ 73.404921][ T8463] FAT-fs (loop3): Directory bread(block 73) failed [ 73.458591][ T8463] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 73.471157][ T6536] ocfs2: Unmounting device (7,0) on (node local) [ 73.528026][ T8474] loop0: detected capacity change from 0 to 128 [ 73.635595][ T8480] syz.0.291: attempt to access beyond end of device [ 73.635595][ T8480] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 73.635685][ T8480] syz.0.291: attempt to access beyond end of device [ 73.635685][ T8480] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 73.635745][ T8480] syz.0.291: attempt to access beyond end of device [ 73.635745][ T8480] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 73.635790][ T8480] syz.0.291: attempt to access beyond end of device [ 73.635790][ T8480] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 73.635834][ T8480] syz.0.291: attempt to access beyond end of device [ 73.635834][ T8480] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 73.635876][ T8480] syz.0.291: attempt to access beyond end of device [ 73.635876][ T8480] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 73.635925][ T8480] syz.0.291: attempt to access beyond end of device [ 73.635925][ T8480] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 73.635974][ T8480] syz.0.291: attempt to access beyond end of device [ 73.635974][ T8480] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 73.636023][ T8480] syz.0.291: attempt to access beyond end of device [ 73.636023][ T8480] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 73.636072][ T8480] syz.0.291: attempt to access beyond end of device [ 73.636072][ T8480] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 73.734939][ T8483] tmpfs: Bad value for 'size' [ 73.972141][ T8475] loop4: detected capacity change from 0 to 32768 [ 73.974022][ T8475] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.292 (8475) [ 74.021395][ T8475] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.021470][ T8475] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 74.021494][ T8475] BTRFS info (device loop4): using free-space-tree [ 74.123112][ T8500] tmpfs: Bad value for 'size' [ 74.182238][ T8475] BTRFS info (device loop4): rebuilding free space tree [ 74.214265][ T8487] loop0: detected capacity change from 0 to 32768 [ 74.291318][ T8487] BTRFS: device /dev/loop0 (7:0) using temp-fsid 3ac2df16-aba4-4e8a-9fa0-7f52e2c23119 [ 74.291377][ T8487] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.295 (8487) [ 74.309802][ T8487] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.309898][ T8487] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 74.309942][ T8487] BTRFS info (device loop0): disk space caching is enabled [ 74.309967][ T8487] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 74.857707][ T6537] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.899477][ T8529] nfs: Unknown parameter '' [ 74.901128][ T8529] team0: No ports can be present during mode change [ 75.018904][ T6536] BTRFS info (device loop0): last unmount of filesystem 3ac2df16-aba4-4e8a-9fa0-7f52e2c23119 [ 75.061710][ T8531] loop2: detected capacity change from 0 to 1024 [ 75.068718][ T8531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.076750][ T8528] loop4: detected capacity change from 0 to 32768 [ 75.078098][ T8528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.297 (8528) [ 75.082061][ T8528] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.082119][ T8528] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 75.082148][ T8528] BTRFS info (device loop4): using free-space-tree [ 75.100051][ T8525] loop3: detected capacity change from 0 to 32768 [ 75.101913][ T8525] bcachefs: bch2_fs_parse_param() Error parsing option metadata_replicas_required: option_value [ 75.282729][ T6537] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.309297][ T8525] loop3: detected capacity change from 0 to 32768 [ 75.326326][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.368740][ T8525] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=xxhash,compression=lz4,background_compression=gzip,erasure_code,prjquota,degraded=yes,no_splitbrain_check,nojournal_transaction_names,noexcl,reconstruct_alloc [ 75.374298][ T8525] allowing incompatible features above 0.0: (unknown version) [ 75.374336][ T8525] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 75.374383][ T8525] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 75.374414][ T8525] bcachefs (loop3): initializing new filesystem [ 75.384665][ T8525] bcachefs (loop3): going read-write [ 75.466837][ T8525] bcachefs (loop3): marking superblocks [ 75.478871][ T8557] loop4: detected capacity change from 0 to 40427 [ 75.479543][ T8557] F2FS-fs (loop4): build fault injection rate: 19 [ 75.479586][ T8557] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 75.480209][ T8557] F2FS-fs (loop4): invalid crc value [ 75.485979][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 75.490938][ T8525] bcachefs (loop3): initializing freespace [ 75.493804][ T8525] bcachefs (loop3): done initializing freespace [ 75.494757][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.494835][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.494859][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 75.494873][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.501518][ T9] usb 1-1: config 0 descriptor?? [ 75.504149][ T8525] bcachefs (loop3): reading snapshots table [ 75.505695][ T8525] bcachefs (loop3): reading snapshots done [ 75.523547][ T8557] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.539686][ T8525] bcachefs (loop3): done starting filesystem [ 75.587439][ T6529] bcachefs (loop3): shutting down [ 75.587485][ T6529] bcachefs (loop3): going read-only [ 75.588055][ T6529] bcachefs (loop3): finished waiting for writes to stop [ 75.592736][ T8557] fuse: Bad value for 'fd' [ 75.608321][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 75.608338][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 75.608343][ T6537] Call trace: [ 75.608346][ T6537] show_stack+0x2c/0x3c (C) [ 75.608359][ T6537] __dump_stack+0x30/0x40 [ 75.608367][ T6537] dump_stack_lvl+0xd8/0x12c [ 75.608376][ T6537] dump_stack+0x1c/0x28 [ 75.608382][ T6537] f2fs_handle_critical_error+0x34c/0x4b8 [ 75.608390][ T6537] f2fs_stop_checkpoint+0x5c/0x70 [ 75.608396][ T6537] f2fs_write_end_io+0x58c/0x818 [ 75.608402][ T6537] bio_endio+0x804/0x840 [ 75.608408][ T6537] submit_bio_noacct+0x158/0x176c [ 75.608415][ T6537] submit_bio+0x354/0x4d4 [ 75.608421][ T6537] f2fs_submit_write_bio+0x13c/0x324 [ 75.608427][ T6537] __submit_merged_bio+0x254/0x704 [ 75.608432][ T6537] __submit_merged_write_cond+0x23c/0x4ac [ 75.608437][ T6537] f2fs_write_data_pages+0x1d28/0x2634 [ 75.608443][ T6537] do_writepages+0x270/0x468 [ 75.608451][ T6537] filemap_fdatawrite+0x144/0x1e8 [ 75.608456][ T6537] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 75.608463][ T6537] f2fs_write_checkpoint+0x684/0x1694 [ 75.608469][ T6537] kill_f2fs_super+0x21c/0x584 [ 75.608475][ T6537] deactivate_locked_super+0xc4/0x12c [ 75.608481][ T6537] deactivate_super+0xe0/0x100 [ 75.608485][ T6537] cleanup_mnt+0x31c/0x3ac [ 75.608491][ T6537] __cleanup_mnt+0x20/0x30 [ 75.608496][ T6537] task_work_run+0x1dc/0x260 [ 75.608501][ T6537] do_notify_resume+0x174/0x1f4 [ 75.608507][ T6537] el0_svc+0xb8/0x180 [ 75.608513][ T6537] el0t_64_sync_handler+0x84/0x12c [ 75.608519][ T6537] el0t_64_sync+0x198/0x19c [ 75.611192][ T6537] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 75.611255][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 75.611264][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 75.611268][ T6537] Call trace: [ 75.611271][ T6537] show_stack+0x2c/0x3c (C) [ 75.611281][ T6537] __dump_stack+0x30/0x40 [ 75.611290][ T6537] dump_stack_lvl+0xd8/0x12c [ 75.611297][ T6537] dump_stack+0x1c/0x28 [ 75.611304][ T6537] f2fs_handle_critical_error+0x34c/0x4b8 [ 75.611310][ T6537] f2fs_stop_checkpoint+0x5c/0x70 [ 75.611317][ T6537] f2fs_write_end_io+0x58c/0x818 [ 75.611323][ T6537] bio_endio+0x804/0x840 [ 75.611328][ T6537] submit_bio_noacct+0x158/0x176c [ 75.611335][ T6537] submit_bio+0x354/0x4d4 [ 75.611341][ T6537] f2fs_submit_write_bio+0x13c/0x324 [ 75.611346][ T6537] __submit_merged_bio+0x254/0x704 [ 75.611351][ T6537] __submit_merged_write_cond+0x23c/0x4ac [ 75.611356][ T6537] f2fs_write_data_pages+0x1d28/0x2634 [ 75.611364][ T6537] do_writepages+0x270/0x468 [ 75.611371][ T6537] filemap_fdatawrite+0x144/0x1e8 [ 75.611376][ T6537] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 75.611383][ T6537] f2fs_write_checkpoint+0x684/0x1694 [ 75.611389][ T6537] kill_f2fs_super+0x21c/0x584 [ 75.611395][ T6537] deactivate_locked_super+0xc4/0x12c [ 75.611400][ T6537] deactivate_super+0xe0/0x100 [ 75.611404][ T6537] cleanup_mnt+0x31c/0x3ac [ 75.611410][ T6537] __cleanup_mnt+0x20/0x30 [ 75.611415][ T6537] task_work_run+0x1dc/0x260 [ 75.611420][ T6537] do_notify_resume+0x174/0x1f4 [ 75.611426][ T6537] el0_svc+0xb8/0x180 [ 75.611431][ T6537] el0t_64_sync_handler+0x84/0x12c [ 75.611436][ T6537] el0t_64_sync+0x198/0x19c [ 75.611452][ T6537] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 75.625725][ T6532] Bluetooth: hci0: command 0x0406 tx timeout [ 75.630056][ T6529] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 75.679459][ T6529] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 75.680987][ T6529] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 75.682619][ T6529] bcachefs (loop3): marking filesystem clean [ 75.702795][ T6529] bcachefs (loop3): shutdown complete [ 75.861214][ T8536] loop0: detected capacity change from 0 to 65536 [ 75.886796][ T8536] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 75.893360][ T8536] XFS (loop0): Ending clean mount [ 75.895406][ T8536] XFS (loop0): Quotacheck needed: Please wait. [ 75.912860][ T8536] XFS (loop0): Quotacheck: Done. [ 75.933105][ T6533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.934342][ T8574] loop4: detected capacity change from 0 to 32768 [ 75.934778][ T8574] btrfs: Deprecated parameter 'usebackuproot' [ 75.934798][ T8574] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 75.938959][ T8574] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.302 (8574) [ 75.953704][ T8574] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.953781][ T8574] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 75.953805][ T8574] BTRFS info (device loop4): using free-space-tree [ 76.008407][ T8574] BTRFS info (device loop4): rebuilding free space tree [ 76.113677][ T6537] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.150383][ T9] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 76.161921][ T8610] loop4: detected capacity change from 0 to 512 [ 76.173080][ T8610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 76.173146][ T8610] System zones: 1-12 [ 76.173354][ T8610] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.305: corrupted in-inode xattr: e_value size too large [ 76.173506][ T8610] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.305: couldn't read orphan inode 15 (err -117) [ 76.174040][ T8610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.175272][ T8610] EXT4-fs (loop4): shut down requested (1) [ 76.192003][ T6537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.514138][ T8618] tmpfs: Bad value for 'size' [ 76.839056][ T6540] usb 1-1: USB disconnect, device number 2 [ 76.964974][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 76.973536][ T8624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.991756][ T8624] bond1: (slave batadv1): Opening slave failed [ 77.036698][ T8622] loop1: detected capacity change from 0 to 32768 [ 77.039989][ T8622] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.307 (8622) [ 77.041804][ T8622] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.041863][ T8622] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 77.041887][ T8622] BTRFS info (device loop1): using free-space-tree [ 77.060276][ T8622] BTRFS info (device loop1): rebuilding free space tree [ 77.667989][ T8645] loop2: detected capacity change from 0 to 32768 [ 77.672404][ T6536] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 77.695533][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 77.711147][ T8645] BTRFS: device /dev/loop2 (7:2) using temp-fsid 157299d7-4290-475e-a2cc-1ae3cd88cfa3 [ 77.711210][ T8645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.310 (8645) [ 77.731698][ T8645] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.731771][ T8645] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 77.731795][ T8645] BTRFS info (device loop2): using free-space-tree [ 77.812481][ T6528] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.817731][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 77.961080][ T8692] loop3: detected capacity change from 0 to 4096 [ 78.031119][ T8692] ntfs3(loop3): ino=5, "/" mi_enum_attr [ 78.051177][ T8698] loop0: detected capacity change from 0 to 2048 [ 78.083613][ T8698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.131377][ T6533] BTRFS info (device loop2): last unmount of filesystem 157299d7-4290-475e-a2cc-1ae3cd88cfa3 [ 78.162870][ T8706] nbd: must specify a size in bytes for the device [ 78.193643][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 78.230883][ T8711] binder: 8710:8711 tried to acquire reference to desc 0, got 1 instead [ 78.231262][ T8711] binder: 8710:8711 got reply transaction with no transaction stack [ 78.231317][ T8711] binder: 8710:8711 transaction reply to 0:0 failed 5/29201/-71, code 0 size 120-24 line 3053 [ 78.232216][ T8711] binder: 8710:8711 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 78.232242][ T8711] binder: 8711 RLIMIT_NICE not set [ 78.235801][ T11] binder: release 8710:8711 transaction 6 out, still active [ 78.235897][ T11] binder: undelivered TRANSACTION_COMPLETE [ 78.257652][ T11] binder: send failed reply for transaction 6, target dead [ 78.375191][ T8718] tmpfs: Bad value for 'size' [ 78.582553][ T8694] loop1: detected capacity change from 0 to 32768 [ 78.582906][ T8694] XFS: noikeep mount option is deprecated. [ 78.582943][ T8694] XFS: ikeep mount option is deprecated. [ 78.602793][ T8694] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.652568][ T8694] XFS (loop1): Ending clean mount [ 78.685512][ T3915] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.697937][ T8716] loop2: detected capacity change from 0 to 32768 [ 78.699994][ T8716] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.324 (8716) [ 78.708681][ T6528] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.730956][ T8716] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.731031][ T8716] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 78.731063][ T8716] BTRFS info (device loop2): using free-space-tree [ 78.754424][ T8716] BTRFS info (device loop2): rebuilding free space tree [ 78.785622][ T8728] loop4: detected capacity change from 0 to 32768 [ 78.855635][ T3915] usb 1-1: Using ep0 maxpacket: 32 [ 78.859719][ T3915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.859776][ T3915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.859815][ T3915] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 78.859843][ T3915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.878566][ T3915] usb 1-1: config 0 descriptor?? [ 78.982904][ T8728] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 78.990476][ T8728] allowing incompatible features above 0.0: (unknown version) [ 78.990528][ T8728] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 78.990615][ T8728] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 78.990652][ T8728] bcachefs (loop4): initializing new filesystem [ 78.992314][ T8728] bcachefs (loop4): going read-write [ 79.325738][ T8728] bcachefs (loop4): marking superblocks [ 79.330186][ T8728] bcachefs (loop4): initializing freespace [ 79.330959][ T8728] bcachefs (loop4): done initializing freespace [ 79.331511][ T8728] bcachefs (loop4): reading snapshots table [ 79.331542][ T8728] bcachefs (loop4): reading snapshots done [ 79.391268][ T8728] bcachefs (loop4): done starting filesystem [ 79.398038][ T6533] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.631424][ T6537] bcachefs (loop4): shutting down [ 79.631478][ T6537] bcachefs (loop4): going read-only [ 79.631504][ T6537] bcachefs (loop4): finished waiting for writes to stop [ 79.660513][ T6537] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 79.709649][ T6537] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 79.710078][ T6537] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 79.710429][ T6537] bcachefs (loop4): marking filesystem clean [ 79.733038][ T6537] bcachefs (loop4): shutdown complete [ 79.780785][ T8715] loop0: detected capacity change from 0 to 65536 [ 79.786862][ T8715] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 79.817502][ T8777] loop2: detected capacity change from 0 to 32768 [ 79.839833][ T8777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.330 (8777) [ 79.851510][ T8715] XFS (loop0): Ending clean mount [ 79.853242][ T8715] XFS (loop0): Quotacheck needed: Please wait. [ 79.864245][ T8715] XFS (loop0): Quotacheck: Done. [ 79.869354][ T8777] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.869429][ T8777] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 79.869457][ T8777] BTRFS info (device loop2): using free-space-tree [ 80.133907][ T3915] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 80.293313][ T8811] netlink: 76 bytes leftover after parsing attributes in process `syz.3.334'. [ 80.324313][ T6533] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.423120][ T8816] loop2: detected capacity change from 0 to 4096 [ 80.473991][ T8816] netlink: 84 bytes leftover after parsing attributes in process `syz.2.336'. [ 80.601457][ T6540] usb 1-1: USB disconnect, device number 3 [ 81.125676][ T8826] tmpfs: Bad value for 'size' [ 81.364554][ T8829] loop3: detected capacity change from 0 to 2048 [ 81.367432][ T8829] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.376671][ T8824] loop2: detected capacity change from 0 to 32768 [ 81.390697][ T8824] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.338 (8824) [ 81.392793][ T6520] udevd[6520]: incorrect nilfs2 checksum on /dev/loop3 [ 81.397835][ T8824] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.399055][ T8830] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.401671][ T8824] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 81.403199][ T8824] BTRFS info (device loop2): using free-space-tree [ 81.442572][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.444608][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.553938][ T6536] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 81.664341][ T8851] netlink: 44 bytes leftover after parsing attributes in process `syz.3.342'. [ 81.713673][ T52] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 81.781245][ T8855] loop3: detected capacity change from 0 to 40427 [ 81.782900][ T8855] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.782966][ T8855] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.787633][ T8855] F2FS-fs (loop3): invalid crc value [ 81.805787][ T8855] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.805836][ T8855] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.817269][ T8864] loop1: detected capacity change from 0 to 1024 [ 81.818954][ T8864] hfsplus: Unknown parameter '&' [ 81.990704][ T8866] bio_check_eod: 18 callbacks suppressed [ 81.990770][ T8866] syz.3.344: attempt to access beyond end of device [ 81.990770][ T8866] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 82.159312][ T6533] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.162062][ T8868] ip6_vti0: entered promiscuous mode [ 82.313511][ T8873] loop2: detected capacity change from 0 to 32768 [ 82.315609][ T8873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.346 (8873) [ 82.323187][ T8873] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.326076][ T8873] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 82.326226][ T8873] BTRFS info (device loop2): using free-space-tree [ 82.378094][ T8883] FAULT_INJECTION: forcing a failure. [ 82.378094][ T8883] name failslab, interval 1, probability 0, space 0, times 0 [ 82.378137][ T8883] CPU: 0 UID: 0 PID: 8883 Comm: syz.4.347 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 82.378148][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 82.378153][ T8883] Call trace: [ 82.378156][ T8883] show_stack+0x2c/0x3c (C) [ 82.378170][ T8883] __dump_stack+0x30/0x40 [ 82.378181][ T8883] dump_stack_lvl+0xd8/0x12c [ 82.378188][ T8883] dump_stack+0x1c/0x28 [ 82.378195][ T8883] should_fail_ex+0x41c/0x594 [ 82.378201][ T8883] should_failslab+0xc0/0x128 [ 82.378208][ T8883] __kmalloc_noprof+0xf4/0x4c8 [ 82.378214][ T8883] copy_splice_read+0x12c/0x848 [ 82.378222][ T8883] splice_direct_to_actor+0x364/0x994 [ 82.378227][ T8883] do_splice_direct+0x130/0x210 [ 82.378231][ T8883] do_sendfile+0x3cc/0x658 [ 82.378239][ T8883] __arm64_sys_sendfile64+0x1b4/0x274 [ 82.378246][ T8883] invoke_syscall+0x98/0x2b8 [ 82.378250][ T8883] el0_svc_common+0x130/0x23c [ 82.378255][ T8883] do_el0_svc+0x48/0x58 [ 82.378260][ T8883] el0_svc+0x58/0x180 [ 82.378266][ T8883] el0t_64_sync_handler+0x84/0x12c [ 82.378271][ T8883] el0t_64_sync+0x198/0x19c [ 82.659355][ T6529] syz-executor: attempt to access beyond end of device [ 82.659355][ T6529] loop3: rw=2051, sector=77824, nr_sectors = 520 limit=40427 [ 82.667224][ T6529] f2fs_printk: 10 callbacks suppressed [ 82.668711][ T6529] F2FS-fs (loop3): Issue discard(9728, 9728, 65) failed, ret: -5 [ 82.747683][ T6533] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.755323][ T8903] TCP: TCP_TX_DELAY enabled [ 82.763019][ T8903] loop1: detected capacity change from 0 to 64 [ 82.935560][ T3915] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.045712][ T8922] tmpfs: Bad value for 'size' [ 83.279586][ T8924] tipc: Enabling of bearer rejected, failed to enable media [ 83.280559][ T8908] loop3: detected capacity change from 0 to 32768 [ 83.305755][ T8908] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.349 (8908) [ 83.326900][ T3915] usb 1-1: Using ep0 maxpacket: 32 [ 83.343635][ T3915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.343678][ T3915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.343703][ T3915] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 83.343719][ T3915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.344677][ T8908] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.344721][ T8908] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 83.344743][ T8908] BTRFS info (device loop3): using free-space-tree [ 83.360945][ T3915] usb 1-1: config 0 descriptor?? [ 83.409121][ T8933] loop4: detected capacity change from 0 to 4096 [ 83.412943][ T8908] BTRFS info (device loop3): rebuilding free space tree [ 83.457143][ T8950] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.627880][ T8947] loop1: detected capacity change from 0 to 40427 [ 83.636030][ T8947] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 83.636072][ T8947] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 83.644429][ T8947] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 83.936275][ T8947] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 83.936323][ T8947] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.990487][ T6529] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.016778][ T8947] syz.1.361: attempt to access beyond end of device [ 84.016778][ T8947] loop1: rw=34817, sector=77824, nr_sectors = 512 limit=40427 [ 84.071945][ T8963] xt_hashlimit: size too large, truncated to 1048576 [ 84.110630][ T8968] syz_tun: entered allmulticast mode [ 84.113026][ T8967] syz_tun: left allmulticast mode [ 84.162758][ T8971] tipc: Started in network mode [ 84.162806][ T8971] tipc: Node identity 4e467bac3e5c, cluster identity 4711 [ 84.162918][ T8971] tipc: Enabled bearer , priority 0 [ 84.163228][ T8971] syzkaller0: entered promiscuous mode [ 84.163252][ T8971] syzkaller0: entered allmulticast mode [ 84.268721][ T8971] tipc: Resetting bearer [ 84.280495][ T8970] tipc: Resetting bearer [ 84.288713][ T8960] loop2: detected capacity change from 0 to 32768 [ 84.292937][ T8960] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.362 (8960) [ 84.315786][ T8960] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.317889][ T8960] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 84.319460][ T8960] BTRFS info (device loop2): using free-space-tree [ 84.361736][ T8900] loop0: detected capacity change from 0 to 65536 [ 84.367262][ T8900] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 84.373543][ T8900] XFS (loop0): Ending clean mount [ 84.379257][ T8900] XFS (loop0): Quotacheck needed: Please wait. [ 84.387229][ T9003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.365'. [ 84.397125][ T8970] tipc: Disabling bearer [ 84.423167][ T8900] XFS (loop0): Quotacheck: Done. [ 84.598161][ T9006] loop1: detected capacity change from 0 to 32768 [ 84.598776][ T9006] BTRFS: device /dev/loop1 (7:1) using temp-fsid af99a6ef-37c1-4b0c-b144-0bf405ccf95d [ 84.599841][ T9006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.371 (9006) [ 84.609127][ T9006] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.609174][ T9006] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 84.609196][ T9006] BTRFS info (device loop1): using free-space-tree [ 84.692011][ T9034] tmpfs: Bad value for 'size' [ 84.888857][ T3915] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 84.909931][ T6533] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.940911][ T9006] BTRFS info (device loop1): rebuilding free space tree [ 84.994378][ T9020] loop3: detected capacity change from 0 to 32768 [ 85.044032][ T9041] tipc: Enabled bearer , priority 0 [ 85.116989][ T9020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.374 (9020) [ 85.164785][ T9020] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.166922][ T9020] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 85.168864][ T9020] BTRFS info (device loop3): using free-space-tree [ 85.203821][ T9020] BTRFS info (device loop3): rebuilding free space tree [ 85.223204][ T3915] usb 1-1: USB disconnect, device number 4 [ 85.557701][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.376'. [ 85.557747][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 85.621285][ T6528] BTRFS info (device loop1): last unmount of filesystem af99a6ef-37c1-4b0c-b144-0bf405ccf95d [ 85.776890][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 85.777007][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 85.777877][ T6532] Bluetooth: hci4: hardware error 0x00 [ 86.122602][ T9063] loop4: detected capacity change from 0 to 32768 [ 86.125360][ T9063] BTRFS: device /dev/loop4 (7:4) using temp-fsid c6446b39-f753-4b52-a48a-dad8ea9cf135 [ 86.125406][ T9063] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.377 (9063) [ 86.145234][ T9063] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.145308][ T9063] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 86.145349][ T9063] BTRFS info (device loop4): using free-space-tree [ 86.146540][ T6529] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.230914][ T9041] loop2: detected capacity change from 0 to 32768 [ 86.249027][ T9076] loop1: detected capacity change from 0 to 2048 [ 86.254925][ T9041] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.359071][ T9076] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.384116][ T9063] BTRFS info (device loop4): rebuilding free space tree [ 86.477301][ T9041] XFS (loop2): Ending clean mount [ 86.481340][ T9041] XFS (loop2): Quotacheck needed: Please wait. [ 86.555745][ T6536] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 86.676276][ T9098] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 87.050876][ T9041] XFS (loop2): Quotacheck: Done. [ 87.281129][ T6537] BTRFS info (device loop4): last unmount of filesystem c6446b39-f753-4b52-a48a-dad8ea9cf135 [ 87.297699][ T9097] loop1: detected capacity change from 0 to 32768 [ 87.301018][ T9097] bcachefs (/dev/loop1): error reading default superblock: Unsupported superblock version_min 0.0: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive) [ 87.313769][ T9038] tipc: Disabling bearer [ 87.354050][ T9104] loop3: detected capacity change from 0 to 512 [ 87.370579][ T9097] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=crc64,data_checksum=none,compression=lz4,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only [ 87.375866][ T9104] ext4: Unknown parameter 'func' [ 87.379795][ T6533] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.450437][ T9097] allowing incompatible features above 0.0: (unknown version) [ 87.450498][ T9097] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 87.450558][ T9097] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 87.451134][ T9097] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=blacklist in superblock: invalid journal seq blacklist entry: bad size, fixing [ 87.451246][ T9097] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 87.451291][ T9097] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 87.451291][ T9097] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 87.477833][ T9097] bcachefs (loop1): invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4098:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir [ 87.477873][ T9097] dirent points to own directory, deleting [ 87.888487][ T6532] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 88.117114][ T9097] bcachefs (loop1): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 88.130837][ T9097] bcachefs (loop1): check_topology... [ 88.131471][ T9097] bcachefs (loop1): btree root dirents unreadable, must recover from scan [ 88.131898][ T9097] bcachefs (loop1): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 88.131940][ T9097] bcachefs (loop1): bch2_check_root(): error restart_recovery [ 88.131953][ T9097] bcachefs (loop1): scan_for_btree_nodes... [ 88.138045][ T9097] bcachefs (loop1): btree node scan found 1 nodes after overwrites [ 88.146096][ T9097] done [ 88.146137][ T9097] bcachefs (loop1): check_topology... [ 88.146187][ T9097] bcachefs (loop1): btree root dirents unreadable, must recover from scan [ 88.146475][ T9097] bcachefs (loop1): no nodes found for btree dirents, continuing [ 88.162042][ T9097] done [ 88.162099][ T9097] bcachefs (loop1): accounting_read... [ 88.184566][ T9102] delete_channel: no stack [ 88.211793][ T9097] done [ 88.211830][ T9097] bcachefs (loop1): alloc_read... done [ 88.212230][ T9097] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 88.212530][ T9097] bcachefs (loop1): done starting filesystem [ 88.233870][ T9097] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 88.234149][ T9097] netlink: 'syz.1.380': attribute type 4 has an invalid length. [ 88.234170][ T9097] netlink: 17 bytes leftover after parsing attributes in process `syz.1.380'. [ 88.695945][ T9130] tmpfs: Bad value for 'size' [ 89.280676][ T6528] bcachefs (loop1): shutting down [ 89.330123][ T6528] bcachefs (loop1): shutdown complete [ 89.393818][ T9115] loop2: detected capacity change from 0 to 32768 [ 89.413776][ T9115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.384 (9115) [ 89.417149][ T9115] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.417208][ T9115] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 89.417243][ T9115] BTRFS info (device loop2): using free-space-tree [ 89.434901][ T9120] loop4: detected capacity change from 0 to 32768 [ 89.442040][ T9120] BTRFS: device /dev/loop4 (7:4) using temp-fsid e15482b2-e3eb-4207-8df6-1c779d9de744 [ 89.442091][ T9120] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.385 (9120) [ 89.447773][ T9120] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.447848][ T9120] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 89.447877][ T9120] BTRFS info (device loop4): using free-space-tree [ 89.542026][ T9132] loop3: detected capacity change from 0 to 32768 [ 89.548084][ T9132] BTRFS: device /dev/loop3 (7:3) using temp-fsid 243ba468-7016-4082-9013-e0b5802cd7c7 [ 89.548139][ T9132] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.389 (9132) [ 89.581801][ T9132] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.581878][ T9132] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 89.581924][ T9132] BTRFS info (device loop3): using free-space-tree [ 89.712863][ T9132] BTRFS info (device loop3): rebuilding free space tree [ 89.773788][ T6537] BTRFS info (device loop4): last unmount of filesystem e15482b2-e3eb-4207-8df6-1c779d9de744 [ 89.890456][ T6540] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 90.125739][ T6540] usb 1-1: Using ep0 maxpacket: 32 [ 90.205426][ T6540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.205708][ T6540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.205745][ T6540] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 90.205765][ T6540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.214402][ T6540] usb 1-1: config 0 descriptor?? [ 90.240871][ T6533] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.281349][ T6529] BTRFS info (device loop3): last unmount of filesystem 243ba468-7016-4082-9013-e0b5802cd7c7 [ 90.390409][ T9194] wlan1 speed is unknown, defaulting to 1000 [ 90.390584][ T9194] wlan1 speed is unknown, defaulting to 1000 [ 90.392114][ T9194] wlan1 speed is unknown, defaulting to 1000 [ 90.394204][ T9194] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.400171][ T9194] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 90.425277][ T9194] wlan1 speed is unknown, defaulting to 1000 [ 90.436198][ T9194] wlan1 speed is unknown, defaulting to 1000 [ 90.436554][ T9194] wlan1 speed is unknown, defaulting to 1000 [ 90.436917][ T9194] wlan1 speed is unknown, defaulting to 1000 [ 90.440280][ T9194] wlan1 speed is unknown, defaulting to 1000 [ 90.541787][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 91.140806][ T9149] loop0: detected capacity change from 0 to 65536 [ 91.167235][ T9222] loop4: detected capacity change from 0 to 16 [ 91.168817][ T9222] erofs: Unknown parameter '0x00000000000000000000000000000000000000000000000000000000107G' [ 91.186835][ T9149] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 91.199093][ T9225] FAULT_INJECTION: forcing a failure. [ 91.199093][ T9225] name failslab, interval 1, probability 0, space 0, times 0 [ 91.199622][ T9229] loop2: detected capacity change from 0 to 2048 [ 91.204189][ T9222] loop4: detected capacity change from 0 to 64 [ 91.209528][ T9225] CPU: 0 UID: 0 PID: 9225 Comm: syz.3.400 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 91.209548][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 91.209555][ T9225] Call trace: [ 91.209559][ T9225] show_stack+0x2c/0x3c (C) [ 91.209577][ T9225] __dump_stack+0x30/0x40 [ 91.209588][ T9225] dump_stack_lvl+0xd8/0x12c [ 91.209597][ T9225] dump_stack+0x1c/0x28 [ 91.209605][ T9225] should_fail_ex+0x41c/0x594 [ 91.209612][ T9225] should_failslab+0xc0/0x128 [ 91.209621][ T9225] __kmalloc_cache_noprof+0x80/0x3fc [ 91.209627][ T9225] tcf_chain_create+0xc0/0x28c [ 91.209633][ T9225] __tcf_chain_get+0x11c/0x374 [ 91.209640][ T9225] tc_new_tfilter+0x5fc/0x12cc [ 91.209645][ T9225] rtnetlink_rcv_msg+0x664/0x97c [ 91.209651][ T9225] netlink_rcv_skb+0x220/0x3fc [ 91.209657][ T9225] rtnetlink_rcv+0x28/0x38 [ 91.209662][ T9225] netlink_unicast+0x618/0x830 [ 91.209667][ T9225] netlink_sendmsg+0x648/0x930 [ 91.209672][ T9225] ____sys_sendmsg+0x490/0x7b8 [ 91.209680][ T9225] ___sys_sendmsg+0x204/0x278 [ 91.209686][ T9225] __arm64_sys_sendmsg+0x184/0x238 [ 91.209693][ T9225] invoke_syscall+0x98/0x2b8 [ 91.209698][ T9225] el0_svc_common+0x130/0x23c [ 91.209702][ T9225] do_el0_svc+0x48/0x58 [ 91.209707][ T9225] el0_svc+0x58/0x180 [ 91.209713][ T9225] el0t_64_sync_handler+0x84/0x12c [ 91.209718][ T9225] el0t_64_sync+0x198/0x19c [ 91.236230][ T9222] hfs: Unknown parameter 'ÿ/file2' [ 91.253846][ T9149] XFS (loop0): Ending clean mount [ 91.255159][ T9149] XFS (loop0): Quotacheck needed: Please wait. [ 91.260240][ T9229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.271631][ T9229] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 91.271729][ T9229] overlayfs: failed to verify index dir 'upper' xattr [ 91.271743][ T9229] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 91.288740][ T9149] XFS (loop0): Quotacheck: Done. [ 91.394637][ T9239] team0: No ports can be present during mode change [ 91.415322][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 91.525647][ T6540] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 91.553289][ T9252] loop3: detected capacity change from 0 to 64 [ 91.568702][ T9252] omfs: Invalid superblock (0) [ 91.608915][ T9254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.625087][ T9246] loop4: detected capacity change from 0 to 32768 [ 91.631446][ T9246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.402 (9246) [ 91.634845][ T9246] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.634923][ T9246] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 91.634946][ T9246] BTRFS info (device loop4): using free-space-tree [ 91.657807][ T9254] loop3: detected capacity change from 0 to 1024 [ 91.737060][ T2064] hfsplus: b-tree write err: -5, ino 4 [ 92.333469][ T11] usb 1-1: USB disconnect, device number 5 [ 92.387208][ T9274] loop3: detected capacity change from 0 to 32768 [ 92.392866][ T6533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.451934][ T6537] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.452415][ T9274] JBD2: Ignoring recovery information on journal [ 92.473267][ T9274] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 92.558099][ T9247] loop1: detected capacity change from 0 to 131072 [ 92.560843][ T9247] F2FS-fs (loop1): Unrecognized mount option "00000000000000000000000" or missing value [ 92.771713][ T9284] loop4: detected capacity change from 0 to 32768 [ 92.778750][ T9284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.409 (9284) [ 92.781993][ T9284] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.782057][ T9284] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 92.782085][ T9284] BTRFS info (device loop4): using free-space-tree [ 92.837822][ T9284] BTRFS info (device loop4): rebuilding free space tree [ 92.859882][ T6536] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 92.866588][ T9285] loop2: detected capacity change from 0 to 32768 [ 92.935551][ T9247] loop1: detected capacity change from 0 to 32768 [ 93.835412][ T9247] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 93.837683][ T6537] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.867257][ T9247] XFS (loop1): Ending clean mount [ 93.912403][ T9285] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 93.912436][ T9285] allowing incompatible features above 0.0: (unknown version) [ 93.912444][ T9285] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 93.912480][ T9285] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 93.912537][ T9285] bcachefs (loop2): recovering from clean shutdown, journal seq 15 [ 93.912575][ T9285] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 93.912575][ T9285] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 93.939718][ T9285] bcachefs (loop2): btree node read error at btree alloc level 0/0 [ 93.939767][ T9285] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a64f6cc698df3452 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 93.939777][ T9285] loop2 node offset 0/48 bset u64s 0: checksum error, type chacha20_poly1305_80: got a27f119bba62858d23a6 should be 9948119f4b23e09f462b [ 93.939786][ T9285] loop2 btree validate error [ 93.939792][ T9285] flagging btree alloc lost data [ 93.939798][ T9285] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 93.939804][ T9285] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 93.939809][ T9285] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 93.939815][ T9285] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 93.939820][ T9285] ret fsck_errors_not_fixed [ 93.940228][ T9285] bcachefs (loop2): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 93.972776][ T9285] bcachefs (loop2): check_topology... done [ 93.979188][ T9285] bcachefs (loop2): accounting_read... [ 94.007212][ T6528] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.007565][ T9285] done [ 94.007590][ T9285] bcachefs (loop2): alloc_read... done [ 94.009111][ T9285] bcachefs (loop2): snapshots_read... done [ 94.018777][ T9285] bcachefs (loop2): check_allocations... [ 94.019921][ T9285] bcachefs (loop2): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 94.019955][ T9285] while marking u64s 8 type extent 4099:8:U32_MAX len 8 ver 1: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum chacha20_poly1305_80 77fa:f532966a693125aa compress incompressible ptr: 0:34:0 gen 0, fixing [ 94.020209][ T9285] bcachefs (loop2): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 94.020215][ T9285] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq f5560e09620e825a written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 94.020400][ T9285] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 94.020406][ T9285] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 94.029663][ T9285] bcachefs (loop2): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 94.029674][ T9285] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 94.030315][ T9285] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 94.030324][ T9285] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 94.034698][ T9285] bcachefs (loop2): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 94.034707][ T9285] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 94.034841][ T9285] bcachefs (loop2): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 94.034848][ T9285] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 31ed7f7a6a187f69 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 94.034988][ T9285] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 94.034994][ T9285] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 94.035512][ T6529] ocfs2: Unmounting device (7,3) on (node local) [ 94.037255][ T9285] bcachefs (loop2): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 94.037263][ T9285] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 94.037390][ T9285] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 94.037396][ T9285] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 94.037717][ T9285] bcachefs (loop2): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 94.037723][ T9285] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 94.037843][ T9285] bcachefs (loop2): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 94.037849][ T9285] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7f39628faed02285 written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 94.037986][ T9285] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap [ 94.037991][ T9285] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 94.057377][ T9285] bcachefs (loop2): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 94.057389][ T9285] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 94.057595][ T9285] bcachefs (loop2): bucket 0:36 data type btree ptr gen 0 missing in alloc btree [ 94.057602][ T9285] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bbca91b628560366 written 32 min_key POS_MIN durability: 1 ptr: 0:36:0 gen 0, fixing [ 94.057730][ T9285] bcachefs (loop2): bucket 0:40 data type btree ptr gen 0 missing in alloc btree [ 94.057735][ T9285] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 85370abb7fc040b3 written 8 min_key POS_MIN durability: 1 ptr: 0:40:0 gen 0, fixing [ 94.057742][ T9285] Ratelimiting new instances of previous error [ 94.066508][ T9285] done [ 94.067436][ T9285] bcachefs (loop2): going read-write [ 94.078029][ T9285] bcachefs (loop2): journal_replay... [ 94.159158][ T9330] loop4: detected capacity change from 0 to 40427 [ 94.165788][ T9330] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 94.165834][ T9330] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 94.171289][ T9330] F2FS-fs (loop4): invalid crc value [ 94.178068][ T9285] done [ 94.178396][ T9285] bcachefs (loop2): check_alloc_info... [ 94.179130][ T9285] bcachefs (loop2): hole in alloc btree missing in freespace btree [ 94.179170][ T9285] device 0 buckets 26-27, fixing [ 94.216378][ T9285] done [ 94.217476][ T9285] bcachefs (loop2): check_lrus... done [ 94.217938][ T9285] bcachefs (loop2): check_backpointers_to_extents... done [ 94.218853][ T9285] bcachefs (loop2): check_extents_to_backpointers... [ 94.219117][ T9285] bcachefs (loop2): scanning for missing backpointers in 5/128 buckets [ 94.222567][ T9285] done [ 94.223159][ T9285] bcachefs (loop2): check_inodes... done [ 94.225185][ T9285] bcachefs (loop2): resume_logged_ops... done [ 94.226936][ T9285] bcachefs (loop2): delete_dead_inodes... done [ 94.229288][ T9330] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 94.229333][ T9330] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.231166][ T9285] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 94.231186][ T9285] bcachefs (loop2): check_extents_to_backpointers... [ 94.231380][ T9285] bcachefs (loop2): scanning for missing backpointers in 1/128 buckets [ 94.234870][ T9285] done [ 94.247755][ T9285] bcachefs (loop2): check_inodes... done [ 94.248320][ T9285] bcachefs (loop2): resume_logged_ops... done [ 94.249228][ T9285] bcachefs (loop2): delete_dead_inodes... done [ 94.251101][ T9285] bcachefs (loop2): done starting filesystem [ 94.271628][ T9285] bcachefs (loop2): going read-only [ 94.272616][ T9285] bcachefs (loop2): finished waiting for writes to stop [ 94.278658][ T9346] Cannot find set identified by id 0 to match [ 94.316394][ T9285] bcachefs (loop2): flushing journal and stopping allocators, journal seq 26 [ 94.319084][ T9285] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 27 [ 94.321207][ T9285] bcachefs (loop2): clean shutdown complete, journal seq 28 [ 94.321691][ T9285] bcachefs (loop2): marking filesystem clean [ 94.367682][ T9285] trusted_key: syz.2.408 sent an empty control message without MSG_MORE. [ 94.407391][ T9335] loop0: detected capacity change from 0 to 32768 [ 94.417682][ T9352] loop4: detected capacity change from 0 to 128 [ 94.652504][ T9355] syz.4.417: attempt to access beyond end of device [ 94.652504][ T9355] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 94.652593][ T9355] syz.4.417: attempt to access beyond end of device [ 94.652593][ T9355] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 94.652660][ T9355] syz.4.417: attempt to access beyond end of device [ 94.652660][ T9355] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 94.652704][ T9355] syz.4.417: attempt to access beyond end of device [ 94.652704][ T9355] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 94.652747][ T9355] syz.4.417: attempt to access beyond end of device [ 94.652747][ T9355] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 94.652789][ T9355] syz.4.417: attempt to access beyond end of device [ 94.652789][ T9355] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 94.652831][ T9355] syz.4.417: attempt to access beyond end of device [ 94.652831][ T9355] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 94.652874][ T9355] syz.4.417: attempt to access beyond end of device [ 94.652874][ T9355] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 94.652915][ T9355] syz.4.417: attempt to access beyond end of device [ 94.652915][ T9355] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 94.652969][ T9355] syz.4.417: attempt to access beyond end of device [ 94.652969][ T9355] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 94.701488][ T9335] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 94.701488][ T9335] [ 94.727829][ T9335] read_mapping_page failed! [ 94.729081][ T9335] ERROR: (device loop0): txAbort: [ 94.729081][ T9335] [ 94.737006][ T6533] bcachefs (loop2): shutting down [ 94.758301][ T9354] loop1: detected capacity change from 0 to 32768 [ 94.760792][ T6533] bcachefs (loop2): shutdown complete [ 94.764866][ T9354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.419 (9354) [ 94.770354][ T9354] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.770422][ T9354] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 94.770453][ T9354] BTRFS info (device loop1): using free-space-tree [ 94.986078][ T6528] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.012167][ T9359] loop0: detected capacity change from 0 to 32768 [ 95.033426][ T9372] loop4: detected capacity change from 0 to 32768 [ 95.061331][ T9372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.422 (9372) [ 95.067351][ T9359] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 95.078143][ T9372] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.078209][ T9372] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 95.078242][ T9372] BTRFS info (device loop4): using free-space-tree [ 95.108921][ T9359] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.111890][ T7885] (kworker/u8:10,7885,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 95.136146][ T9372] BTRFS info (device loop4): rebuilding free space tree [ 95.910722][ T6536] ocfs2: Unmounting device (7,0) on (node local) [ 95.940525][ T9405] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.973944][ T6537] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.004224][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 96.004277][ T9407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.425'. [ 96.099267][ T9394] loop3: detected capacity change from 0 to 32768 [ 96.109613][ T9394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.424 (9394) [ 96.129665][ T9394] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.129704][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 96.130191][ T9416] netlink: 64 bytes leftover after parsing attributes in process `syz.1.430'. [ 96.134388][ T9394] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 96.136302][ T9394] BTRFS info (device loop3): using free-space-tree [ 96.174342][ T9434] loop1: detected capacity change from 0 to 1024 [ 96.458988][ T9434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.465020][ T9434] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 96.504975][ T6528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.513322][ T9411] loop0: detected capacity change from 0 to 32768 [ 96.515411][ T9411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.429 (9411) [ 96.518881][ T9411] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.520808][ T9411] BTRFS info (device loop0): using sha256 (sha256-arm64) checksum algorithm [ 96.522540][ T9411] BTRFS error (device loop0): superblock checksum mismatch [ 96.524241][ T9411] BTRFS error (device loop0): open_ctree failed: -22 [ 96.607870][ T6529] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.680532][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'. [ 96.733764][ T9453] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 96.734782][ T9453] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 96.812018][ T9447] loop1: detected capacity change from 0 to 32768 [ 96.813980][ T9447] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.434 (9447) [ 96.823758][ T9447] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.823848][ T9447] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 96.823894][ T9447] BTRFS info (device loop1): using free-space-tree [ 96.874495][ T9462] overlay: filesystem on ./file0 not supported as upperdir [ 96.876587][ T9462] overlay: filesystem on ./file0 not supported as upperdir [ 96.878201][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 97.018890][ T9482] loop4: detected capacity change from 0 to 256 [ 97.141145][ T9486] loop3: detected capacity change from 0 to 512 [ 97.143305][ T9486] EXT4-fs: Ignoring removed nobh option [ 97.171110][ T9486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.317916][ T9486] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.440: iget: bad i_size value: 38620345925642 [ 97.318904][ T9486] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.440: couldn't read orphan inode 15 (err -117) [ 97.332579][ T9486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.363359][ T6528] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.508062][ T9491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.444'. [ 97.508108][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.444'. [ 97.508143][ T9491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.444'. [ 97.508168][ T9491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.444'. [ 97.619651][ T9497] loop2: detected capacity change from 0 to 4096 [ 97.634000][ T9497] ntfs3(loop2): ino=1a, mi_enum_attr [ 97.647417][ T9460] loop0: detected capacity change from 0 to 131072 [ 97.649244][ T9460] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 97.649309][ T9460] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 97.653595][ T9460] F2FS-fs (loop0): invalid crc value [ 97.720973][ T9497] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 97.721022][ T9497] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.420'. [ 97.743899][ T9497] 9pnet_fd: Insufficient options for proto=fd [ 97.745593][ T9460] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 97.745640][ T9460] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 97.748421][ T9497] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 97.748459][ T9497] netlink: 'syz.2.420': attribute type 4 has an invalid length. [ 97.845123][ T9509] loop1: detected capacity change from 0 to 128 [ 97.883231][ T6529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.282630][ T9534] tmpfs: Bad value for 'size' [ 98.488140][ T9533] binder: 9532:9533 ioctl 540f 20000180 returned -22 [ 98.491302][ T9533] binder: 9532:9533 tried to acquire reference to desc 0, got 1 instead [ 98.495157][ T9533] binder: 9532:9533 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 98.499564][ T9515] loop3: detected capacity change from 0 to 32768 [ 98.500911][ T2311] binder: release 9532:9533 transaction 11 out, still active [ 98.500963][ T2311] binder: undelivered TRANSACTION_COMPLETE [ 98.563285][ T6540] binder: release 9532:9533 transaction 11 in, still active [ 98.564735][ T6540] binder: send failed reply for transaction 11, target dead [ 98.668378][ T9515] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 98.681277][ T9515] allowing incompatible features above 0.0: (unknown version) [ 98.681346][ T9515] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 98.681430][ T9515] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 98.681479][ T9515] bcachefs (loop3): initializing new filesystem [ 98.683189][ T9515] bcachefs (loop3): going read-write [ 98.975940][ T9515] bcachefs (loop3): marking superblocks [ 98.988004][ T9515] bcachefs (loop3): initializing freespace [ 98.998502][ T9515] bcachefs (loop3): done initializing freespace [ 99.107243][ T9553] loop2: detected capacity change from 0 to 40427 [ 99.136817][ T9515] bcachefs (loop3): reading snapshots table [ 99.136886][ T9515] bcachefs (loop3): reading snapshots done [ 99.173128][ T9553] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.191046][ T9515] bcachefs (loop3): loop3: Superblock write was silently dropped! (seq 0 expected 42) [ 99.191764][ T9515] bcachefs (loop3): done starting filesystem [ 99.198977][ T9499] loop4: detected capacity change from 0 to 131072 [ 99.202563][ T9499] F2FS-fs (loop4): invalid crc value [ 99.240283][ T9560] CPU: 1 UID: 0 PID: 9560 Comm: syz.2.459 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 99.240305][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 99.240311][ T9560] Call trace: [ 99.240314][ T9560] show_stack+0x2c/0x3c (C) [ 99.240326][ T9560] __dump_stack+0x30/0x40 [ 99.240338][ T9560] dump_stack_lvl+0xd8/0x12c [ 99.240348][ T9560] dump_stack+0x1c/0x28 [ 99.240358][ T9560] f2fs_handle_critical_error+0x34c/0x4b8 [ 99.240366][ T9560] f2fs_stop_checkpoint+0x5c/0x70 [ 99.240375][ T9560] f2fs_write_end_io+0x58c/0x818 [ 99.240383][ T9560] bio_endio+0x804/0x840 [ 99.240390][ T9560] submit_bio_noacct+0x158/0x176c [ 99.240400][ T9560] submit_bio+0x354/0x4d4 [ 99.240409][ T9560] f2fs_submit_write_bio+0x13c/0x324 [ 99.240416][ T9560] __submit_merged_bio+0x254/0x704 [ 99.240423][ T9560] __submit_merged_write_cond+0x23c/0x4ac [ 99.240429][ T9560] f2fs_write_data_pages+0x1d28/0x2634 [ 99.240437][ T9560] do_writepages+0x270/0x468 [ 99.240448][ T9560] filemap_fdatawrite+0x144/0x1e8 [ 99.240454][ T9560] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 99.240464][ T9560] f2fs_write_checkpoint+0x684/0x1694 [ 99.240474][ T9560] f2fs_issue_checkpoint+0x2e8/0x420 [ 99.240485][ T9560] f2fs_sync_fs+0x1e0/0x4f4 [ 99.240491][ T9560] f2fs_mkdir+0x3d4/0x4d8 [ 99.240496][ T9560] vfs_mkdir+0x284/0x424 [ 99.240503][ T9560] do_mkdirat+0x1f8/0x4c8 [ 99.240508][ T9560] __arm64_sys_mkdirat+0x8c/0xa4 [ 99.240514][ T9560] invoke_syscall+0x98/0x2b8 [ 99.240520][ T9560] el0_svc_common+0x130/0x23c [ 99.240525][ T9560] do_el0_svc+0x48/0x58 [ 99.240530][ T9560] el0_svc+0x58/0x180 [ 99.240538][ T9560] el0t_64_sync_handler+0x84/0x12c [ 99.240544][ T9560] el0t_64_sync+0x198/0x19c [ 99.240663][ T9560] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 99.258390][ T9499] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 99.335730][ T9564] F2FS-fs (loop4): Corrupted max_depth of 3: 16842753 [ 99.357785][ T9564] fscrypt (loop4, inode 8): Error -61 getting encryption context [ 99.424404][ T6529] bcachefs (loop3): shutting down [ 99.424453][ T6529] bcachefs (loop3): going read-only [ 99.424487][ T6529] bcachefs (loop3): finished waiting for writes to stop [ 99.468022][ T6529] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 99.501831][ T9566] loop0: detected capacity change from 0 to 1024 [ 99.532802][ T9566] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 99.535382][ T6529] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 99.538059][ T6529] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 99.539774][ T6529] bcachefs (loop3): marking filesystem clean [ 99.543165][ T9566] FAULT_INJECTION: forcing a failure. [ 99.543165][ T9566] name failslab, interval 1, probability 0, space 0, times 0 [ 99.543290][ T9566] CPU: 1 UID: 0 PID: 9566 Comm: syz.0.462 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 99.543303][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 99.543308][ T9566] Call trace: [ 99.543311][ T9566] show_stack+0x2c/0x3c (C) [ 99.543324][ T9566] __dump_stack+0x30/0x40 [ 99.543336][ T9566] dump_stack_lvl+0xd8/0x12c [ 99.543342][ T9566] dump_stack+0x1c/0x28 [ 99.543349][ T9566] should_fail_ex+0x41c/0x594 [ 99.543356][ T9566] should_failslab+0xc0/0x128 [ 99.543366][ T9566] __kmalloc_noprof+0xf4/0x4c8 [ 99.543372][ T9566] hfsplus_find_init+0x84/0x1bc [ 99.543380][ T9566] hfsplus_readdir+0x19c/0xb3c [ 99.543386][ T9566] iterate_dir+0x458/0x5e0 [ 99.543393][ T9566] __arm64_sys_getdents64+0x110/0x2fc [ 99.543400][ T9566] invoke_syscall+0x98/0x2b8 [ 99.543405][ T9566] el0_svc_common+0x130/0x23c [ 99.543410][ T9566] do_el0_svc+0x48/0x58 [ 99.543415][ T9566] el0_svc+0x58/0x180 [ 99.543422][ T9566] el0t_64_sync_handler+0x84/0x12c [ 99.543427][ T9566] el0t_64_sync+0x198/0x19c [ 99.613461][ T6529] bcachefs (loop3): shutdown complete [ 99.621445][ T9575] loop1: detected capacity change from 0 to 128 [ 99.623027][ T9575] /dev/loop1: Can't open blockdev [ 99.819367][ T9575] loop1: detected capacity change from 0 to 32768 [ 99.823142][ T9575] Smack: duplicate mount options [ 99.945521][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.004955][ T9588] loop1: detected capacity change from 0 to 32768 [ 100.044899][ T9588] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.470 (9588) [ 100.290099][ T9588] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.292387][ T9588] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 100.295262][ T9588] BTRFS info (device loop1): using free-space-tree [ 100.312134][ T9588] BTRFS info (device loop1): rebuilding free space tree [ 100.366760][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 100.368801][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.368857][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.368902][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 100.368927][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.370697][ T9] usb 1-1: config 0 descriptor?? [ 100.872242][ T6528] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.079147][ T9619] loop4: detected capacity change from 0 to 32768 [ 101.089745][ T9619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.474 (9619) [ 101.101223][ T9619] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.101295][ T9619] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 101.101323][ T9619] BTRFS info (device loop4): using free-space-tree [ 101.163593][ T9619] BTRFS info (device loop4): rebuilding free space tree [ 101.204194][ T9646] tipc: Failed to obtain node identity [ 101.204246][ T9646] tipc: Enabling of bearer rejected, failed to enable media [ 101.371266][ T9651] loop1: detected capacity change from 0 to 256 [ 101.374575][ T9651] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.380843][ T9651] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 101.409375][ T9642] loop2: detected capacity change from 0 to 32768 [ 101.410026][ T9642] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.478 (9642) [ 101.411517][ T9642] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 101.411561][ T9642] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 101.411589][ T9642] BTRFS info (device loop2): disk space caching is enabled [ 101.411603][ T9642] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 101.430186][ T9651] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 101.741030][ T9577] loop0: detected capacity change from 0 to 65536 [ 101.752881][ T9577] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 101.758120][ T9642] BTRFS info (device loop2): rebuilding free space tree [ 101.759323][ T9577] XFS (loop0): Ending clean mount [ 101.759851][ T9577] XFS (loop0): Quotacheck needed: Please wait. [ 101.778204][ T9642] BTRFS info (device loop2): disabling free space tree [ 101.778402][ T9642] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.779327][ T9577] XFS (loop0): Quotacheck: Done. [ 101.782899][ T9642] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.881922][ T9681] __nla_validate_parse: 1 callbacks suppressed [ 101.883124][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 101.900081][ T9683] loop3: detected capacity change from 0 to 128 [ 101.912083][ T6537] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.919829][ T6533] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 102.067445][ T9698] warning: `syz.4.488' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.082739][ T9] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 102.124345][ T9700] loop2: detected capacity change from 0 to 512 [ 102.137728][ T9700] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.146284][ T9700] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.487: invalid indirect mapped block 4294967295 (level 0) [ 102.147898][ T9700] EXT4-fs (loop2): Remounting filesystem read-only [ 102.148678][ T9700] EXT4-fs (loop2): 1 orphan inode deleted [ 102.148702][ T9700] EXT4-fs (loop2): 1 truncate cleaned up [ 102.149150][ T9700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.164804][ T9708] loop3: detected capacity change from 0 to 512 [ 102.193249][ T9708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.293285][ T6533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.325197][ T9720] xt_hashlimit: size too large, truncated to 1048576 [ 102.401215][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 102.765159][ T2311] usb 1-1: USB disconnect, device number 6 [ 102.808391][ T9729] loop1: detected capacity change from 0 to 128 [ 102.858066][ T9732] loop1: detected capacity change from 0 to 16 [ 102.859703][ T9718] loop4: detected capacity change from 0 to 32768 [ 102.975291][ T9718] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 102.980532][ T9718] allowing incompatible features above 0.0: (unknown version) [ 102.982367][ T9718] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 103.024205][ T9718] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 103.024313][ T9718] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 103.024388][ T9718] bcachefs (loop4): Version upgrade required: [ 103.024388][ T9718] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 103.024388][ T9718] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 103.024388][ T9718] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 103.028056][ T6529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.043739][ T9718] bcachefs (loop4): dropping and reconstructing all alloc info [ 103.050879][ T9718] bcachefs (loop4): accounting_read... [ 103.073629][ T9747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.499'. [ 103.119421][ T9718] done [ 103.119559][ T9718] bcachefs (loop4): alloc_read... done [ 103.349727][ T9718] bcachefs (loop4): snapshots_read... [ 103.351836][ T6536] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 103.356069][ T9750] FAULT_INJECTION: forcing a failure. [ 103.356069][ T9750] name failslab, interval 1, probability 0, space 0, times 0 [ 103.356268][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: syz.3.499 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 103.356277][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 103.356281][ T9750] Call trace: [ 103.356284][ T9750] show_stack+0x2c/0x3c (C) [ 103.356296][ T9750] __dump_stack+0x30/0x40 [ 103.356305][ T9750] dump_stack_lvl+0xd8/0x12c [ 103.356312][ T9750] dump_stack+0x1c/0x28 [ 103.356318][ T9750] should_fail_ex+0x41c/0x594 [ 103.356324][ T9750] should_failslab+0xc0/0x128 [ 103.356332][ T9750] kmem_cache_alloc_noprof+0x80/0x3e8 [ 103.356337][ T9750] skb_clone+0x1b4/0x328 [ 103.356345][ T9750] __netlink_deliver_tap+0x36c/0x708 [ 103.356352][ T9750] netlink_deliver_tap+0x1ac/0x1b0 [ 103.356357][ T9750] netlink_unicast+0x5f8/0x830 [ 103.356362][ T9750] netlink_sendmsg+0x648/0x930 [ 103.356367][ T9750] ____sys_sendmsg+0x490/0x7b8 [ 103.356373][ T9750] ___sys_sendmsg+0x204/0x278 [ 103.356380][ T9750] __sys_sendmmsg+0x1f4/0x548 [ 103.356386][ T9750] __arm64_sys_sendmmsg+0xa0/0xbc [ 103.356393][ T9750] invoke_syscall+0x98/0x2b8 [ 103.356398][ T9750] el0_svc_common+0x130/0x23c [ 103.356402][ T9750] do_el0_svc+0x48/0x58 [ 103.356407][ T9750] el0_svc+0x58/0x180 [ 103.356413][ T9750] el0t_64_sync_handler+0x84/0x12c [ 103.356418][ T9750] el0t_64_sync+0x198/0x19c [ 103.379657][ T9718] done [ 103.379696][ T9718] bcachefs (loop4): check_allocations... done [ 103.411704][ T9718] bcachefs (loop4): going read-write [ 103.441210][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.499'. [ 103.447828][ T9718] bcachefs (loop4): done starting filesystem [ 103.454405][ T9718] FAULT_INJECTION: forcing a failure. [ 103.454405][ T9718] name failslab, interval 1, probability 0, space 0, times 0 [ 103.454455][ T9718] CPU: 0 UID: 0 PID: 9718 Comm: syz.4.495 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 103.454469][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 103.454474][ T9718] Call trace: [ 103.454477][ T9718] show_stack+0x2c/0x3c (C) [ 103.454487][ T9718] __dump_stack+0x30/0x40 [ 103.454496][ T9718] dump_stack_lvl+0xd8/0x12c [ 103.454503][ T9718] dump_stack+0x1c/0x28 [ 103.454509][ T9718] should_fail_ex+0x41c/0x594 [ 103.454515][ T9718] should_failslab+0xc0/0x128 [ 103.454523][ T9718] kmem_cache_alloc_noprof+0x80/0x3e8 [ 103.454528][ T9718] getname_flags+0xb4/0x470 [ 103.454535][ T9718] __arm64_sys_renameat2+0xc0/0xf4 [ 103.454541][ T9718] invoke_syscall+0x98/0x2b8 [ 103.454546][ T9718] el0_svc_common+0x130/0x23c [ 103.454551][ T9718] do_el0_svc+0x48/0x58 [ 103.454555][ T9718] el0_svc+0x58/0x180 [ 103.454562][ T9718] el0t_64_sync_handler+0x84/0x12c [ 103.454567][ T9718] el0t_64_sync+0x198/0x19c [ 103.493556][ T6537] bcachefs (loop4): shutting down [ 103.493611][ T6537] bcachefs (loop4): going read-only [ 103.493640][ T6537] bcachefs (loop4): finished waiting for writes to stop [ 103.516422][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 103.536319][ T6537] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 103.536426][ T6537] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 103.543356][ T6537] bcachefs (loop4): unclean shutdown complete, journal seq 11 [ 103.544227][ T6537] bcachefs (loop4): done going read-only, filesystem not clean [ 103.563881][ T6537] bcachefs (loop4): shutdown complete [ 103.662060][ T9772] loop0: detected capacity change from 0 to 128 [ 103.733028][ T9775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.774893][ T9775] loop0: detected capacity change from 0 to 1024 [ 103.775592][ T9775] EXT4-fs: Ignoring removed oldalloc option [ 103.775620][ T9775] ext4: Unknown parameter 'euid<00000000000980643439' [ 103.829765][ T9778] binder: BINDER_SET_CONTEXT_MGR already set [ 103.829960][ T9778] binder: 9777:9778 ioctl 4018620d 200002c0 returned -16 [ 103.830195][ T9778] binder: 9777:9778 got transaction to invalid handle, 1 [ 103.830262][ T9778] binder: 9778:9777 cannot find target node [ 103.830280][ T9778] binder: 9777:9778 transaction call to 0:0 failed 14/29201/-22, code 0 size 0-0 line 3152 [ 103.830413][ T9778] binder: 9777:9778 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 103.830442][ T9778] binder: 9777:9778 ioctl c0306201 20000240 returned -11 [ 103.834471][ T9778] binder: 9777:9778 got reply transaction with no transaction stack [ 103.834497][ T9778] binder: 9777:9778 transaction reply to 0:0 failed 15/29201/-71, code 0 size 0-0 line 3053 [ 103.834923][ T3915] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.889178][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.056983][ T9781] loop1: detected capacity change from 0 to 64 [ 104.059388][ T9781] hfs: Unknown parameter '' [ 104.141511][ T9788] FAULT_INJECTION: forcing a failure. [ 104.141511][ T9788] name failslab, interval 1, probability 0, space 0, times 0 [ 104.145107][ T9788] CPU: 0 UID: 0 PID: 9788 Comm: syz.0.512 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 104.145130][ T9788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 104.145136][ T9788] Call trace: [ 104.145140][ T9788] show_stack+0x2c/0x3c (C) [ 104.145155][ T9788] __dump_stack+0x30/0x40 [ 104.145170][ T9788] dump_stack_lvl+0xd8/0x12c [ 104.145178][ T9788] dump_stack+0x1c/0x28 [ 104.145187][ T9788] should_fail_ex+0x41c/0x594 [ 104.145195][ T9788] should_failslab+0xc0/0x128 [ 104.145204][ T9788] kmem_cache_alloc_noprof+0x80/0x3e8 [ 104.145210][ T9788] p9_client_prepare_req+0x164/0xe34 [ 104.145219][ T9788] p9_client_rpc+0x15c/0x944 [ 104.145225][ T9788] p9_client_create+0x810/0xdc8 [ 104.145230][ T9788] v9fs_session_init+0x190/0x149c [ 104.145238][ T9788] v9fs_mount+0xd0/0x8d4 [ 104.145243][ T9788] legacy_get_tree+0xd4/0x16c [ 104.145249][ T9788] vfs_get_tree+0x90/0x28c [ 104.145255][ T9788] do_new_mount+0x228/0x814 [ 104.145260][ T9788] path_mount+0x5b4/0xde0 [ 104.145265][ T9788] __arm64_sys_mount+0x3e8/0x468 [ 104.145270][ T9788] invoke_syscall+0x98/0x2b8 [ 104.145275][ T9788] el0_svc_common+0x130/0x23c [ 104.145280][ T9788] do_el0_svc+0x48/0x58 [ 104.145284][ T9788] el0_svc+0x58/0x180 [ 104.145290][ T9788] el0t_64_sync_handler+0x84/0x12c [ 104.145295][ T9788] el0t_64_sync+0x198/0x19c [ 104.203395][ T9789] pim6reg: entered allmulticast mode [ 104.211307][ T9789] x_tables: duplicate underflow at hook 3 [ 104.291755][ T9798] loop0: detected capacity change from 0 to 128 [ 104.334738][ T9802] loop0: detected capacity change from 0 to 128 [ 104.604028][ T9815] mmap: syz.1.523 (9815) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.630940][ T9815] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1f pfn:0x13f9f8 [ 104.633378][ T9815] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 104.635111][ T9815] memcg:ffff0000db428000 [ 104.636254][ T9815] flags: 0x5ffc00000000041(locked|head|node=0|zone=2|lastcpupid=0x7ff) [ 104.638021][ T9815] raw: 05ffc00000000041 0000000000000000 dead000000000122 0000000000000000 [ 104.640204][ T9815] raw: 000000000000001f 0000000000000000 00000001ffffffff ffff0000db428000 [ 104.641916][ T9815] head: 05ffc00000000041 0000000000000000 dead000000000122 0000000000000000 [ 104.643643][ T9815] head: 000000000000001f 0000000000000000 00000001ffffffff ffff0000db428000 [ 104.645252][ T9815] head: 05ffc00000000203 fffffdffc3fe7e01 00000000ffffffff 00000000ffffffff [ 104.647650][ T9815] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 104.649725][ T9815] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 104.651360][ T9815] ------------[ cut here ]------------ [ 104.651373][ T9815] kernel BUG at mm/filemap.c:868! [ 104.651509][ T9815] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 104.654067][ T9815] Modules linked in: [ 104.654661][ T9815] CPU: 0 UID: 0 PID: 9815 Comm: syz.1.523 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 104.656417][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2025 [ 104.658009][ T9815] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 104.659265][ T9815] pc : __filemap_add_folio+0xdd0/0x1034 [ 104.660148][ T9815] lr : __filemap_add_folio+0xdd0/0x1034 [ 104.661058][ T9815] sp : ffff80009d666e00 [ 104.661776][ T9815] x29: ffff80009d666f40 x28: 000000000010002b x27: dfff800000000000 [ 104.663095][ T9815] x26: 0000000000000003 x25: ffff80009d666ec0 x24: ffff0000c1549f88 [ 104.664414][ T9815] x23: 0000000000000004 x22: ffff700013accdd4 x21: fffffdffc3fe7e00 [ 104.665682][ T9815] x20: 0000000000000003 x19: 05ffc00000000041 x18: 1fffe000337d1c76 [ 104.666950][ T9815] x17: 6e697070616d203c x16: ffff80008ae69508 x15: ffff700011ee0158 [ 104.668279][ T9815] x14: 1ffff00011ee0158 x13: 0000000000000004 x12: ffffffffffffffff [ 104.669582][ T9815] x11: ffff700011ee0158 x10: 0000000000ff0100 x9 : e73b88fb72375a00 [ 104.671000][ T9815] x8 : e73b88fb72375a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 104.672399][ T9815] x5 : ffff80009d666518 x4 : ffff80008f776bc0 x3 : ffff80008054bdfc [ 104.673728][ T9815] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 000000000000005b [ 104.675034][ T9815] Call trace: [ 104.675574][ T9815] __filemap_add_folio+0xdd0/0x1034 (P) [ 104.676480][ T9815] filemap_add_folio+0xe8/0x298 [ 104.677221][ T9815] page_cache_ra_order+0x588/0xb34 [ 104.678025][ T9815] page_cache_async_ra+0x61c/0x710 [ 104.678819][ T9815] filemap_fault+0x564/0x1280 [ 104.679560][ T9815] __do_fault+0x1fc/0x4cc [ 104.680295][ T9815] handle_mm_fault+0x2c94/0x4d38 [ 104.681043][ T9815] do_page_fault+0x57c/0x13cc [ 104.681731][ T9815] do_translation_fault+0xc4/0x114 [ 104.682501][ T9815] do_mem_abort+0x70/0x194 [ 104.683207][ T9815] el1_abort+0x3c/0x5c [ 104.683896][ T9815] el1h_64_sync_handler+0x50/0xfc [ 104.684728][ T9815] el1h_64_sync+0x6c/0x70 [ 104.685419][ T9815] fault_in_readable+0x110/0x1c0 (P) [ 104.686292][ T9815] fault_in_iov_iter_readable+0x1a8/0x2c4 [ 104.687264][ T9815] generic_perform_write+0x654/0x79c [ 104.688125][ T9815] shmem_file_write_iter+0x10c/0x134 [ 104.688966][ T9815] vfs_write+0x62c/0x97c [ 104.689647][ T9815] ksys_write+0x120/0x210 [ 104.690334][ T9815] __arm64_sys_write+0x7c/0x90 [ 104.691097][ T9815] invoke_syscall+0x98/0x2b8 [ 104.691834][ T9815] el0_svc_common+0x130/0x23c [ 104.692544][ T9815] do_el0_svc+0x48/0x58 [ 104.693247][ T9815] el0_svc+0x58/0x180 [ 104.693889][ T9815] el0t_64_sync_handler+0x84/0x12c [ 104.694718][ T9815] el0t_64_sync+0x198/0x19c [ 104.695445][ T9815] Code: b0053361 913c0021 aa1503e0 94033808 (d4210000) [ 104.696453][ T9815] ---[ end trace 0000000000000000 ]--- [ 104.949772][ T9815] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 104.950997][ T9815] SMP: stopping secondary CPUs [ 104.951821][ T9815] Kernel Offset: disabled [ 104.952537][ T9815] CPU features: 0x10000,00001e00,042708a1,5427fea7 [ 104.953599][ T9815] Memory Limit: none [ 105.183639][ T9815] Rebooting in 86400 seconds..